9 Nov
2014
9 Nov
'14
8:33 a.m.
Tamás Becz wrote:
Yes I got that, but the NAS (which is mainly a VPN concentrator) actually uses the value for assigning firewall rules to the user's session which is precisely what Filter-Id is for if I understand the rfc correctly.
OK... you didn't say that originally. Knowing that helps.
Currently I can't test, but do I understand correctly that rlm_ldap can't put things on the control list, but I could use unlang to copy the attributes from reply to control in authorize after ldap, then copy them back in post-auth?
Yes. Alan DeKok.