Re: [Help-gnu-radius] Group_query

[Sergey Poznyakoff]

Hi Nadal!

> Whem i use the group_query?

The group query is executed when radiusd is processing a raddb/users
entry which has Group or Group-Name attribute in its LHS. Consider
an example:

DEFAULT Group = X,
              Auth-Type = SQL
        <..RHS..>

When processing this entry, radiusd first checks if the user name being
authenticated pertains to the *system* group "X" (as listed in /etc/passwd
and /etc/group). If it does not, radiusd executes group_query and checks
if the name "X" appears in the list of strings returned by it. If it
does, the daemon proceeds to authentication using this profile. If it
doesn't it tries the next profile (if any).
        
Regards,
Sergey