Fallback LDAP Attribute Value

[Ivan Kalik]

> I have the following line in my ldap.attrmap file to pull back a users
> VLAN assignment:
>
>> replyItem	Tunnel-Private-Group-ID	destinationIndicator
>
> The users file contains the following:
>
>> DEFAULT Ldap-Group == "allowed-access"
>> 	Service-Type = Framed-User,
>> 	Tunnel-Type = "VLAN",
>> 	Tunnel-Medium-Type = "IEEE-802"
>
> For the users which are in the "allowed-access" group those which have a
> value in the destinationIndicator attribute in LDAP work OK and are
> flipped into the appropriate VLAN. How do I specify a fallback so that
> if the user does not have this attribute set or it is empty then they
> are put into VLAN 666 for example.

Use unlang. Put something like this in post-auth:

if(reply:Tunnel-Private-Group-ID == "") {
     update reply {
          Tunnel-Private-Group-ID = "666"
     }
}

Ivan Kalik
Kalik Informatika ISP