That doesn't make a lot of sense from my quick skim of the config and the code, as I don't see anywhere that group_membership_query is referenced, but it definitely triggered FR to respect the read_groups setting. - Jacob On 12 Jul 2011, at 08:59, Phil Mayers wrote:
On 12/07/11 13:34, Jacob Dawson wrote:
I'll have the time to test it today, but according to this comment in sql.conf, I shouldn't have to set that, and I'd prefer not to have to set it on every user in production.
# If set to 'yes' (default) we read the group tables # If set to 'no' the user MUST have Fall-Through = Yes in the radreply table read_groups = yes
Oops, yes, quite right. Upon closer inspection, fallthrough is only inspected if "read_groups == no", and defaults to "on".
I think your problem is that "group_membership_query" is unset, looking at your original email and the debug output, hence no groups are found. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html