Thank you very much for your help, i will post the solution when fixed.
On Fri, Mar 15, 2019 at 4:28 PM Rob Crittenden <rcritten(a)redhat.com> wrote:
Boudjoudad Abdelkader wrote:
> Hi Rob,
> Thank you for the quick response, i;m looking to write an ldap query to
> get the group name of the user, do you have any idea about that ?
Like I said, I know literally zero about radius. I don't know how it
constructs its queries.
rob
>
>
> On Fri, Mar 15, 2019 at 2:44 PM Rob Crittenden <rcritten(a)redhat.com
> <mailto:rcritten@redhat.com>> wrote:
>
> Boudjoudad Abdelkader via FreeIPA-users wrote:
> > Hello Alexander and all,
> > Can you someone please let me know what's the group object in LDAP
389
> > DS ? I have this path to search the groups but it's not returning
> results:
> >
> > |In /etc/raddb/mods-enabled/ldap: ldap { server =
> > 'freeipa.dc=server,dc=example,dc=com # port = 389 # identity =
> > 'cn=admin,dc=server,dc=example,dc=com' # password = mypass base_dn
=
> > 'cn=users,cn=accounts,dc=server,dc=example,dc=com' ... } group {
> base_dn
> > = 'cn=groups,cn=accounts,dc=server,dc=example,dc=com'
> dc=example,dc=com
> > name_attribute = cn membership_filter =
> >
>
"(|(member=%{control:Ldap-UserDn})(memberUid=%{%{Stripped-User-Name}:-%{User-Name}}))"
> > membership_attribute = memberOf ... }
> >
> > |
> >
> > |What i'm missing in group base_dn path ?
>
> I know zero about radius but...
>
> You are mixing RFCs here.
>
> For the filter the memberuid will never return anything because that
> schema is not used. I don't know what the variables mean so can't
> suggest a fix.
>
> I also don't know what membership_attribute means in this context. If
> you are looking for members of the group you want member.
>
> memberOf denotes that this group is a member of another group.
>
> rob
>