how to limit users access by groups using radgroucheck

Alan DeKok aland at deployingradius.com
Tue Jun 19 23:24:23 CEST 2012


RAZAFIMBELO Faliharinohatra Rindra wrote:
>         I'm new to freeradius and I would like to know if someone can
> tell me how to limit users access by groups using radgroupcheck.

  Read doc/rlm_sql.

> I have
> made some researchs and I saw that radgroupcheck didn't reject users
> even if there is a mismatch attribute.

  No.  The group checking is about *matching*.  It's up to you to
determine what to do when it matches.

> I'd like to have a confirmation
> about this thing if it's true or not. I know with radcheck we can
> specify attribute like NAS-Identifier or NAS-IP-Address ... to limit
> user's access but i'm searching for a solution using groups. Can someone
> help me please?

  What part of the documentation is unclear?  Be specific.


More information about the Freeradius-Users mailing list