Wed Sep 19 11:54:04 2012 : Info: [files] WARNING: Unknown module "tolower" in string expansion "%{tolower:%{User-Name}}"
Wed Sep 19 11:54:04 2012 : Info: [files] expand: %{tolower:%{User-Name}} ->
Wed Sep 19 11:54:04 2012 : Debug: rlm_ldap: Entering ldap_groupcmp()
Wed Sep 19 11:54:04 2012 : Info: [files] expand: o=USERS -> o=USERS
Wed Sep 19 11:54:04 2012 : Info: [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details
Wed Sep 19 11:54:04 2012 : Info: [files] expand: (cn=%{Stripped-User-Name:-%{User-Name}}) -> (cn=piet)
My policy.conf:
policy {
forbid_eap {
if (EAP-Message) {
reject
}
}
permit_only_eap {
if (!EAP-Message) {
if (!"%{outer.request:EAP-Message}") {
reject
}
}
}
deny_realms {
if (User-Name =~ /@|\\/) {
reject
}
}
}