Re: Setting Class attribute by LDAP Groups

2013-07-04 Thread Phil Mayers
On 07/04/2013 04:35 AM, Patrick Gawthorne wrote: update request { Class = “%{Ldap-Group}” } You can't do that, because Ldap-Group is not a real attribute with a value; it's a virtual attribute, which you compare against (think about it - you can be in 1 group) You would

Re: Setting Class attribute by LDAP Groups

2013-07-04 Thread Arran Cudbard-Bell
On 4 Jul 2013, at 08:22, Phil Mayers p.may...@imperial.ac.uk wrote: On 07/04/2013 04:35 AM, Patrick Gawthorne wrote: update request { Class = “%{Ldap-Group}” } You can't do that, because Ldap-Group is not a real attribute with a value; You can do: update reply {

Setting Class attribute by LDAP Groups

2013-07-03 Thread Patrick Gawthorne
Hello Currently trying to implement a way to get the Ldap-Group used for checking (within acct_users) into the Accounting-Request packet as the Class attribute.. I can get it to send a static variable just fine using; (I'm proxying the account messages) update request { Class