Re: Checking ldap-group in post-auth instead of users file ?

Fred MAISON wrote:

How can i make checks on ldap radiusgroupnale without using the user file ?

Use attribute comparisons just like the "users" file.

I have not been able to place somthing like this in the post-auth section of inner-tunnel ... if ( "%{control:Ldap-Group}" == "wireless" ) {

This isn't like the "users" file. if (LDAP-Group == "wireless") { ... } The extra "${control:...}" text isn't necessary. Alan DeKok.