Filter OpenLDAP users account upon Freeradius 3.0.10 NAS-Port-Id

[Alan DeKok]

On Dec 16, 2015, at 6:34 PM, François Lacombe <fl.infosreseaux at gmail.com> wrote:
> As you suggest it, how can I prevent freeradius to go in authenticate
> section when LDAP return no user record ?

  For EAP, you can't.  EAP requires that the server return an EAP failure at the appropriate stage.

  The EAP protocol is designed to work a certain way.  Forcing it to behave in a different way means that nothing good will happen.

  Alan DeKok.