That doesn't make a lot of sense from my quick skim of the config and the code, as I don't see anywhere that group_membership_query is referenced, but it definitely triggered FR to respect the read_groups setting.
- Jacob On 12 Jul 2011, at 08:59, Phil Mayers wrote: > On 12/07/11 13:34, Jacob Dawson wrote: >> I'll have the time to test it today, but according to this comment in >> sql.conf, I shouldn't have to set that, and I'd prefer not to have to set it >> on every user in production. >> >> # If set to 'yes' (default) we read the group tables >> # If set to 'no' the user MUST have Fall-Through = Yes in the >> radreply table >> read_groups = yes > > Oops, yes, quite right. Upon closer inspection, fallthrough is only inspected > if "read_groups == no", and defaults to "on". > > I think your problem is that "group_membership_query" is unset, looking at > your original email and the debug output, hence no groups are found. > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

