Hi,
I have freeradius 2.1.6 with rlm_sql_oracle. There is a plenty of users in radcheck table and several of them are a members of a group. As stated in comments in the dialup.conf all other users are a members of the group DEFAULT if I understood it right. I put the fields DEFAULT Auth-Type := Reject in the radgroupcheck table but it seems that radius doesn't process the group checks if there is no explict group record for the user in radusergroup table even if I set read_groups. The radius accepts the requests if the username and password matches. How can I reject users not stated in the group without explictly assigning them to the DEFAULT group in radusergroup?
if you run briefly in full debug mode - ie 'radiusd -X' and then spend some time with a coffee or herbal tea or Jolt..or whatever - you can read exactly what the server is doing...you can watch and disect its logic and see exactly why its not doing what you want. then you can change it :-) alan