>So, if I set the NAS-Identifier to "LMS2" (the one used by my chillispot >portal), the condition NAS-Identifier == LMS2 matches, so radius puts me to >the "hotel1" group. If it doesn't match (while using radtest command for >example), it continues the login process, but considering that i don't own >any group... So in my problem explained before, the user can log in even if >he's not recognized as coming from the hotel he was expected to come from... >What I would like to find is a way to allow a users to log in, only if they >have been attributed to a group... >
Ah, failed check in sql groups won't reject the user. It will just cause group info to be ignored. This is to allow the user to be a member of multiple groups - if he doesn't match one, then checks go on to next one with lower priority etc. Use radcheck for checks that should reject the user. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
