Hi list, we are storing our user data in openLDAP with a radiusProfileDN attribute, which is sent back by the freeradius server (v.1.1.3, on SLES10) as expected. The profile contains information for the vlan of user. We now would like to have the possibility to let the user login in a special vlan (the "internetcafe") and thought of doing this with realms, which means the user has to login with "username" or "username@ic", setting the following in the users file: ---- /etc/raddb/users DEFAULT User-Name =~ "@ic$", User-Profile := "cn=InternetCafe,ou=Netconfig,o=Test" ---- This works if the users has no radiusprofileDN stored in LDAP, but if he has such an attribute the profile data from the user is used, not the "cn=InternetCafe". How can I overwrite the value for radiusprofiledn if the user appends "@ic" to this username? Or is there a better way to achieve this (changing the profile data / vlan according to login)? Thanks in advance for any help! Reagards Markus -- Markus Krause email: krause@biochem.mpg.de Mogli-Soft: Support for Mac OS X, Webmail/Horde, LDAP, RADIUS by order of the Computing Center of the Max-Planck-Institute of Biochemistry Tel.: 089 - 89 40 85 99 Fax.: 089 - 89 40 85 98 ---------------------------------------------------------------------- This message was sent using https://webmail2.biochem.mpg.de If you encounter any problems please report to rz-linux@biochem.mpg.de