Boudjoudad Abdelkader via FreeIPA-users wrote:
> Hello Alexander and all,
> Can you someone please let me know what's the group object in LDAP 389
> DS ? I have this path to search the groups but it's not returning results:
>
> |In /etc/raddb/mods-enabled/ldap: ldap { server =
> 'freeipa.dc=server,dc=example,dc=com # port = 389 # identity =
> 'cn=admin,dc=server,dc=example,dc=com' # password = mypass base_dn =
> 'cn=users,cn=accounts,dc=server,dc=example,dc=com' ... } group { base_dn
> = 'cn=groups,cn=accounts,dc=server,dc=example,dc=com' dc=example,dc=com
> name_attribute = cn membership_filter =
> "(|(member=%{control:Ldap-UserDn})(memberUid=%{%{Stripped-User-Name}:-%{User-Name}}))"
> membership_attribute = memberOf ... }
>
> |
>
> |What i'm missing in group base_dn path ?
I know zero about radius but...
You are mixing RFCs here.
For the filter the memberuid will never return anything because that
schema is not used. I don't know what the variables mean so can't
suggest a fix.
I also don't know what membership_attribute means in this context. If
you are looking for members of the group you want member.
memberOf denotes that this group is a member of another group.
rob
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
