Assign user to a realm.

[Alan DeKok]

On Jun 2, 2024, at 9:29 PM, Deepansha Gaur <dgaur at ualberta.ca> wrote:
> Right now, we are using vpn contexts to assign users to a particular vlan. Eg: if a user logs in with his ccid, he’s assigned a default VLAN, if they login with ccid at realm1 , they’re assigned Vlan 121.
> We’re now moving to freeradius and I want to implement the same using realms. 

  You're saying essentially the same thing over and over again.  that doesn't help.  I had asked for more details, and you're not really giving them.

> Or if I can assign a vlan to a particular ldap group. 

  Yes.  Unlang allows you to (a) do LDAP group checks, and (b) assign VLANs.  All you have to do is put the two together.  The documentation gives dozens of examples of nearly everything the server can do.

  The LDAP module documentation shows how to connect the server to LDAP, and how to do LDAP group checking.  Then in the default virtual server, you can do:

	if (LDAP-Group == "foo") {
		update reply {
			... assign VLAN ...
		}
	}

  Alan DeKok.