Problem with LDAP and Groups

Alan DeKok aland at
Thu Oct 11 09:58:49 CEST 2007

Bryan Evege wrote:
> Here's the problem.  When a user logs in and is a member of more than
> one group radius only uses the first one to match.  I've included the
> users file below.

  In which you tell it to stop matching after the first one.

> DEFAULT Ldap-Group == packeteer_read_only,User-Profile :=
> "uid=packeteer_read_only,ou=profiles,ou=radius,dc=csctus,dc=net",
> Auth-Type := LDAP
>        Fall-Through = no

  See "man users" for the meaning of Fall-Through.  Then, change this to

  Alan DeKok.

More information about the Freeradius-Users mailing list