Best way to deny users not matching any groups in the SQL DB

[Sylvain Munaut]

>> """
>> I have a bunch of services like VPN server, Wifi SSID, Wired port
>> auth, ...  some are on the same NAS (like several SSID on the same
>> AP),
>> """
>>
>> It explicitly says "several SSID on the same AP".
>>
>> Not really sure how I could have been more clear on that ...
>
>   Neither that message, nor the later ones with examples rules from SQL showed any rules which keyed off of SSID.

Among the sample attribute matching I pasted, there was :

wifi_private  | Called-Station-SSID | == | Private

Which was meant to illustrate the "several SSID on the same AP".


>   Again, I can only go by what you say publicly.  I'm not a mind reader.

And apparently not an English reader either.


Cheers,

    Sylvain