How do I deny access to a specific user, or group of users?
You need to use the Group check item to match a group. You also need to use the Auth-Type := Reject check item to deny them access. A short message explaining why they were rejected wouldn’t hurt, so a Reply-Message reply attribute would be nice. This rule needs to match for all users, so it should be a DEFAULT entry. You want to apply it *instead* of any other authentication type, so it should be listed BEFORE any other entry which contains an Auth-Type. It doesn’t need a Fall-Through, because you’re not giving the user any permission to do anything, you’re just rejecting them. The following entry denies access to one specific user. Note that it MUST be put before ANY other entry with an Auth-Type attribute.
