Thanks Ivan.

Not sure which file should I add the update reply? Getting familiar with unlang so pardon my dumb questions.

I added in ldap.attrmap.

update reply {
        rEntitlements -= entitlements
}
replyItem       rEntitlements                   entitlements  +=

is that right? Also you mentioned about script..is that shell/perl script? please enlighten.

Thanks in advance.


--- On Thu, 10/9/08, tnt@kalik.net <tnt@kalik.net> wrote:
From: tnt@kalik.net <tnt@kalik.net>
Subject: Re: Radius reply multivalue VSA question.
To: freeradius-users@lists.freeradius.org
Date: Thursday, October 9, 2008, 4:37 PM

>is there any way I can change the rlm_ldap.c?
>
>I am not proficient in c, so might need additional help.
>
>Or there are any other options.
>

Well, before resorting to source code alterations try using unlang. Have
a look at update reply with -= operator. You can't use regex with that
operator so you will probably need to run a script that will filter what
needs to be removed.

http://freeradius.org/radiusd/man/unlang.html

Ivan Kalik
Kalik Informatika

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html