Servidor FreeRADIUS/Modulo LDAP

Módulo LDAP

Arquivo de configuração do módulo LDAP /etc/freeradius/modules/ldap .

# Consulta Alunos
ldap ldapalunos{
   server = "XXX.XXX.XXX.XXX"                                        # IP do servidor LDAP.
   identity = "CN=USUARIO,CN=Users,DC=canoas,DC=ifrs,DC=edu,DC=br"   # Usuário para conectar no LDAP.
   password = senha
   basedn = "DC=canoas,DC=ifrs,DC=edu,DC=br"
   filter = "(&(sAMAccountName=%{mschap:User-Name})(memberOf=CN=alunos,OU=Groups,DC=canoas,DC=ifrs,DC=edu,DC=br))"   # Filtro de pesquisa no LDAP.
   ldap_connections_number = 15
   max_uses = 0
   port = 389
   timeout = 4
   timelimit = 3
   net_timeout = 1
   tls {
        start_tls = no
       }
   dictionary_mapping = ${confdir}/ldap.attrmap
   edir_account_policy_check = no
   chase_referrals = no
   rebind = yes
   keepalive {
              idle = 60
              probes = 3
              interval = 3
             }
  }
# Consulta Administrativos
ldap ldapadministrativos {
   server = "XXX.XXX.XXX.XXX"                
   identity = "CN=USUARIO,CN=Users,DC=canoas,DC=ifrs,DC=edu,DC=br"
   password = senha
   basedn = "DC=canoas,DC=ifrs,DC=edu,DC=br"
   filter = "(&(sAMAccountName=%{mschap:User-Name})(objectClass=user)(objectCategory=person)  # O filtro completo deve fica na mesma linha.
             (|(memberOf=CN=administrativos,OU=Groups,DC=canoas,DC=ifrs,DC=edu,DC=br)
             (memberOf=CN=professores,OU=Groups,DC=canoas,DC=ifrs,DC=edu,DC=br)
             (memberOf=CN=terceirizados,OU=Groups,DC=canoas,DC=ifrs,DC=edu,DC=br)
             (memberOf=CN=outros,OU=Groups,DC=canoas,DC=ifrs,DC=edu,DC=br)))"
   ldap_connections_number = 15
   max_uses = 0
   port = 389
   timeout = 4
   timelimit = 3
   net_timeout = 1
   tls {
        start_tls = no
       }
   dictionary_mapping = ${confdir}/ldap.attrmap
   edir_account_policy_check = no
   chase_referrals = no
   rebind = yes
   keepalive {
              idle = 60
              probes = 3
              interval = 3
             }
  }