3.3 Enabling the LDAP Module in the Configuration File

3.3.1 Authorize Section

To enable the ldap module, uncomment it in the authorize section of the /etc/raddb/sitesavailable/default file. To disable it, comment it.

authorize 
    {
          ...
          ...
         #       
         # The ldap module will set Auth-Type to LDAP if it has not 
         # already been set.
         ldap         
         ...
    }

For information on setting up LDAP with FreeRADIUS, refer to the /usr/share/doc/packages/freeradius/ldap_howto.txt and /usr/share/doc/packages/freeradius/rlm_ldap files.

3.3.2 Authentication Section

Uncomment the following under authenticate section of the /etc/raddb/sites-available/default file.

Auth-Type LDAP 
  {
    ldap
  }

3.3.3 Post-Authentication Section

You need to add ldap in the post-authenticate section of the /etc/raddb/sites-available/default file as shown below:

post-auth 
   {
      
    ldap
        Post-Auth-Type REJECT 
            {
              ldap
            }
   }