exec-program dependent on ldap attribute values

[Tariq Rashid]

Hi,

I am using the acct_users file to trigger an external script when an accounting start has been received:

DEFAULT Acct-Status-Type == Start
        Exec-Program = "/etc/freeradius/scripts/acct_start.py %{User-Name}" 

I would like however for the script to be called only when an LDAP attribute has a certain values. Is this possible? The user's LDAP profile has already been searched for the user's password in the initial auth request, and possibly in the acct request.

something like the following does not work:

DEFAULT Acct-Status-Type == Start, Account-Status == "inactive"
        Exec-Program = "/etc/freeradius/scripts/acct_start.py %{User-Name}" 

where Account-Status is mapped to the LDAP attribute in the ldap-attrmap file. 

Tariq