unlang post-auth group-name

Alan DeKok aland at deployingradius.com
Sat Sep 25 21:50:29 CEST 2010


Alan Buxey wrote:
> Hi,
>> That wasn't my intention, I thought pasting the entire sites-available/default and debug output might be frowned upon.
> 
> pasting the config file is not necessary. if you read the docs and the mailing
> list history, you will see that posting the full, complete
> debug output log from 'radiusd -X' is *exactly* what you need to do
> 
>> ++? if ("%{Group-Name}" == "net_su")
...
> the config file says I should check Group-Name

  It says *expand* the value, which is blank as you noted... because
Group-Name only does comparisons.

  And this example is different than what he posted previously.  <sigh>

> so, basically, that value isnt net_su - you need to get the right
> attribute (or ensure it gets populated!) and then your Tmp attribute will be set right
> and everything will be closer to what you want

  Group-Name (and Group) don't get populated, because the user may be a
member of many, many, groups.

  Alan DeKok.



More information about the Freeradius-Users mailing list