Re: limiting access based on system groups

>      Does GNU Radius support a way of denying access based on what system
> group a username is part of?  We're looking at switching from YARD for

Yes, it does. Use Group attribute. The following entry will reject any user
belonging to group "mailbox":

DEFAULT   Auth-Type = Reject,
                    Group = "mailbox"
          Reply-Message = "Access denied"

Regards,
Sergey