Why does 'switch' and case don't work?

[Matthew Newton]

On Tue, 2017-11-21 at 17:54 +0800, luckydog xf wrote:
>    switch statement in post-auth section doesn't work, see below.
> 
> =============
> switch &LDAP-Group {

Rather than "switch doesn't work", look at what LDAP-Group expands to.

> It always comes down to the 'default' reject part, it looks like
> <LDAP-Group > match nothing.

What does the -X debug output show?

My guess is LDAP-Group isn't expanding to what you expect it to in the
in post-auth section.

-- 
Matthew