interpret check-Item and change reply-item to set VLAN

[Alan DeKok]

Michael Bathe wrote:
> is there any how_to or solution to interpret the ldap checkItem and
> change the replyItem (I think in inner-tunnel)?
> f.e.: If the checkItem match one of 'sec11', 'Sec11', 'SEC11'... the
> replyItem should be set to '111'.

$ man unlang

  The ldap module doesn't do generic comparison or setting of
attributes.  Neither does the "users" file.

  But the "unlang" policy language does.

  Alan DeKok.