ldap filter depending on NAS

Alan DeKok aland at deployingradius.com
Tue Apr 21 16:14:25 CEST 2009


Matthieu Lazaro wrote:
> It all happens as if the "if () { ... } else { ... } " is completely
> ignored
> (and thus it defaults to check if the uid exists)

  Yes.

> (ie: neither filter1 nor filter2 appears when debugging.
>  But when we only put filter, it appears when debugging)
> 
> I think I'm missing a lot of details in the configuration and I have not
> figured out how to do this with hints|huntgroups|clients files.
> Any help on why this is not working or an other simple solution is welcome.

  You cannot dynamically change the module configuration.  Those are
static.  The "unlang" policies can only go in the "authorize",
"authenticate", etc. sections.

  Alan DeKok.



More information about the Freeradius-Users mailing list