[Date Prev][Date Next] [Chronological] [Thread] [Top]

Attribute map/substitution



Hi folks,

here is a Captive Portal (from Aruba), and we would like to integrate it with OpenLDAP tu authenticate users (for 802.1x).

The server is a Debian 8, with OpenLDAP 2.4.

I've set up the loglevel, and I see the query in the log:

Sep 27 09:56:50 srv slapd[19709]:     filter: (&(uid=airween)(objectClass=*))
Sep 27 09:56:50 srv slapd[19709]:     attrs:
Sep 27 09:56:50 srv slapd[19709]:  ntPassword
Sep 27 09:56:50 srv slapd[19709]:  lmPassword
Sep 27 09:56:50 srv slapd[19709]:  radiusReplyMessage
Sep 27 09:56:50 srv slapd[19709]:  radiusFilterId
Sep 27 09:56:50 srv slapd[19709]:  userPassword
Sep 27 09:56:50 srv slapd[19709]:  userCertificate
Sep 27 09:56:50 srv slapd[19709]:  sAMAccountName
Sep 27 09:56:50 srv slapd[19709]:  objectSid
Sep 27 09:56:50 srv slapd[19709]:

The problem is, that (for example) ntPassword and lmPassword attributes are doesn't exists (sAMAccountName and objectSid also...).

I thing that the ntPassword is the sambaNTPassword, which is part of the samba.scheme.

But how can I configure the OpenLDAP to server these attributes?

I've found the slapo-rwm manpages, but nothing more useful informations...

Could anybody helps to explain, how rwm's works? What do I need to do with this OpenLDAP (eg. modify the existing config) to solve that problem?

On CP side there isn't any way to change the attributes - as I saw.


Thanks,

a.