test_fail
}
+if (&control.SQL-Group[*] == 'groups_group_a') {
+ test_fail
+}
+
+if !(&control.SQL-Group[*] == 'groups_group_b') {
+ test_fail
+}
+
+#
+# Although the user is in this group, the lack of Fall-Through in radgroupreply
+# means this will never be processed when calling the sql module in authorize context.
+#
+if (&control.SQL-Group[*] == 'groups_group_c') {
+ test_fail
+}
+
#
# Test paircmp group comparisons
#
test_fail
}
+if !(&control.SQL-Group[*] == 'fallthrough_group_a') {
+ test_fail
+}
+
+if !(&control.SQL-Group[*] == 'fallthrough_group_b') {
+ test_fail
+}
+
+if (&control.SQL-Group[*] == 'fallthrough_group_c') {
+ test_fail
+}
+
test_pass
# The group attribute specific to this instance of rlm_sql
group_attribute = "SQL-Group"
+ cache_groups = yes
# Read database-specific queries
$INCLUDE ${modconfdir}/${.:name}/main/${dialect}/queries.conf
# The group attribute specific to this instance of rlm_sql
group_attribute = "SQL-Group"
+ cache_groups = yes
# Read database-specific queries
$INCLUDE ${modconfdir}/${.:name}/main/${dialect}/queries.conf
# The group attribute specific to this instance of rlm_sql
group_attribute = "SQL-Group"
+ cache_groups = yes
# Read database-specific queries
$INCLUDE ${modconfdir}/${.:name}/main/${dialect}/queries.conf