Chris wrote:
> What is the proper way to call a specific LDAP module based on
> NAS-IP-Address (or huntgroup, probably)?
authorize {
...
if (NAS-IP-Address == 1.2.3.4) {
ldap_1
}
elsif (NAS-IP-Address == 3.4.5.6) {
ldap_2
}
...
}
Or, use "switch". See "man unlang".
> I don't want anything other than files (for overriding LDAP for testing)
> then LDAP.
Don't use the "users" file for things like this. It doesn't know
about modules, or module order. The "unlang" parser does know.
> Obviously, I want to stay as close to the default config as possible. :)
As always, a good idea.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html