rlm_ldap problem

[Alan DeKok]

Norbert Wegener <nw at sbs.de> wrote:
> Is there any way to honor the operator >= in the users file in this case 
> without modifying the source code?

  No.

  This really requires rlm_policy.  There you can do something like:

  ...
  if ("%{ldap:query...}" >= 500) {
    ...
  }
  ...

  Assuming you make rlm_policy support integer comparisons, too.  This
has the added bonus that you can now do fail-over on the LDAP query.

  But the rlm_policy code isn't quite ready for prime time.

  Alan DeKok.