Re: avoiding ldap access in authorize

2011-09-30 Thread Alexander Clouter
Fred wrote: > > If I want to test those values, i used to to something like : > if ( Ldap-Group == "AdminRW ) { do something } > > This makes a new ldap access to be done by the server for an array > attribute which has already been retrieved by server. > Is there any other way to check those (al

avoiding ldap access in authorize

2011-09-29 Thread Fred
Hi all, When using ldap with freeradius, radiusGroupName attributes can be retrived during execution of ldap module. groupname_attribute = "radiusGroupName" groupmembership_filter = "(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectclass=radiusProfile))" groupmembership