"richard Bai" <baixin@gmail.com> wrote:
This is my *users* file configuration: *DEFAULT Group == "1"*
Why put asterisks around every line?
* Auth-Type = LDAP,*
1) Auth-Type belongs on the first line, "radiusd -X" will tell you that 2) Setting Auth-Type = LDAP is probably wrong.
Now, it works fine except I have to add more lines manual once I add one more group in LDAP.
Except the "Group" attribute is for Unix groups, not LDAP groups. Either your system *doesn't* work at all, or the "users" file entries you included above are *not* what you're using.
Such as programming: *Tunnel-Private-Group-ID = Group *
See doc/variables.txt. It explains how to copy the contents of one attribute to another attribute. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog