On 8/7/09 08:18, Steven Carr wrote: > On 7/7/09 17:01, Ivan Kalik wrote: >> Yes. >> >> if(((!reply:...) || (reply:... = "")) && Huntgroup-Name = "whatever") > > This works for those users that have the attribute set as a fallback > measure but how do I stop it from returning the attribute when it was > retrieved from LDAP, again I only want this attribute to be returned > when the are calling from a particular huntgroup. > > So the scenario is - if they are calling from huntgroup "ciscoswitches" > then we return the attributes either the value from LDAP for the VLAN or > the fallback value from the post auth, if they are not calling from the > huntgroup then don't return these attributes.
Is it not possible to use something like...
if ((!Huntgroup-Name) || (Huntgroup-Name != "ciscoswitches")) {
update reply {
Tunnel-Private-Group-ID -=
Tunnel-Type -=
Tunnel-Medium-Type -=
}
}
I did try this and it came back with:
ERROR: No value given for attribute Tunnel-Private-Group-ID.
There must be an easy way to strip attributes from being returned?
Steve
--
Steven Carr
Systems Development Officer
SLS/ITS/Systems - (0191) 515 3953
signature.asc
Description: OpenPGP digital signature
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
