Users-file and LDAP backend mixing questions

tnt at kalik.net tnt at kalik.net
Mon Jan 19 16:13:54 CET 2009


>> >> > 3. Also i need a reject rule for those users, who was authenticated by LDAP and do not belong to any ldap-group. I've tried Ldap-Group !*, but this attribute always exists for every user :(
>> Try unlang: if (!control:Ldap-Group) { ...
>> Ivan Kalik
>> Kalik Informatika ISP
>> -
>
>It doesn't work. For example, user for sure belongs to some LDAP-group:

Hm, and you are sure that empty string value check:

if('%{control:Ldap-Group}' != "") { ...

isn't working?

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list