Re: how to limit users access by groups using radgroucheck

RAZAFIMBELO Faliharinohatra Rindra wrote:

I'm new to freeradius and I would like to know if someone can tell me how to limit users access by groups using radgroupcheck.

Read doc/rlm_sql.

I have made some researchs and I saw that radgroupcheck didn't reject users even if there is a mismatch attribute.

No. The group checking is about *matching*. It's up to you to determine what to do when it matches.

I'd like to have a confirmation about this thing if it's true or not. I know with radcheck we can specify attribute like NAS-Identifier or NAS-IP-Address ... to limit user's access but i'm searching for a solution using groups. Can someone help me please?

What part of the documentation is unclear? Be specific.