Re: deny access with huntgroups

28 Aug 2009


      ...
...
You have to enforce reject:
...
if(SQL-Group == "vpnuser") {
    ok
}
else {
    reject
}
...
Ivan Kalik
Kalik Informatika ISP
Alright. that makes sense.
But can the if(xxx) contain several sql-queries to the database?
The username and groupname from radusergroup and groupname from
radhuntgroup
need to be
matched somehow so that no one note in the right group can get through.
Something like:
if(SQL-Group == "%{sql:select groupname xxxx AND  SQL-User-Name ==
SQL-Group == "xxxx" is equivalent to that.
...
"%{sqlxxxx AND so on...
You can do:

if(statement && another statement || other statement) {
...


Ivan Kalik
Kalik Informatika ISP