17 Feb
2025
17 Feb
'25
1:42 p.m.
On Feb 17, 2025, at 1:32 PM, Rodrigo Antunes via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Hi, how can I reject an ldap user if it is not member of a group by using the users file?
Use a policy in unlink.
But in the logs I see this:
ERROR: files: Operator "!=" not allowed for LDAP group comparisons
Exactly. In a policy, you can do: if (!(LDAP-Group == "foo") ... This is a limitation of the way the LDAP-Group attribute is implemented, and how the "users" file works. Alan DeKok.