Leighton Man wrote: > Logic now working correctly - Many thanks > Final problem is to return reply attributes in the access accept message. As > a test I added Reply-Message := "User is staff" in the update reply section > and the server duly added it to the next access challenge message. I assume I > need something in the post-auth section?
Yes. > How do I pass information about which ldap instance was successful in the > authorize section to post-auth? Update a server-side attribute when you use the module: update control { Tmp-String-0 = "ldap-student" } then in post-auth: if (control:Tm-String-0 == "ldap-student") { ... } - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html