rlm_sql and read_groups

Phil Mayers p.mayers at imperial.ac.uk
Tue Jul 12 14:59:13 CEST 2011

On 12/07/11 13:34, Jacob Dawson wrote:
> I'll have the time to test it today, but according to this comment in sql.conf, I shouldn't have to set that, and I'd prefer not to have to set it on every user in production.
> 	# If set to 'yes' (default) we read the group tables
>          # If set to 'no' the user MUST have Fall-Through = Yes in the radreply table
>           read_groups = yes

Oops, yes, quite right. Upon closer inspection, fallthrough is only 
inspected if "read_groups == no", and defaults to "on".

I think your problem is that "group_membership_query" is unset, looking 
at your original email and the debug output, hence no groups are found.

More information about the Freeradius-Users mailing list