Block guest VPN

[Alan DeKok]

On Sep 22, 2021, at 3:06 AM, Sazzad Hossain <sazzad.suzon89 at gmail.com> wrote:
> I want to block our Guest users to use our VPN and i wrote following under /
> sites-enable/default.
> 
> *ldap*
> 
> * if (Ldap-Group [*] == "Gast") {             update control {
>         AUth-Type = reject                  }        }*

  Why add the [*] ?

  All of the documentation and examples say to just use what you did here:

> and under /freeradius/users
> 
> 
> *DEFAULT Ldap-Group == "Gast", Auth-Type := Reject        Fall-Through =
> yes*

  There's no [*] here, which is correct.

  Alan DeKok.