I am trying to create a new checkItem using an attribute stored in LDAP.
I would like radius to check ldap to see if the attribute exists for a
user and if it does, not assign a radiusPoolName. I have a
radiusSNSEnable attribute setup in ldap and in the dictionary files as a
check item.
I have done lots of testing and googling and I have not found a clean
solution that works. Below is the entry from my users file:
DEFAULT SNS-Enable != "1"
USR-Framed_IP_Address_Pool_Name = "BLACKHOLE1",
Idle-Timeout := "120",
Fall-Through = Yes
Correct me if I'm wrong but that should mean, if the SNS-Enable attribute
does not equal 1, assign the USR-Framed_IP_Address_Pool_Name and
Idle-Timeout. I have SNS-Enable as a checkItem mapped to radiusSNSEnable
in the ldap.attrmap.
Does anyone have a solution for this? Could it be a processing order
problem that I'm seeing? Does it process the users file and then LDAP so
it's not checking or assigning the variable properly? If I set
radiusSNSEnable as a replyItem I see it in the radius reply so I know it's
getting the value.
Thanks in advance for anyone that can help.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
