ldap group filter

[Phil Mayers]

On 05/08/2011 04:19 PM, crzrobot wrote:
> Hi Phil,
> Thank You for the response. Your input helps a lot.
>
> I did the modifications you suggested but the fetching of the variable
> is done too late. When the checking of the group is done, the
> %{control:Ldap-UID} comes empty, but is fetched later. If you see bellow
> the freeradius output.
>
> There could be a possibility that %{control:Ldap-UID} be filled before
> the group test?

Sure. Move the "ldap" module before the "files" module, like so:

authorize {
  ...
  ldap
  files
  ...
}