Re: Checking ldap-group in post-auth instead of users file ?

Fred MAISON wrote:

I surely misunderstand something : in my test : User is found on ldap in group wireless, but (Ldap-Group != "wireless") evaluates to TRUE ...

Err.... that's fairly broken right now. Try: if (!(LDAP-Group == "wireless")) { ... The reasons for this nonsense are buried inside of the rlm_ldap module. As always, patches are welcome. :) Alan DeKok.