X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=doc%2Frlm_ldap;h=5a2e61ea22d3031add2f283047999e77052d6114;hb=HEAD;hp=00331f2367f957d350baa36db4c02b980770e297;hpb=943ce0c6b56fb5ae6a741e5447fddd7c17ba07b3;p=freeradius.git diff --git a/doc/rlm_ldap b/doc/rlm_ldap index 00331f2..5a2e61e 100644 --- a/doc/rlm_ldap +++ b/doc/rlm_ldap @@ -13,7 +13,7 @@ the "dictionary" file. The mapping between radius and ldap attributes is in raddb/ldap.attrmap. You should edit the file and add any new mapping which you need. The schema files -is located in doc/RADIUS-LDAPv3.schema. Before adding any radius attributes +is located in doc/examples/openldap.schema. Before adding any radius attributes the ldap server schema should be updated. All ldap entries containing radius attributes should contain at least "objectclass: radiusprofile" @@ -249,11 +249,6 @@ the rlm_ldap module: } } -NOTE: As LDAP is case insensitive, you should probably also set "lower_user = -yes" and "lower_time = before" in main section of radiusd.conf, to get limits -on simultaneous logins working correctly. Otherwise, users will be able get -large number of sessions, capitalizing parts of their login names. - MODULE MESSAGES: On user rejection rlm_ldap will return the following module messages: @@ -342,7 +337,7 @@ The "users" file won't work, because it can't add items to the request. DIRECTORY COMPATIBILITY NOTE: If you use LDAP only for authorization and -authentication (e.g. you can not afford schema extention), I propose to set +authentication (e.g. you can not afford schema extension), we suggest you set all necessary attributes in raddb/users file with following authorize section of radiusd.conf :