So it will search and find the group, but I can still connect with my user even though it isn't in that group. Any ideas on how to keep a user from connecting if their account isn't in that group?



Thibault Le Meur wrote: 
Basically trying to 
figure out 
what I need to add to these lines: groupname_attribute, 
groupmembership_filter, and groupmembership_attribute. Also 
not sure if 
I need to add something to users file like: DEFAULT LDAP-Group == 
"wireless". Can anyone provide input on what I need to 
configure, Thanks.

wireless group in ldap, you can see cjarrett is a member:
dn: cn=wireless,ou=Groups,dc=itfreedom,dc=com
objectClass: posixGroup
cn: wireless
gidNumber: 1011
memberUid: cjarrett
    

You're using POSIXGroups:
groupname_attribute = cn
Groupmembership_filter = "(&(objectclass=posixGroup)(memberUid=%u))

No groupmembership_attribute.


In you users file, for instance:
DEFAULT LDAP-Group ==  "wireless" ...


See /usr/share/doc/freeradius/rlm_ldap text file.

HTH,
Thibault



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html