Using postauth_users and Access-Reject

[Alan DeKok]

Peter Lambrechtsen wrote:
> I have figured out where my mistake was.  I needed to have the users
> file being used in the authorize section, but I shouldn't have had
> "Auth-Type := Accept" at the end of each line for the Groups, otherwise
> if the Auth-Type is set to Accept the authenticate section is never run
> through.

  That's pretty much what I was trying to explain earlier.  When you
posted another config snippet that *didn't* follow my advice, I lost
interest in the thread.

  I have *no* idea why so many people insist on forcing Auth-Type.  It
causes problems in 99.9% of the situations, including this one.

  Alan DeKok.