Thanks Arran, Can you confirm whether we should be able to do something like : If (&control:attribute[*] == "test") { With the control:attribute being either just a multivalue attribute, or one from the cache? Thanks Andy -----Original Message----- From: freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradius.org [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradiu s.org] On Behalf Of Arran Cudbard-Bell Sent: 06 August 2014 15:54 To: FreeRadius users mailing list Subject: Re: multiattribute testing in git 1411859 On 6 Aug 2014, at 10:00, Franks Andy (RLZ) IT Systems Engineer <Andy.Franks@sath.nhs.uk> wrote:
Thanks Zenon. Glad you've been able to confirm the cache behaviour.
As per mods-available/ldap: [cache_attribute] overrides the normal cache attribute (<inst>-LDAP-Group) and creates a custom attribute. It doesn't affect the behavior you noted previously.
True, just looking for an acceptable way, either via ldap caching or manual collection via ldap of attributes or anything really to populate multivalued attributes and check them all without multiple single instance (i.e. ldap1-ldap-group) lookups. It's slow and if that
ldap server is down, obviously doesn't work. Arran says he'll have a look.
Should be fixed. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2