interpret check-Item and change reply-item to set VLAN

Alan DeKok aland at
Mon Sep 13 16:10:45 CEST 2010

Michael Bathe wrote:
> is there any how_to or solution to interpret the ldap checkItem and
> change the replyItem (I think in inner-tunnel)?
> f.e.: If the checkItem match one of 'sec11', 'Sec11', 'SEC11'... the
> replyItem should be set to '111'.

$ man unlang

  The ldap module doesn't do generic comparison or setting of
attributes.  Neither does the "users" file.

  But the "unlang" policy language does.

  Alan DeKok.

More information about the Freeradius-Users mailing list