dictionary file:

ATTRIBUTE       My-Group                3003    string

users file:

reza    My-Group := "operators", Cleartext-Password := "hello"
        Fall-Through := Yes

bob     My-Group := "disabled", Cleartext-Password := "hello"
        Fall-Through := Yes

DEFAULT My-Group == "operators", Auth-Type := Reject
        Fall-Through := Yes

I want to reject operators group user(s) with matching DEFAULT entry using expression:

My-Group == "operators"

But this not working there and always returns Accept-Accept:

Sent Access-Request Id 201 from to length 74
    User-Name = "reza"
    User-Password = "hello"
    NAS-IP-Address =
    NAS-Port = 0
    Message-Authenticator = 0x00
    Cleartext-Password = "hello"
    Cleartext-Password = "hello"
Received Access-Accept Id 201 from to length 20

Freeradius version:

radiusd: FreeRADIUS Version 3.0.17, for host amd64-portbld-
freebsd11.1, built on Jul  3 2018 at 09:18:06
FreeRADIUS Version 3.0.17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.