21 Nov
2017
21 Nov
'17
6:50 a.m.
On Tue, 2017-11-21 at 17:54 +0800, luckydog xf wrote:
switch statement in post-auth section doesn't work, see below.
============= switch &LDAP-Group {
Rather than "switch doesn't work", look at what LDAP-Group expands to.
It always comes down to the 'default' reject part, it looks like <LDAP-Group > match nothing.
What does the -X debug output show? My guess is LDAP-Group isn't expanding to what you expect it to in the in post-auth section. -- Matthew