bind_dn references need to be double quoted else they're not expanded

diff --git a/raddb/mods-available/ldap b/raddb/mods-available/ldap
index 3d58baa0ccc528aad85ac8857a3c8ef0e447b6f5..a4532c83127d609378e1085b0bf195cb4d6d0e1d 100644 (file)
--- a/raddb/mods-available/ldap
+++ b/raddb/mods-available/ldap
@@ -150,7 +150,7 @@ ldap {
        #
        user {
                #  Where to start searching in the tree for users
-               base_dn = '${..base_dn}'
+               base_dn = "${..base_dn}"
 
                #  Filter for user objects, should be specific enough
                #  to identify a single user object.
@@ -226,7 +226,7 @@ ldap {
        #
        group {
                #  Where to start searching in the tree for groups
-               base_dn = '${..base_dn}'
+               base_dn = "${..base_dn}"
 
                #  Filter for group objects, should match all available
                #  group objects a user might be a member of.
@@ -301,7 +301,7 @@ ldap {
        #
        client {
                #   Where to start searching in the tree for clients
-               base_dn = '${..base_dn}'
+               base_dn = "${..base_dn}"
 
                #
                #  Filter to match client objects