On Apr 8, 2022, at 9:08 AM, Rahman DURAN <rahman.duran@erzurum.edu.tr> wrote:

Is it possible to define multi-value attributes for clients and use them with unlang if conditions?

No.

For example:

client abc { ipaddr = xxxx secret = xxxx group = "123" group = "456" }

Then use it in a policy:

if ("%{client:group[*]}" == "123")

Nothing in the documentation says that will work. As a result, it doesn't work.

This does not seem to work, freeradius only keeps the first assignment (group = "123"), it seems. Is there any way to make it work like this? Or can I use something else for this purpose? Any client should belong to multiple groups.

The source is available. Patches are always welcome. Alan DeKok.