two user authentication groups for one AS

[Alan DeKok]

Eric wrote:
> Hi
> There is one VPN server that I want to authenticate some of its users
> with ldap-1
> and others with ldap-2. how should I differ them?

  What is different about the packets for users in ldap-1, and users in
ldap-2?

> I defined:
> DEFAULT Client-IP-Address == 192.168.200.21, Auth-Type := ldap-1,
> Autz-Type := Vpn
> DEFAULT Client-IP-Address == 192.168.200.21, Auth-Type := ldap-2,
> Autz-Type := Vpn
>  
> but it only sees first line.

  Uh... see "man users".  Yes, it only sees the first line, because the
first line matches.

  Alan DeKok.