What if you add an entry in the users file before the DEFAULT entry for
djoe with some bogus password. Doesn't the radius code search the users
files sequentially for the first match. This way djoe wouldn't be able
to connect because he wouldn't have to correct password. Maybe entries
for root and such should also be added to the users files if you use the
DEFAULT mechanism.
It would be nice if there was a keyword for the users password that
meant that there was no access.
Seems as though there are two mode:
Only allow connections from those users that are specifically listed in
the the USERS files. All others in the PASSWORD file do not have access
by default.
OR
Allow connections from any user listed in the PASSWORD file, except
those specifically listed in the USERS file.
geoff