LDAP-defined huntrgroups: docs, pointers, anything?

Jostein Fossheim via Freeradius-Users <[email protected]>
Newsgroups gmane.comp.freeradius.user,gmane.comp.freeradius.devel
Message-ID <[email protected]>
Hello all

We are working on a setup with freeradius using freeipa's ldap-server as 
a backend for freeradius.

I have successufully expanded det LDAP-schema with radius-attributes, etc.

Users, usergroups and clients (IPs and secrets) can be defined via ldap. 
I am hoping to be able to define huntgroups as well, but I have not 
found any detailed information on how to procceed. There is this howto 
for SQL-based backends, and random searches and LLM-queries don't get me 
any further:

https://wiki.freeradius.org/guide/SQL-Huntgroup-HOWTO

I am not certain if this really is a question for the user list or the 
devel list, but I can try both.


More details:
I was hoping to use a standard memberOf in my client-definition.

CLIENT:

dn: fqdn=[NAS-NAME].[base_domain],cn=computers,cn=accounts,[base_dn]
objectClass: ieee802Device
objectClass: ipaHost
objectClass: ipaObject
objectClass: ipaService
objectClass: ipaSshGroupOfPubKeys
objectClass: ipaSshHost
objectClass: krbPrincipal
objectClass: krbPrincipalAux
objectClass: nsHost
objectClass: pkiUser
objectClass: radiusClient
objectClass: radiusProfile
objectClass: top
cn: [FQDN]
fqdn: [FQDN]
memberOf: cn=radius_huntgroup,cn=hostgroups,cn=accounts,[base_dn]
radiusClientSecret: Testing321
radiusClientIPAddress: 192.168.0.80
serverHostName: [NAS-NAME]

"HOST/HUNTGROUP":



dn: cn=radius_huntgroup,cn=hostgroups,cn=accounts,[base_dn]
objectClass: groupOfNames
objectClass: ipahostgroup
objectClass: ipaobject
objectClass: mepOriginEntry
objectClass: nestedGroup
objectClass: top
cn: radius_huntgroup
member: fqdn=[NAS-NAME].[base_domain],cn=computers,cn=accounts,[base_dn]


So basically I want one huntgroup entry, for every group defined inn:
cn=hostgroups,cn=accounts,[base_dn]

With NASes defined in:
cn=computers,cn=accounts,[base_dn]

And their relevant IP addresses:
radiusClientIPAddress: 192.168.0.80

There are some very old posts, in the mailinglist discussing similar 
topics, but I am not found anything usefull there neither.

-- 
Best Regards

Jostein Fossheim

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.