Operator "!=" not allowed for LDAP group comparisons

17 Feb 2025

      Hi, how can I reject an ldap user if it is not member of a group by using the users file?

I tried this:

DEFAULT NAS-Identifier == "openVPN", LDAP-Group != "01-PL-Allow-VPN", Auth-Type := Reject

But in the logs I see this:

ERROR: files: Operator "!=" not allowed for LDAP group comparisons

Rodrigo Antunes