On 01/26/2012 04:42 PM, Phil Mayers wrote: > 3. Run the LDAP module, then compare the attribute. Note - because > you've mapped the item to check/control lists, you can't use a "users" > file - you must use unlang, like so: > Damn, sorry, this should be: authorize { ... ldap if (control:My-Extension10 == VPN) { ... } ... }