The following appears to now work, but I don't understand some things: files if (control:Local-Group != "%{NAS-Identifier}" ) { Why does control:Local-Group not need to be enclosed in "%{ }", but NAS-Identifier does? And why does %{ } content need to be within quotes, when the documentation doesn't say anything about them needing to be in quotes? It's clear I must have a call to "files" prior to this in order to populate the "control" list, right? On Mon, Aug 5, 2013 at 5:03 PM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
Diagnostic says: ++? if (control:Local-Group != NAS-Identifier ) -> FALSE
Assuming you're not looking for a literal value 'NAS-Identifier', you want "%{NAS-Identifier}".
If this is a new deployment you should use current HEAD revision in Master. Then you can use the debug_attr expansion to look at list state.
update request { Tmp-String-0 := "%{debug_attr:control:}" }
Also could you please stop posting snippets of debug output and paste the whole thing...
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html