A.L.M.Buxey@lboro.ac.uk wrote:
realm.com Session-Timeout <= 28800, Idle-Timeout <= 600, Tunnel-Medium-Type == IEEE-802, Tunnel-Type == VLAN, Tunnel-Private-Group-Id == testvlan
this works...and allows ONLY 'testvlan' attribute to be returned but I also need to accept 'othervlan' and a structure of
Tunnel-Private-Group-Id =~ ( /^testvlan$/ || /^othervlan$/ )
doesnt do what i need. is this do-able in attribute filter or can I construct something in unlang (this is a 2.0.0pre2 server)
It's not doable in the attr_filter module, which is mostly a re-branded "users" file. It is possible in CVS head (not in the 2.0.0-pre2 release). See "man unlang" for filtering attributes. Although those filtering attributes SHOULD really be split into separate "permit" and "deny" sections, and shouldn't go into "update". Alan DeKok.