Hi Matthew, Thank you for the link ,but I'd like to avoid using Ldap. Is there another way to get this done by winbind and rlm_unix? Regards, David 2017-02-06 14:31 GMT+01:00 Matthew Newton <mcn4@leicester.ac.uk>:
On Mon, Feb 06, 2017 at 02:17:52PM +0100, Dávid Erős wrote:
I am seeking some help regarding group access. I've have built a system by using freeradius, samba4 (AD) to secure our Wireless network. The client authentication works perfectly fine, but I'd like to deny access to some specific groups. I can deny access to users but not groups. Could someone point me to the right direction?
Have a look at group support in rlm_ldap.
http://wiki.freeradius.org/modules/Rlm_ldap#group-support
Matthew
-- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk>
Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html