3.43.17. CheckAttr Previous topic Parent topic Child topic Next topic

This is the optional name of the LDAP attribute that contains the RADIUS check items for the user. During authentication, all the check items in this LDAP attribute (if specified) will be matched against the RADIUS attributes in the authentication request in the same was as for AuthBy FILE and AuthBy SQL, including Expiration in the format “Dec 08 1998”. Defaults to undefined. For more information, see Section 7.1. Check items.
Tip
If there are multiple instances of the LDAP attribute for the user, they are concatenated together with commas. This means that you can have each RADIUS check attribute in its own LDAP attribute for easy reading and maintenance.
Tip
AuthAttrDef is a more general and easy to use method of defining check and reply items. Support for CheckAttr will be discontinued sometime in the future.
# Check the radius items in checkitems
CheckAttr checkitems