load balancing and if statements
Brian Julin
BJulin at clarku.edu
Mon Mar 26 23:07:10 CEST 2012
Scott McLane Gardner Wrote:
> Here is the configuration I am attempting:
>
> > load-balance {
> > ldap1
> >
> > if (Ldap-Group == "NET Staff") {
I cannot answer your question about if statements, but this
much is clear: the Ldap-Group check attribute will query
the ldap module that was instantiated last. If you want
to query a specific module, you have to use <modulename>-Ldap-Group.
Similarly for ldap xlats, you have to use the module name.
(A sensible wishlist item might be to have load-balance sections
in the instantiate section register the same hooks as their
submodules, then you'd be able to name the load-balance and
use <lbr-modulename>-Ldap-Group. But that sounds mildly
hairy to implement.)
More information about the Freeradius-Users
mailing list