R: R: NAS-Identifier and radgroupcheck table

[Arrigo Savio]

I followed your suggestion, but I still have the problem. I put
DEFAULT
       Auth-Type := Reject 
at the bottom of users file. 

I have a mysql database containing users, not file: this could be a problem?


Arrigo


-----Messaggio originale-----
Da: freeradius-users-bounces+a.savio=bascom.it at lists.freeradius.org
[mailto:freeradius-users-bounces+a.savio=bascom.it at lists.freeradius.org] Per
conto di tnt at kalik.net
Inviato: mercoledì 7 gennaio 2009 12.24
A: FreeRadius users mailing list
Oggetto: Re: R: NAS-Identifier and radgroupcheck table

>MMM... Not so easy...
>
>I made other tests, but I had a wrong profile on user table. I corrected
the
>profile and I still have my problem.
>At the moment I can classify users belonging to a group, and all is OK. The
>problem is for users that don't belong to any group. They are still
>authenticated (I read that this is the expected behaviour).
>I'd like to send by default an Access-Reject reply to everybody, sending
the
>Access-Accept only to "grouped" one.
>

Put DEFAULT   Auth-Type := Reject in users file. Add Auth-Type Accept
with := as op in radgroupcheck for each group.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html