Re: help groups and LDAP

2004-11-19 Thread LALOT Dominique
Works well (on debug). But I've juste two more questions: 1. I would like to have a catch all definition if suppannaffectation gives a non existing pool-name I put this in users: DEFAULT Service-Type == Framed-User, Pool-Name := "DEF_pool" Framed-MTU = 1500, Fall-Through = Yes but didn't

Re: help groups and LDAP

2004-11-19 Thread Kostas Kalevras
On Fri, 19 Nov 2004, LALOT Dominique wrote: Works well (on debug). But I've juste two more questions: 1. I would like to have a catch all definition if suppannaffectation gives a non existing pool-name I put this in users: DEFAULT Service-Type == Framed-User, Pool-Name := DEF_pool

Re: help groups and LDAP

2004-11-19 Thread LALOT Dominique
It does not work either, may be I should avoid pools for default IP settings?. I put a value toto in supannaffectation which does not exist as a pool name Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module preprocess

Re: help groups and LDAP

2004-11-19 Thread Kostas Kalevras
On Fri, 19 Nov 2004, LALOT Dominique wrote: It does not work either, may be I should avoid pools for default IP settings?. I put a value toto in supannaffectation which does not exist as a pool name Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0

Re: help groups and LDAP

2004-11-18 Thread LALOT Dominique
Just some words: It's starting to work, but I found that this is case sensitive: DEFAULT Ldap-Group == SCEco, Pool-Name := ScEco_pool So If the user get a group ScEco, it won't work.. Am I obliged to activate regular expression and do: LDAP-Group =~ /sceco/i ?. Or is there a more efficient way?.

Re: help groups and LDAP

2004-11-18 Thread LALOT Dominique
Thanks for all, because it's starting to work. But: I noticed that I call ldap for each group before founding the right one. An for me the group name is just an ldap attr to read. Then when finding the group, for the IP pool, I have to read all the pools even when it return ok. Hopefully, I

Re: help groups and LDAP

2004-11-18 Thread Dustin Doris
What happens if you do this. Add the following to ldap.attrmap checkItem Pool-Name supannaffectation Then remove all those users file entries with Ldap-Group, so it just does an LDAP lookup, not specifically matching on groups. This should pool the supannafecction attribute

help groups and LDAP

2004-11-17 Thread LALOT Dominique
Hello all, I've spent quite a long time trying to understand how freeradius works and trying to get everything I want working. I am using Openldap since 2001 and I've no problems to understand LDAP as I wrote many programs around LDAP. In fact I don't understand how groups are working under

Re: help groups and LDAP

2004-11-17 Thread Dustin Doris
Hello all, I've spent quite a long time trying to understand how freeradius works and trying to get everything I want working. I am using Openldap since 2001 and I've no problems to understand LDAP as I wrote many programs around LDAP. In fact I don't understand how groups are working under

Re: help groups and LDAP

2004-11-17 Thread LALOT Dominique
Thanks, I have to leave, but the quick and last test I did with your advice, gave me bad results. See tomorrow.. Using radtest, I don't get any IP, and there is very little doc about ippool and the way it works. I suppose that the NAS is completely relying on radius for IP delivery. I'm

Re: help groups and LDAP

2004-11-17 Thread Dustin Doris
You'll still need to configure the ippool modules and include those in the accounting section and post-auth section. Forgot to include that in the last email. A radiusd -X will show you exactly what is going on. If it doesn't work, please post that to the list will all output. ie: accounting