> I have the following line in my ldap.attrmap file to pull back a users
> VLAN assignment:
>
>> replyItem Tunnel-Private-Group-ID destinationIndicator
>
> The users file contains the following:
>
>> DEFAULT Ldap-Group == "allowed-access"
>> Service-Type = Framed-User,
>> Tunnel-Type = "VLAN",
>> Tunnel-Medium-Type = "IEEE-802"
>
> For the users which are in the "allowed-access" group those which have a
> value in the destinationIndicator attribute in LDAP work OK and are
> flipped into the appropriate VLAN. How do I specify a fallback so that
> if the user does not have this attribute set or it is empty then they
> are put into VLAN 666 for example.
Use unlang. Put something like this in post-auth:
if(reply:Tunnel-Private-Group-ID == "") {
update reply {
Tunnel-Private-Group-ID = "666"
}
}
Ivan Kalik
Kalik Informatika ISP
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
