[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: Understanding radgroupcheck
From:       Alan DeKok <aland () deployingradius ! com>
Date:       2014-08-25 11:55:30
Message-ID: 53FB2432.7080209 () deployingradius ! com
[Download RAW message or body]

Marcus Ng wrote:
> 1. When a user has multiple entries of the same attribute in
> radgroupcheck, it is a OR condition meaning that if he satisfies one of
> the entry it is a PASS? E.g. If there are 3 NAS-IP-Address entries, then
> satisfying any of the 3 IP address is a PASS?

  The attributes must ALL match.  It doesn't matter if they're the same,
or different ones.

> 2. What if there are more than 1 type of attributes. Does it mean it is
> a PASS only if each of the attribute is satisfied at least once?

  The type of attribute doesn't matter.  They ALL must match.

> 3. Does this apply to radcheck as well?

  radcheck and radgroupcheck work exactly the same way.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
[prev in list] [next in list] [prev in thread] [next in thread]