Re: group reject with realm problem

[Chris Parker]

At 10:43 AM 11/13/2002 -0600, Marcin Groszek wrote:

realm hostplus.net {
    type        = radius
    authhost    = LOCAL
    accthost    = LOCAL
}

and file realms
hostplus.net            LOCAL

You'll want to use one or the other. I recommend not using 'realms'
as that is an older syntax and has fewer features than 'proxy.conf'.

Something else you could try to to set the users 'shell' entry in the
system password to '/bin/false' or some other shell that is not
listed in /etc/shells. This should also allow the users to be rejected,
even if the password matches.

-Chris
--
\\\|||/// \ StarNet Inc. \ Chris Parker
\ ~ ~ / \ WX *is* Wireless! \ Director, Engineering
| @ @ | \ http://www.starnetwx.net \ (847) 963-0116
oOo---(_)---oOo--\------------------------------------------------------
\ Wholesale Internet Services - http://www.megapop.net



- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html