Global variables

[Alan DeKok]

Franks Andy (RLZ) IT Systems Engineer wrote:
>   Me again, I have had a google but it’s not produced much, so apologies
> if I’ve overlooked some piece of documentation somewhere.
> 
> Is it possible to set global variables at freeradius runtime?

  You can set variables in the configuration, and use them.

	foo = "hello"
	bar = ${foo}	# hello

> The
> background is that I want to check against a user’s primarygroupid from
> AD to make sure they are in the right group. The ldap-group won’t work
> with primary groups as far as I can tell, so I’d like to give the FR
> server the gid information through a wbinfo lookup then have it pick
> that ldap attribute and compare against the global.
> 
> Seems a bit excessive to do it each request. I know it’s not something
> likely to change gid often but would like to not have to update it at
> all should it change. We have an “over zealous” AD administrator..

  The alternative to ${foo} is to look it up on every request.

  Alan DeKok.