Exec-Program based on LDAP Attribute

I need to be able to fire off a script via the Exec-Program (or some other method) based upon a successful authentication and the value of an LDAP attribute on the user's account. I tried putting the following in the acct_users... DEFAULT Acct-Status-Type == Start, CustomAttrib == true Exec-Program = "/path/to/script.sh %u %{Framed-IP-Address} %{CustomAttrib}" I've tried setting the ItemType of the CustomAttrib to checkItem and replyItem, but neither method worked. My script needs access to the username and the Framed-IP-Address. Any suggestions?