modules {
   ldap {
      server = "ldap.domain.de"
      identity = "cn=freeradius,ou=admins,ou=radius,dc=domain,dc=de"
      password = secret
      basedn = "ou=users,ou=radius,dc=domain,dc=de"
      filter = "(&(uid=%{Stripped-User-Name:-%{User-Name}})(objectclass=radiusprofile))"
      start_tls = no
      dictionary_mapping = ${raddbdir}/ldap.attrmap
      password_attribute = userPassword
   }
}

authorize {
   preprocess
   ldap
   eap
   suffix
   files
}

authenticate {
   eap
}