I want to branch an ldap attribute

[Alan DeKok]

On Jul 17, 2019, at 2:44 AM, Yuya Yanagi <peacefull64 at gmail.com> wrote:
> There is a request to return the Vlan-id only when connecting to a specific
> AP at the customer's request,
> and we are struggling to solve the problem.

  You can do dynamic LDAP queries:

authorize {
	...
	if (specific AP) {
		update reply {
			Tunnel-Private-Group-Id := "%{ldap:... LDAP QUERY ....}"
		}
	}

> I'll show you the mods-available/ldap file.
> I've included mapping file in the update section below, but I want to
> include additional mapping file for specific AP.(Location of the arrow mark)
> But if you include an if statement, you will get an error [Invalid location
> for 'if'].

  Yes, because the "if" condition isn't allowed there.

  Alan DeKok.