<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi Alan,<div><br></div><div>this way paolo, since belong to rfxguest, is reject all the time</div><div><br></div><div>radgroupcheck</div><div><br></div><div>5<span class="Apple-tab-span" style="white-space:pre"> </span>rfxguest<span class="Apple-tab-span" style="white-space:pre"> </span>Auth-Type<span class="Apple-tab-span" style="white-space:pre"> </span>:=<span class="Apple-tab-span" style="white-space:pre"> </span>Reject<br>4<span class="Apple-tab-span" style="white-space:pre"> </span>rfxguest<span class="Apple-tab-span" style="white-space:pre"> </span>Airespace-Wlan-Id<span class="Apple-tab-span" style="white-space:pre"> </span>:=<span class="Apple-tab-span" style="white-space:pre"> </span>5</div><div><br></div><div>…let me change question…I admint I'm a bit confused….where is matched Airespace-Wlan-Id, I mean in which sql table. </div><div><br></div><div>3. Group processing then begins if any of the following conditions are met:<br> a. The user IS NOT found in radcheck<br> b. The user IS found in radcheck, but the check items don't match<br> c. The user IS found in radcheck, the check items DO match AND<br> Fall-Through is set in the radreply table<br> <b>d. The user IS found in radcheck, the check items DO match AND<br><span class="Apple-tab-span" style="white-space:pre"> </span>the read_groups directive is set to 'yes'</b><br> 4. <b>If groups are to be processed for this user, the first thing that is<br> done is the list of groups this user is a member of is pulled from the<br> usergroup table</b> ordered by the priority field. The priority field of<br> the usergroup table allows us to control the order in which groups are<br> processed, so that we can emulate the ordering in the users file. This<br> can be important in many cases.<br> 5. <b>For each group this user is a member of, the corresponding check items<br> are pulled from radgroupcheck table and compared with the request. If<br> there is a match, the reply items for this group are pulled from the<br> radgroupreply table and applied.</b></div><div><br></div><div><br><div><div>On 14/mag/2012, at 11:14, Alan DeKok wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>Paolo Barbato wrote:<br><blockquote type="cite">radgoupreply<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">1 rfxguest Auth-Type := Reject<br></blockquote><br> That should be in radgroupcheck, not in radgroupreply.<br><br> Alan DeKok.<br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br></div></blockquote></div><br><div>------------------------------------------------------------------------------------------------<br>Paolo Barbato<br><br>Consorzio RFX<br>corso Stati Uniti,4 <br>35127 Padova - Italy <span class="Apple-tab-span" style="white-space:pre"> </span> <br>Network Administrator <br>phone: +39 049 8295097 fax: +39 049 8700718<br>------------------------------------------------------------------------------------------------<br></div><br></div></body></html>