Re: how to organize groups of users getting access to groups of servers

On Tue, Mar 25, 2014 at 03:44:37PM -0400, Alan DeKok wrote:

Add a 'type' for each client:

client foo { ipaddr = x secret = type ... type = juniper }

Is this a variable that you just created here for this purpose, or a standard attribute? I.e. can we add random new attributes here? We'd probably like to match on more than "type"... At least also on "branch", to give people on branch offices management of their own devices. BTW: we're on v2.1.12-4.el6_3 (RHEL6-latest), and the manpage for clients.conf doesn't say anything about a "type" or allowing to add new variables..

Then use "unlang":

Thanks! That looks very powerfull! -jf