LDAP filter by OU Group

[Albert K]

Hi,


I need some help to assign VLAN to users from a particular OU of Active
Directory. It does not seems to work.  The code below is the post-auth in
the inner-tunnel.  At the moment, the filter does not work as always get
assigned the VLAN 40.

What else should i do to get the filtering to work?.    Thanks.




post-auth {

ldap

        if (LDAP-Group == "OU=hod,,dc=mycompay,dc=com") {

update reply {

                       Tunnel-Type = VLAN

                       Tunnel-Medium-Type = IEEE-802

                       Tunnel-Private-Group-Id = "30"

    }

      }

else {
       update reply  {

                       Tunnel-Type = VLAN

                       Tunnel-Medium-Type = IEEE-802

                       Tunnel-Private-Group-Id = "40"

                       }

       }
}