On Wed, 30 Nov 2005, Alhagie Puye wrote:

Ok, So I played around some more with the settings.

Actually "group" and "groupofnames" are not correct attributes for user.

It is supposed to be "memberof". So I changed line in ldap.attrmap to
look like:

replyItem       Class                           memberof

Now I'm getting replyItems but the data looks like garbage. I want it to
return the group name.


You are returning CN as the class in your radius packet.

Class = CN

Class is not a string, its an octet so what you are seeing 434e is really CN. You must be returning something like

memberof: CN=somegroup,ou=someou,...

It seems like rlm_ldap is stripping anything after that = sign. You should check the bugs db and see if you can find something like this.



- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to