User + Device Authentication to Specific Network

[Alan DeKok]

On Jun 10, 2019, at 5:04 PM, Duncan X Simpson <virtualdxs at gmail.com> wrote:
> That did it, and the whole thing makes a lot more sense to me now.

  Sounds good.

> I have one last question relating to this. I couldn't find it anywhere in the docs. How do I determine if a user is in a given group in unlang? I can set an attribute in radgroupreply if I need to, but I figure there's probably a cleaner way than that.

  FreeRADIUS doesn't have a native concept of groups.  That's what a database is for.

  You can query LDAP groups via the "LDAP-Group" attribute.

  Alan DeKok.