unlang post-auth group-name

Alan Buxey A.L.M.Buxey at lboro.ac.uk
Sat Sep 25 19:57:09 CEST 2010

> That wasn't my intention, I thought pasting the entire sites-available/default and debug output might be frowned upon.

pasting the config file is not necessary. if you read the docs and the mailing
list history, you will see that posting the full, complete
debug output log from 'radiusd -X' is *exactly* what you need to do

> ++? if ("%{Group-Name}" == "net_su")
>         expand: %{Group-Name} -> 
> ? Evaluating ("%{Group-Name}" == "net_su") -> FALSE
> ++? if ("%{Group-Name}" == "net_su") -> FALSE

you posted this information in a previous email - and asked questions about it.
so i will clarify.

line 1

the config file says I should check Group-Name

line 2

the current value of Group-Name    (blank!)

line 3 lets check (evaluate) the value....is it net_su ?  no.  (FALSE)

line 4

the output result debug showing the line 1 statement evaluation is FALSE

so, basically, that value isnt net_su - you need to get the right
attribute (or ensure it gets populated!) and then your Tmp attribute will be set right
and everything will be closer to what you want


More information about the Freeradius-Users mailing list