Cached attributes

[A.L.M.Buxey at lboro.ac.uk]

Hi,

> Based on:
> - whether they are a Bristol user or a visitor to the campus

that wont change vlan from the first auth.... 

> - whether they have been suspended for being naughty

you can clear the cache entry for that user/session :)

> - whether they have authenticated with machine credentials

that wont change the vlan either from the first auth.

policy should be in the inner-tunnelwhere you deal with
the real user info......and if its an external user then
the outerid can shove them onto other vlan

alan