Hi Ivan,
I agree with you. But I am reading those attributes from LDAP. In LDAP "entitlements" attribute is defined as Multivalue (array). I can't not change the existing LDAP structure.
I am mapping "entitlements" attribute from LDAP with the radius attribute rEntitlements in the ldap.attrmap
replyItem rEntitlements entitlements +=
which is good so far. But I don't need entire array from LDAP as reply just looking for WIFILOC1 and send that as reply.
Please let me know if you need more information.
Thanks so much.
Regards.
--- On Thu, 10/9/08, tnt@kalik.net <tnt@kalik.net> wrote:
From: tnt@kalik.net <tnt@kalik.net>
Subject: Re: Radius reply multivalue VSA question.
To: freeradius-users@lists.freeradius.org
Date: Thursday, October 9, 2008, 11:40 AM
> Thanks for the reply. After changing the operator += I am still seeing
all the VARRAY in the reply. It should reply back only
>Sending Access-Accept of id 65 to 216.121.193.1 port 49266
>
> rEntitlements += "WIFILOC1"
>
> rAttribute1 = "11111"
>
> rCidx = "11111"
>
>and not as it is happening now....
>
So why did you put those other rEntitlements into the user profile. If
they are not the same thing they shold have different attribute names.
Ivan Kalik
Kalik Informatika
ISP
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
|