Auth by NAS-Identifier using unlang

Arran Cudbard-Bell a.cudbardb at
Mon Aug 5 23:03:34 CEST 2013

> Diagnostic says:
>   ++? if (control:Local-Group != NAS-Identifier ) -> FALSE

Assuming you're not looking for a literal value 'NAS-Identifier', you want "%{NAS-Identifier}".

If this is a new deployment you should use current HEAD revision in Master.  Then you can use the debug_attr expansion to look at list state.

update request {
	Tmp-String-0 := "%{debug_attr:control:}"

Also could you please stop posting snippets of debug output and paste the whole thing...

Arran Cudbard-Bell <a.cudbardb at>
FreeRADIUS Development Team

More information about the Freeradius-Users mailing list