Send Access-Reject when user does not match any group?

A.L.M.Buxey at lboro.ac.uk A.L.M.Buxey at lboro.ac.uk
Mon Jan 14 14:17:38 CET 2013


Hi,

> As you can see, it matches the rule in "users" first, and then the
> group named "login" in MySQL. There is no other match.

because thats the order that you have them run in.... how can the users
file know anything about the groups if you are doing the groups AFTER
the users file?  change the order or put some other configuratin into
place - eg use unlang after the sql section to check for group and if one
doesnt exist them reject - man unlang




alan


More information about the Freeradius-Users mailing list