I changed the users file as you recommended, the ldap.attrmap contains the
additional line:
checkItem User-Category primaryGroupID
Unfortunately also in this case only the Reject entry matches, although the
primaryGroupID seems to passed to User-Category:
radiusd -AX
.....
rlm_ldap: looking for check items in directory...
ldap_get_values
....
ldap_get_values
rlm_ldap: Adding LDAP attribute primaryGroupID as RADIUS attribute
User-Category == 515
ldap_get_values
Did you get the second email I sent. I don't believe you can use that
check item from ldap in the users file. Try the ldap-group options I sent
over in the last email. That should work for you.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html