What version of FR are you using?  If you are using a current CVS
snapshot, then the group_membership_query is actually used to determine
group membership during SQL authorization as well.  With a modified
group_membership_query using the PRIORITY column to sort the results (as
can be seen in the basic sql.conf file), you can decide what happens to
a user based on that ordering.  FR will run through each of the groups
until one matches (just like the users file).

--Mike


On Fri, 2004-10-15 at 06:14, Alexander Serkin wrote:
> One more question - what is PRIORITY column in patched usergroup table for?
> Is it used somehow by code?
> I mean if my user appears in two groups and one group has Auth-Type:=Accept and 
> another has Auth-Type:=Reject will the PRIORITY help radius to make decision 
> what to do?


-- 

--Mike

-----------------------------------
Michael Griego
Wireless LAN Project Manager
The University of Texas at Dallas



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to