Group Membership Checking.

David Bell David.Bell at dxi.net
Wed Mar 12 13:38:03 CET 2008


My radius.conf file has the following for Group Membership Checking

                #
                #  Group membership checking.  Disabled by default.
                #
                 groupname_attribute = cn
                 groupmembership_filter =
"(&(objectClass=GroupOfNames)(member=
uid=%{User-Name},ou=people,dc=dxi,dc=net))"
                 groupmembership_attribute = radiusGroupName

The problem with this configuration is that if a user is a member of the
group it will allow them access, even if  they input the wrong password.

Can someone help me with this please.

Thanks

David



More information about the Freeradius-Users mailing list