unlang post-auth group-name

[Alan DeKok]

Cameron Wood wrote:
> Is the comparison in the right location, in the Authorize section, and
> if so am I trying to compare against the wrong attribute, hence it
> getting expanded and not returning anything?

  The previous explanations already answered this.

> Alan D could you shed some light on how the Group-Name attribute in
> Users is populated/gets compared when doing checks there?

  It allows checks for membership in the Unix groups.

> I suspect from your comment that the field I am trying to check against
> since you say it can contain many values "because the user may be a
> member of many, many, groups" could be a long string with separators or
> an array of values, would this be right? In which case do I need to use
> a regex method or access a specific value within an array?

  My first response to you already answered this.

  In case you don't find this message helpful:

1) you have already been told the answers to those questions
2) my responses are no more obtuse than yours

  Alan DeKok.