load balancing and if statements

Brian Julin BJulin at clarku.edu
Mon Mar 26 23:07:10 CEST 2012


 

Scott McLane Gardner Wrote:

> Here is the configuration I am attempting:
> 
> >    load-balance {
> >        ldap1
> >
> >        if (Ldap-Group == "NET Staff") {


I cannot answer your question about if statements, but this
much is clear: the Ldap-Group check attribute will query
the ldap module that was instantiated last.  If you want 
to query a specific module, you have to use <modulename>-Ldap-Group.

Similarly for ldap xlats, you have to use the module name.

(A sensible wishlist item might be to have load-balance sections
in the instantiate section register the same hooks as their
submodules, then you'd be able to name the load-balance and
use <lbr-modulename>-Ldap-Group.  But that sounds mildly
hairy to implement.)




More information about the Freeradius-Users mailing list