28 May
2020
28 May
'20
8:07 a.m.
On May 28, 2020, at 7:41 AM, Клеусов Владимир Сергеевич via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
If /etc/freeradius/users
DEFAULT Auth-Type := LDAP, LDAP-Group == «test_group" DEFAULT Ldap-Group != «test_group", Auth-Type := Reject
Then all users get access regardless of their membership in this group. Why can this happen ?
Well, the debug output should tell you. But this kind of thing is generally easier to do in an "unlang" policy, instead of the "users" file: if (LDAP-Group == "test") { update control { Auth-Type := ldap } } else { reject } Alan DeKok.