On 7/7/09 16:04, Ivan Kalik wrote: > OK, try: > > if (!reply:Tunnel-Private-Group-ID) > > that should cover the case when there is no ldap attribute in user > profile. If attribute can be empty or missing you will need to OR those > two expessions.
Thanks Ivan, the following in the post-auth section of the default file works: > if ((!reply:Tunnel-Private-Group-ID) || (reply:Tunnel-Private-Group-ID > == "")) { > update reply { > Tunnel-Private-Group-ID = "666" > } > } Steve -- Steven Carr Systems Development Officer SLS/ITS/Systems - (0191) 515 3953
signature.asc
Description: OpenPGP digital signature
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html