assignment of vendor specific attributes in the tacacs server

[Simon N]

Hello everyone, 


i am currently testing Version 4. I have already successfully connected the ldap module to an Active Directory server. Now I want to use the Tacacs server to authenticate and authorize users. I have already tested the authentication and it works without any problems. To assign certain authorizations to the user, I want to use the user's groups on the AD. I could already test it successfully by adding the following in the sites-available/tacacs file under send Authorization-Pass-Add: 


if (%ldap.memberof(“Admin”)) {

                        &reply.Viptela.Viptela-Group-Name = “netadmin”

 } 


Now I wonder if I can also use the module files to assign vendor specific attributes. For example if the service == ppp, protocol == ip and the user has a specific LDAP group. Or is the top variant the only one I can use?


Thanks in advance for any help,


Simon