Expanding run-time variables and checking access_attr for allow

[tnt at kalik.net]

> The second question.
>
> If I put, ONLY FOR CHECK, the base_filter =
> "(uniquemember=cn=nicolas.velazquez at uam.es,cn=users,dc=uam,dc=es)" the
> LDAP
> replies with No Such Object. But the radius authorization sends ok.
> The misconfiguration of LDAP is not the question here.
> The question here is: documentation says if the parameter not exists the
> authorization doesn't work.

It exists so it does work:

> [uam_vpn] user nicolas.velazquez at uam.es authorized to use remote access

Ivan Kalik