Fallback LDAP Attribute Value

Steven Carr steven.carr at sunderland.ac.uk
Tue Jul 7 17:16:50 CEST 2009


On 7/7/09 16:04, Ivan Kalik wrote:
> OK, try:
> 
> if (!reply:Tunnel-Private-Group-ID)
> 
> that should cover the case when there is no ldap attribute in user
> profile. If attribute can be empty or missing you will need to OR those
> two expessions.

Thanks Ivan, the following in the post-auth section of the default file
works:

> 	if ((!reply:Tunnel-Private-Group-ID) || (reply:Tunnel-Private-Group-ID == "")) {
> 		update reply {
> 			Tunnel-Private-Group-ID = "666"
> 		}
> 	}

Steve

-- 
Steven Carr
Systems Development Officer
SLS/ITS/Systems - (0191) 515 3953

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 257 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20090707/b2b17b2f/attachment.pgp>


More information about the Freeradius-Users mailing list