Rob Brickhouse wrote:
> I am setting up freeradius 2.1.6 and seem to be stuck on how do I go
> about setting up my ldap module to search multiple basedn if the user is
> not found in the first? I have four that I need to search in my LDAP
> tree but cannot figure out the correct way to make it search more than
> one. I feel like this is probably something simple I'm missing but can't
> seem to see it atm.
There's no simple way to do that. The intent of the LDAP module is to
have *one* set of users. Instead, you want fail-over for LDAP searches:
search BASEDN A, and stop if the user is found
otherwise, search BASEDN B, and stop if the user is found
otherwise....
That's complicated. I suggest looking to see if your LDAP server can
provide a "view" that is the union of the 4 basedns.
Otherwise, maybe write a Perl script, or simply configure 4 copies of
the LDAP module, and then do the fail-over config in FreeRADIUS.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
