Integrating Novell eDirectory with FreeRADIUS

Novell Confidential Manual (ENU) 21 December 2004
# do_xlat = yes
# access_attr_used_for_allow = yes
edir_account_policy_check = yes
}
Example for Creating Multiple Instances of LDAP Module
If you want multiple search bases, you can create multiple LDAP modules, by using the following
syntax in the module section of the radiusd.conf.
modules {
...........
...........
}
ldap ldap1 {
attribute = value
attribute = value
...............
...............
}
ldap ldap2 {
attribute = value
attribute = value
...............
...............
}
ldap ldap3 {
attribute = value
attribute = value
...............
...............
}
You can use the configured modules in authorize, authenticate and post-authenticate sections by
specifying the module name and instance name. For example:
authorize{
.....
.....
ldap ldap1
ldap ldap2
.....
.....
}
Enabling the LDAP Module in the Authorization Section
To enable the LDAP module, you need to comment out the LDAP module in the authorize section
of the install_path/etc/raddb/radiusd.conf file. For information on setting up LDAP with
FreeRADIUS, refer to the /doc/ldap_howto.txt file.
Specifying the LDAP Module in the Post-Authentication Section
You need to add ‘ldap’ in the post-authentication section of the install_path/etc/raddb/radiusd.conf
file as shown below:
Configuring the FreeRADIUS Server to Integrate with eDirectory 15