redundant LDAP-Group

[Phil Mayers]

On 02/12/10 14:49, Phil Mayers wrote:
>
> Alternatively, how about:
>
> policy {
>     myldap {
>       update request {
>         Module-Failure-Message !* 0x00
>         My-Group = "%{ldap1:...}"
>       }
>       if (Module-Failure-Message) {

Nah, this won't work sorry - I was misreading the rlm_ldap.c code, 
Module-Failure-Message is only set by ldap_authorize on NOTFOUND, not 
FAIL and not in perform_search()