23 Dec
2008
23 Dec
'08
4:34 a.m.
OK, took me a while but here is the SQL dump and the Debug output. One thing that's interesting is that I only seem to get my reply attributes from the radgroupreply table when I am coming from the allowed client-ip-address, when coming from any other IP I still get an accept but I get not reply attributes. So, FR seems to know the difference but I guess I am just not sending the reject or something?
That's how groups work. If a group check doesn't match - group reply attributes are ignored. User doesn't get rejected if one of the groups he belongs to doesn't match. SQL is a storage fascility - it's not an authentication method. Ivan Kalik Kalik Informatika ISP