Scott McLane Gardner Wrote:

> Here is the configuration I am attempting:
> 
> >    load-balance {
> >        ldap1
> >
> >        if (Ldap-Group == "NET Staff") {


I cannot answer your question about if statements, but this
much is clear: the Ldap-Group check attribute will query
the ldap module that was instantiated last.  If you want 
to query a specific module, you have to use <modulename>-Ldap-Group.

Similarly for ldap xlats, you have to use the module name.

(A sensible wishlist item might be to have load-balance sections
in the instantiate section register the same hooks as their
submodules, then you'd be able to name the load-balance and
use <lbr-modulename>-Ldap-Group.  But that sounds mildly
hairy to implement.)


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to