I was wrong. In your radgroupreply put: +----+------------+---------------+----+----------------------------------------------------------+ | id | GroupName | Attribute | op | Value | +----+------------+---------------+----+----------------------------------------------------------+ | 8 | locked | Reply-Message | := | Account is locked | In your radgroupcheck put: +----+------------+-------------------+----+-----------+ | id | GroupName | Attribute | op | Value | +----+------------+-------------------+----+-----------+ | 1 | locked | Auth-Type | == | Reject | Didn't have morning coffee at the time of my first post:) Igor Smitran wrote:

Define group in your database. In radgroupreply put Auth-Type := Reject

hashim zayed wrote:

...

Hi all:

I am using freeradius with mysql I want to want to create a group that with default reject response . so when I put a user in this group he gets access-reject from freeradius.

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

thank very much you Ivan, it works 2009/8/4 Ivan Kalik <tnt@kalik.net>:

...

In your radgroupreply put:

+----+------------+---------------+----+----------------------------------------------------------+ | id | GroupName  | Attribute     | op | Value                                                    | +----+------------+---------------+----+----------------------------------------------------------+ |  8 | locked     | Reply-Message | := | Account is locked                                        |

In your radgroupcheck put: +----+------------+-------------------+----+-----------+ | id | GroupName  | Attribute         | op | Value     | +----+------------+-------------------+----+-----------+ |  1 | locked     | Auth-Type         | == | Reject    |

That should also be :=.

Ivan Kalik Kalik Informatika ISP

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html