I changed the users file as you recommended, the ldap.attrmap contains the additional line:

checkItem       User-Category                   primaryGroupID


Unfortunately also in this case only the Reject entry matches, although the primaryGroupID seems to passed to User-Category:
radiusd -AX
.....
rlm_ldap: looking for check items in directory...
ldap_get_values
....
ldap_get_values
rlm_ldap: Adding LDAP attribute primaryGroupID as RADIUS attribute User-Category == 515
ldap_get_values


Did you get the second email I sent. I don't believe you can use that check item from ldap in the users file. Try the ldap-group options I sent over in the last email. That should work for you.



- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to