On 30 Apr 2015, at 17:03, Ben Humpert <ben@an3k.de> wrote:
Just tried to set tRue ... OpenLDAP throws an error. Only TRUE or FALSE is accepted.
Ok... but this is useful outside of LDAP. You can now set any boolean CONF_PAIR in the server to true/false in addition to on/off or yes/no. You can use the most appropriate state description for the context. In regards to using boolean values in LDAP filters, you can't, you're limited to strings as there are no boolean attributes in the server. Even if we did support bools, it would be up to the user to convert the value into something LDAP would accept. Making the server perform different type->string conversions based on where the attribute is being used, would be a complete PITA, and isn't worth considering as the use cases are so small. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2