problems with dynamic vlan assignment

[Eric Doutreleau]

Le 16/09/2010 15:34, Phil Mayers a écrit :
> On 16/09/10 10:16, Eric Doutreleau wrote:
>> thanks for your replay
>>
>> here what i did
>>
>> in the ldap.attrmap i put
>> checkItem User-Category eduPersonPrimaryAffiliation
>
> checkItem means "put the attribute into the check/config items list".
>
> Looking at the source code, I see that rlm_ldap can't update the request
> item list.
>
>>
>> in the user file i did
>> DEFAULT
>> Tunnel-Type := VLAN,
>> Tunnel-Medium-Type := IEEE-802,
>> Tunnel-Private-Group-Id = 901,
>> Fall-Through = Yes
>>
>> DEFAULT User-Category == "student"
>> Reply-Message = "Your a member of the student Group",
>> Tunnel-Private-Group-Id = 902
>
> This means "match User-Category in the request items list", which is not
> the list you've put it in.
>
> "files" syntax cannot do comparisons against check/config or reply
> items, and LDAP can only put items into check/config or reply. You will
> therefore have to use an "unlang" syntax as per my previous email:
>
> authorize {
> ...
> ldap
> if (control:User-Category == ...) {
> ...
> }
> }
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html

Thanks Phil that s what i will do