[EMAIL PROTECTED] wrote: > realm.com > Session-Timeout <= 28800, > Idle-Timeout <= 600, > Tunnel-Medium-Type == IEEE-802, > Tunnel-Type == VLAN, > Tunnel-Private-Group-Id == testvlan > > this works...and allows ONLY 'testvlan' attribute to be returned > but I also need to accept 'othervlan' and a structure of > > Tunnel-Private-Group-Id =~ ( /^testvlan$/ || /^othervlan$/ ) > > doesnt do what i need. is this do-able in attribute filter > or can I construct something in unlang (this is a 2.0.0pre2 server)
It's not doable in the attr_filter module, which is mostly a re-branded "users" file. It is possible in CVS head (not in the 2.0.0-pre2 release). See "man unlang" for filtering attributes. Although those filtering attributes SHOULD really be split into separate "permit" and "deny" sections, and shouldn't go into "update". Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
