On 05/13/2011 07:34 PM, Herbert Fischer wrote:

if (ldap_group-LDAP-Group != "somegroup") {

You can't do this.

You can only test for group membership i.e.

if (ldap_group-LDAP-Group == somegroup) {
# do nothing
}
else {
# ...whatever
}

The != and other operators don't work for the virtual attribute "LDAP-Group"

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html