Block guest VPN

Jonathan Davis jonathan at prioritycolo.com
Wed Sep 22 15:30:00 CEST 2021


Except it doesn't look like it is a guest user?

(0)     if (Ldap-Group == "Gast") {
(0)     Searching for user in group "Gast"
rlm_ldap (ldap): Reserved connection (2)
(0)     Using user DN from request "uid=riedel,ou=people,dc=fr"
(0)     Checking user object's memberOf attributes
(0)       Performing unfiltered search in "uid=riedel,ou=people,dc=fr",
scope "base"
(0)       Waiting for search result...
(0)       Search returned no results
(0)     Can't check membership attributes, user object not found
rlm_ldap (ldap): Released connection (2)
(0)     User is not a member of "Gast"

Check the rlm_ldap docs ?

Jonathan Davis - Priority Colo Inc.
jonathan at prioritycolo.com - https://www.prioritycolo.com
1-888-AS-30176 (1-888-273-0176) x304

On 2021-09-22 9:26 a.m., Sazzad Hossain wrote:
> Hello,
>
> yes,that's the problem.Although its a guest user,it shows following:
>
> _______________________________________________________________
>
> 0)     *User is not a member of "Gast" [ALthough user is a guest]*
> (0)     if (Ldap-Group == "Gast")  -> FALSE
> (0)     [expiration] = noop
> (0)     [logintime] = noop
>
> ________________________________________________________________
>
> THanks
>
> On Wed, Sep 22, 2021 at 3:22 PM Alan DeKok <aland at deployingradius.com>
> wrote:
>
>> On Sep 22, 2021, at 9:19 AM, Sazzad Hossain <sazzad.suzon89 at gmail.com>
>> wrote:
>>> Another question, although after those two changes [mentioned above], the
>>> server is still allowing the GUEST users to login.What i am doing wrong?
>>    Read the debug output, and see if it's doing what you want.
>>
>>
>>> (0)     if (Ldap-Group == "Gast")  -> FALSE
>>    That seems relevant.
>>
>>    Alan DeKok.
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


More information about the Freeradius-Users mailing list