Phil Mayers wrote: > On Fri, Apr 06, 2007 at 08:43:30PM +0100, Arran Cudbard-Bell wrote: > >> Hi, >> >> Updated The sql querys to honour priority field, and happily it seems >> that rlm_sql processes groups in the order they come out of the >> database... which is good. >> What the packets below are show, is that if the group with the highest >> priority has all it's check items match, then it's reply items are added >> fine. >> >> However if the first group doesn't match then the other groups arn't >> processed ! So although the user is still authorised via LDAP none of >> the group reply items are sent :( >> > > So Fall-Through is not being obeyed, correct? > No Fall-Through shouldn't even be checked. Whats happening is if the first groups check items don't match, it doesn't check the second group. Fall-Through status for a group should only be checked if the group actually matches.
--- Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
