Boudjoudad Abdelkader wrote:
Hi Rob,
Thank you for the quick response, i;m looking to write an ldap query to
get the group name of the user, do you have any idea about that ?
Like I said, I know literally zero about radius. I don't know how it
constructs its queries.
rob
On Fri, Mar 15, 2019 at 2:44 PM Rob Crittenden <rcritten(a)redhat.com
<mailto:rcritten@redhat.com>> wrote:
Boudjoudad Abdelkader via FreeIPA-users wrote:
> Hello Alexander and all,
> Can you someone please let me know what's the group object in LDAP 389
> DS ? I have this path to search the groups but it's not returning
results:
>
> |In /etc/raddb/mods-enabled/ldap: ldap { server =
> 'freeipa.dc=server,dc=example,dc=com # port = 389 # identity =
> 'cn=admin,dc=server,dc=example,dc=com' # password = mypass base_dn =
> 'cn=users,cn=accounts,dc=server,dc=example,dc=com' ... } group {
base_dn
> = 'cn=groups,cn=accounts,dc=server,dc=example,dc=com'
dc=example,dc=com
> name_attribute = cn membership_filter =
>
"(|(member=%{control:Ldap-UserDn})(memberUid=%{%{Stripped-User-Name}:-%{User-Name}}))"
> membership_attribute = memberOf ... }
>
> |
>
> |What i'm missing in group base_dn path ?
I know zero about radius but...
You are mixing RFCs here.
For the filter the memberuid will never return anything because that
schema is not used. I don't know what the variables mean so can't
suggest a fix.
I also don't know what membership_attribute means in this context. If
you are looking for members of the group you want member.
memberOf denotes that this group is a member of another group.
rob