group search filter openLDAP

[Fajar A. Nugraha]

On Sun, Mar 25, 2012 at 4:47 PM, dhanushka ranasinghe
<parakrama1282 at gmail.com> wrote:
> Hi..
>
> we changed Auth-Type := Accept  to Auth-Type := PAP , then it starts to work

You shouldn't need to do that. A cleaner way would be to read
http://freeradius.org/radiusd/man/users.html , and probably just use
something like this

DEFAULT Ldap-Group != "cn=people,ou=users,dc=home,dc=com", Auth-Type := Reject

-- 
Fajar