"Tariq Rashid" <[EMAIL PROTECTED]> wrote:
> I would like however for the script to be called only when an LDAP attribute
> has a certain values. Is this possible? The user's LDAP profile has already
> been searched for the user's password in the initial auth request, and
> possibly in the acct request.
>
> something like the following does not work:
>
> DEFAULT Acct-Status-Type == Start, Account-Status == "inactive"
> Exec-Program = "/etc/freeradius/scripts/acct_start.py %{User-Name}"
>
> where Account-Status is mapped to the LDAP attribute in the ldap-attrmap
> file.
Probably because Account-Status is a check item, and not in the
request. It will have to go into the request for it to be compared in
the acct_users file.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
