Operator "!=" not allowed for LDAP group comparisons

[Rodrigo Antunes]

Hi, how can I reject an ldap user if it is not member of a group by using the users file?


I tried this:

DEFAULT NAS-Identifier == "openVPN", LDAP-Group != "01-PL-Allow-VPN", Auth-Type := Reject


But in the logs I see this:

ERROR: files: Operator "!=" not allowed for LDAP group comparisons