What is this "group authentication"?

[Alan DeKok]

Gary Algier <gaa at ulticom.com> wrote:
> I am trying to use the WinXP supplied supplicant and I am getting:
>     modcall: group authenticate returns invalid for request 41
> 
> Can someone give me a hint as to what this means?

  Read the *rest* of the debug log above that to see what's going on.

> When I use the WinXP bulitin supplicant in "Automatically use my
> Windows login..." mode, Freeradius fails with the group
> authentication message.

  It's not "group authentication", it's the "authentication" section
of "radiusd.conf".

> If I uncheck that and type a login
> and password (but not a domain), it works fine.  It never does
> any sort of group check.  If I supply a domain, it does the group
> check (and fails).  When does it check groups?  What is it
> checking?

  Read the *rest* of the debug log.

  If all you do is look at the last line or two, you're guaranteed to
not see what's going on.

  Alan DeKok.