21 Nov
2017
21 Nov
'17
8:15 a.m.
On Nov 21, 2017, at 4:54 AM, luckydog xf <luckydogxf@gmail.com> wrote:
switch statement in post-auth section doesn't work, see below.
Yes, they do work. There are tests that run every day for them.
============= switch &LDAP-Group {
You can't look at the value of LDAP-Group like that. You can do: if (LDAP-Group == "admins") ... That checks of the user is part of the "admins" group. But the user may be part of tens to thousands of LDAP groups. All of those values are stored in the LDAP server, not in FreeRADIUS Change the "switch" to use if / else, and it will work. Alan DeKok.