Re: Escaping regex + character

2013-08-23 Thread Arran Cudbard-Bell
On 22 Aug 2013, at 23:02, Franks Andy (RLZ) IT Systems Engineer andy.fra...@sath.nhs.uk wrote: evluation Well at least it'll evaluate instead of evluate now. In the regex below it's not complaining about the lack of escaping. It's complaining that _-+ or _-\ is not a valid range (I honestly

Re: Escaping regex + character

2013-08-23 Thread Phil Mayers
On 08/23/2013 09:35 AM, Arran Cudbard-Bell wrote: Or if you shift that hyphen one to the right, it'll probably work OK too :) Usually first in the range works: [-.a-z0-9] IIRC + doesn't need to be escaped inside a range, same as . - List info/subscribe/unsubscribe? See

RE: Escaping regex + character

2013-08-23 Thread Franks Andy (RLZ) IT Systems Engineer
Yeh, I read that character classes don't need escaping in quite the same way somewhere, then tried it without escaping but didn't realise it was down to character position. I'll give it a try. Thanks guys. evluation Well at least it'll evaluate instead of evluate now. :-P -Original

Groups in active directory and checks in MySQL

2013-08-23 Thread Atomikramp
: http://www.email.it/f Sponsor: SUPERMARIO: Acquista Peluche e T-shirt Originali su mistercupido.com Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=12899d=20130823 -- Caselle da 1GB, trasmetti allegati fino a 3GB e in piu' IMAP, POP3 e SMTP autenticato? GRATIS solo con Email.it

Re: Mac Auth against LDAP

2013-08-23 Thread Nikolaos Milas
On 14/8/2013 2:39 μμ, Arran Cudbard-Bell wrote: and in sites-enabled/default: authorize { preprocess chap mschap digest suffix Do you need all these? Are you ever going to be doing chap/mschap/digest in the outer server? First, thanks for the reply.

Re: Mac Auth against LDAP

2013-08-23 Thread Arran Cudbard-Bell
1. Can we somehow limit a host to connect to only a particular port/NAS device based on data stored in LDAP attributes (or, respectively, in flat files) and reject it otherwise? Yes. See ldap_xlat http://wiki.freeradius.org/modules/Rlm_ldap Use a query that searches for the value of

Re: Mac Auth against LDAP

2013-08-23 Thread Nikolaos Milas
On 23/8/2013 7:25 μμ, Arran Cudbard-Bell wrote: See ldap_xlathttp://wiki.freeradius.org/modules/Rlm_ldap Use a query that searches for the value of NAS-IP-Address in the user object in a custom attribute. If the query expands to something other than a zero length string, the attribute

Re: Mac Auth against LDAP

2013-08-23 Thread Arran Cudbard-Bell
On 23 Aug 2013, at 18:30, Nikolaos Milas nmi...@noa.gr wrote: On 23/8/2013 7:25 μμ, Arran Cudbard-Bell wrote: See ldap_xlathttp://wiki.freeradius.org/modules/Rlm_ldap Use a query that searches for the value of NAS-IP-Address in the user object in a custom attribute. If the query

Re: Groups in active directory and checks in MySQL

2013-08-23 Thread Alan DeKok
Atomikramp wrote: I'm in a situation now where i can successfully retrieve group membership of users in the active directory LDAP tree using rlm_ldap, and check them against files. OK. so if i have a user with memberOf attribute set to groupA and i set in the raddb/users the following

Re: Groups in active directory and checks in MySQL

2013-08-23 Thread Rampage
Il 23/08/2013 21:31, Alan DeKok ha scritto: Post the debug output. And what do you have in SQL? Hello, thanks for your reply and apologizes for the mistake, unfortunately (depending from the point of view) since it's weekend i won't be able to post any debug log till monday as i didn't bring the