On Aug 9, 2016, at 2:09 PM, Saeed Khademi <saeedji@gmail.com> wrote:
I know that we can not put a SWITCH in ldap file.
And you can't put a switch into the "users" file.
what I meant was to say about my intention toward my current config. another way which I tried and failed was to use a variable. It is possible to use a variable in ldap file.
You can use variables in the base_dn.
----------- in users:
DEFAUL ldap-basedn := switch ( “&Realm” ) {
No. See the documentation for the format of the "users" file.
and then in ldap:
base_dn := "%ldap_basedn"
Again, that's wrong. See "man unlang" for the format of string expansions.
My question is that, is is possible to do this somehow and avoid putting 3 ldap section in mods-available/ldap ?
If you follow the documentation, yes. Alan DeKok.