On 02/10/2012 05:53 PM, Luis Písco wrote:
But the My-Group==2 is not evaluated.
It is not possible to assign a value to an item and use it later on the
users file?
No.
The example you show sets My-Group on the *reply*. The "users" file can
match on request items only.
It is possible get the SID of the group instead of the DN to use to
search on tokenGroups field of the user AD?
As far as I know this is impossible. AD doesn't support it.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
