On Jun 22, 2016, at 6:22 PM, Jacek Wilczyński <jacek@jablko.pl> wrote:

In config (default) file I have

if (Ldap-Group == "some_group") { update reply { Class = "some_group" } }

but in answer I get

Received Access-Accept Id 146 from 127.0.0.1:1812 to 127.0.0.1:40392 length 40 Class = 0x666f727469676174655f6669726577616c6c

Which is the binary equivalent of "some_group".

Can I get plain text?

That's the wrong question. The Class attribute is carrying exactly the data you asked it to. The *printout* of the Class attribute is showing the binary form, because the Class attribute is defined to be binary... and not a printable string. The RADIUS client will get Class = "some_group". Alan DeKok.