Thanks for the swift clarification! Best regards, Christof Chen 2016-11-08 18:52 GMT+01:00 Alan DeKok <aland@deployingradius.com>:
On Nov 8, 2016, at 12:30 PM, Chen, Christof <christof@chen.de> wrote:
can someone give me a hint why freeradius 3.0.12 falls through to profile processing in rlm_sql even if there is "fall-through = No" in the last group reply?
The behaviour of the SQL is extensively documented.
http://wiki.freeradius.org/modules/Rlm_sql
Is there a way to tell the server NOT to fall-through to profile processing IF there was a match in the group processing?
Edit the source. Or don't use profiles.
The "default" profile contains a deny reply which should only be returned if the user was not found in any usergroup.
You'll have to find another way to do that.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html