0

dictionary file:

ATTRIBUTE       My-Group                3003    string

users file:

reza    My-Group := "operators", Cleartext-Password := "hello"
        Fall-Through := Yes

bob     My-Group := "disabled", Cleartext-Password := "hello"
        Fall-Through := Yes

DEFAULT My-Group == "operators", Auth-Type := Reject
        Fall-Through := Yes

I want to reject operators group user(s) with matching DEFAULT entry using expression:

My-Group == "operators"

But this not working there and always returns Accept-Accept:

Sent Access-Request Id 201 from 0.0.0.0:46814 to 127.0.0.1:1812 length 74
    User-Name = "reza"
    User-Password = "hello"
    NAS-IP-Address = 127.0.1.1
    NAS-Port = 0
    Message-Authenticator = 0x00
    Cleartext-Password = "hello"
    Cleartext-Password = "hello"
Received Access-Accept Id 201 from 127.0.0.1:1812 to 127.0.0.1:46814 length 20

Freeradius version:

radiusd: FreeRADIUS Version 3.0.17, for host amd64-portbld-
freebsd11.1, built on Jul  3 2018 at 09:18:06
FreeRADIUS Version 3.0.17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.