Checking ldap-group in post-auth instead of users file ?

[Alan DeKok]

Fred MAISON wrote:
> How can i make checks on ldap radiusgroupnale without using the user
> file ?

  Use attribute comparisons just like the "users" file.

> I have not been able to place somthing like this in the post-auth
> section of inner-tunnel ...
>               if ( "%{control:Ldap-Group}" == "wireless" )  {

  This isn't like the "users" file.

	if (LDAP-Group == "wireless") {
		...
	}

  The extra "${control:...}" text isn't necessary.

  Alan DeKok.