FreeRADIUS and LDAP Groups

Tim Gustafson tjg at
Sat Dec 13 00:11:25 CET 2008

> Add: DEFAULT   Auth-Type := Reject

Awesome, that worked.

So, if I wanted to enable multiple LDAP groups, would this be the correct syntax:

DEFAULT LDAP-Group == foo, Auth-Type := Accept
DEFAULT LDAP-Group == bar, Auth-Type := Accept
DEFAULT LDAP-Group == baz, Auth-Type := Accept
DEFAULT Auth-Type := Reject

Tim Gustafson
SOE Webmaster
UC Santa Cruz
tjg at

More information about the Freeradius-Users mailing list