Re: FW: Need Assistance please

2004-05-26 Thread Alan DeKok
"Rivera, Denis" <[EMAIL PROTECTED]> wrote:
> Alan,
> I'd first would like to extend my gratitude for answering my email.

  No need to be nice... I don't bruise easily.

> Alan, the "User" "Change Password" "Administrator" etc., are already part of
> the LDAP schema (under the attribute securityRole) e.g.
> 
> Uid=testuser
>   Attribute   Value
>   securityRoleUsers

  The value should have the operator in it.  e.g. +=Users

> I've modified the file ldap.attrmap as follow (this is the only change I've
> made)
> 
> replyItem Login-LAT-Group securityRole

  That should work.

> I thought by modifying this line to match the LDAP attribute would return
> all values for the user (testuser) in the LDAP schema.

  No.  The operators are still important.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: FW: Need Assistance please

2004-05-27 Thread Rivera, Denis

>> Alan, the "User" "Change Password" "Administrator" etc., are already part

>> of the LDAP schema (under the attribute securityRole) e.g.
>>
>> Uid=testuser
>>  Attribute   Value
>>  securityRoleUsers
Alan DeKok wrote:
>  The value should have the operator in it.  e.g. +=Users
is the value you've mentioned in the LDAP schema (LDAP config file)? Or in
radiusd.conf? or ldap.attrmap? 
 
>> I've modified the file ldap.attrmap as follow (this is the only change
>> I've made)
>> 
>> replyItemLogin-LAT-Group securityRole
>>
>>  That should work.

>> I thought by modifying this line to match the LDAP attribute would return
>> all values for the user (testuser) in the LDAP schema.
Alan DeKok wrote:
>  No.  The operators are still important.
>
>  Alan DeKok.
Alright... so this maybe a misconfiguration in LDAP?

-denis

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html