<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><br></div><div>Hi Mike,</div><div><br></div><div>Are you trying to have the radius server send an access-reject when the user is not in the group?</div><div>Or are you trying to send a list of groups to the VPN device?</div><div><br></div><div>- Alok</div><br><div><div>On Jan 1, 2009, at 3:21 PM, Alan DeKok wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>Mike Diggins wrote:<br><blockquote type="cite">On a related note, should the rlm_dbm_parse program be able to convert<br></blockquote><blockquote type="cite">the users file (assuming it is the correct syntax) directly? It<br></blockquote><blockquote type="cite">complains about the ntlm_auth type.<br></blockquote><br> I wouldn't suggest using rlm_dbm. It's not really maintained, and<br>it's not necessary.<br><br> As of 2.x, the server puts the "users" file entries into a hash when<br>it loads the file. I've tested 100K users being loaded in a second or<br>two on a reasonable machine. On top of that, 2.x supports HUP better<br>than 1.x.<br><br> So... rlm_dbm is almost never necessary any more.<br><br> If you have less than 10K entries in the "users" file, I would suggest<br>that rlm_dbm is not for you. If you have more than 10K users, I would<br>suggest using an SQL database.<br><br> Alan DeKok.<br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br><br><br></div></blockquote></div><br></body></html>