Understanding radgroupcheck

[Alan DeKok]

Marcus Ng wrote:
> 1. When a user has multiple entries of the same attribute in
> radgroupcheck, it is a OR condition meaning that if he satisfies one of
> the entry it is a PASS? E.g. If there are 3 NAS-IP-Address entries, then
> satisfying any of the 3 IP address is a PASS?

  The attributes must ALL match.  It doesn't matter if they're the same,
or different ones.

> 2. What if there are more than 1 type of attributes. Does it mean it is
> a PASS only if each of the attribute is satisfied at least once?

  The type of attribute doesn't matter.  They ALL must match.

> 3. Does this apply to radcheck as well?

  radcheck and radgroupcheck work exactly the same way.

  Alan DeKok.