[LDAP] access to attribut with unlang

[vince technical address]

Thank you Alan but i don't find the documentation to use attribut recovered
with module ldap. I must use checkItem or replyItem and "&reply:attribute" ?

Vince

2016-01-06 17:42 GMT+01:00 Alan DeKok <aland at deployingradius.com>:

> On Jan 6, 2016, at 11:38 AM, vince technical address <
> vince.technicaladdress at gmail.com> wrote:\
> > I currently use the rlm_ldap module to retrieve an entry corresponding
> > to a filter
> > defined in the authorize section. After (but always in section
> authorize) I
> > would use the value of an LDAP attribute recovered with unlang.
> >
> > Is it possible ?
>
>   Yes.  In v2, see raddb/ldap.attrmap.
>
>   And look on http://wiki.freeradius.org/  This is documented.
>
> > Example :
> >
> > authorize {
> >   ldap
> >   if(attribute == "qwerty") {
> >      reject
> >   }
> > }
> >
> > With "attribute"is the value of the attribute has been recovered with
> > module ldap. (it is an idea to overcome the fact that xlat ldap does not
> > enable failover).
>
>   Version 3 allows for fail-over in xlat.  Upgrade.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html