Config. Help please - ldap and Active Directory

[Alan DeKok]

Leighton Man wrote:
> Logic now working correctly - Many thanks
> Final problem is to return reply attributes in the access accept message. As a test I added Reply-Message := "User is staff" in the update reply section and the server duly added it to the next access challenge message. I assume I need something in the post-auth section?

  Yes.

> How do I pass information about which ldap instance was successful in the authorize section to post-auth?

  Update a server-side attribute when you use the module:

    update control {
        Tmp-String-0 = "ldap-student"
    }

  then in post-auth:

  if (control:Tm-String-0 == "ldap-student") {
    ...

  }