Enabling / disabling active directory users

Alan DeKok aland at deployingradius.com
Thu Jun 17 08:06:54 CEST 2010

Iain Grant wrote:
> We have on site a Windows 2008 RC2 domain controller ( 64-bit ) which I
> have a linux based freeradius server hanging from.
> My question is, other than changing the users file on the freeradius
> server, is there another way of disabling a user from authentication
> through the radius server but still allow them access via the active
> directory route.

  Sure.  Put them into a "non-radius" group in LDAP.  Then, check the
group, and reject them if they're in the group.

  Alan DeKok.

More information about the Freeradius-Users mailing list