Updating Reply Attributes in authenticate section

2013-05-01 Thread Matthew Ceroni
In my authorize section I am matching LDAP groups to set VLAN attributes as such: if (Ldap-Group == netCoreClass-IT) { update reply { Tunnel-Private-Group-Id:1 := 102 } } elsif (Ldap-Group == netCoreClass-engineering) {

Re: Updating Reply Attributes in authenticate section

2013-05-01 Thread A . L . M . Buxey
Hi, elsif (Ldap-Group == netCoreClass-finance) { update reply { Tunnel-Private-Group-Id:1 := 124 } } Authentication is against Active Directory. So while a user may get assigned to a VLAN based of

Re: Updating Reply Attributes in authenticate section

2013-05-01 Thread Matthew Ceroni
Thanks for the reply. First, adding an else to the if statement doesn't really help. As that is in the authorize section that simply queries AD via LDAP to check for groups of the user. It uses an admin DN to bind and query, not the actual user credentials (as this is a PEAP) request. So I