How the hell do you use multiple NOT values with rlm_checkval and sql??

[Mike Jakubik]

Alan DeKok wrote:
> Mike Jakubik <mikej at rogers.com> wrote:
>   
>> If there is a way to accomplish this outside of SQL, im quite open to 
>> suggestions. As long as i can refer to the groups which are in SQL. 
>> Basically, i need to be able to restrict certain user groups from 
>> dialing certain numbers.
>>     
>
>   Use rlm_passwd to map many dial-in numbers to one dial-in group.
> Then, do:
>
> DEFAULT SQL-Group == "foo", Dial-in-group == "bar", Auth-Type := Reject
>
>   And repeat for the combinations of SQL groups & dial-in groups.
>   

Uhm, in that case cant i just specify called-station-id in the user 
file? In any case, is SQL-Group a valid attribute? I cant find it in the 
documentation. I tried a simple :

DEFAULT SQL-Group == "restricted",
        Called-Station-Id == "number",
        Auth-Type := Reject


Restarted radius, and dialed "number", nothing happened, i logged in 
just fine.