Re: rlm_ldap problem

Norbert Wegener <nw@sbs.de> wrote:

Is there any way to honor the operator >= in the users file in this case without modifying the source code?

No. This really requires rlm_policy. There you can do something like: ... if ("%{ldap:query...}" >= 500) { ... } ... Assuming you make rlm_policy support integer comparisons, too. This has the added bonus that you can now do fail-over on the LDAP query. But the rlm_policy code isn't quite ready for prime time. Alan DeKok.