[strongSwan] EAP Radius

[Martin Willi]

> So if I don't see a RADIUS auth attempt when I add "rightgroups" then
> how could it ever determine the group to know if it would match.

It won't, and the connection just does not match if that group
membership is not determined.

However, rightgroups is a generic concept, not directly related to
RADIUS. You could get that group membership information from a different
backend, for example from a custom XAuth handler.

Regards
Martin