Is not Fall-Through, although I do have it set up, Fall-Through is working. This is my current config where I use Fall-Through:
DEFAULT Auth-Type = System Fall-Through = 1 DEFAULT Service-Type == Call-Check, Auth-Type := None Fall-Through = 1 DEFAULT Service-Type == Group-Check, Auth-Type := None Fall-Through = 1 DEFAULT Service-Type == SIP-Session, Auth-Type := Digest Fall-Through = 1 DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None Fall-Through = 1 DEFAULT Service-Type == SIP-Caller-AVPs, Auth-Type := None Fall-Through = 1 The radius requests are being authenticated fine. The problem is in the radius reply. Radius replies with the AVPs of the first group that it matches that the user belongs to. Instead of returning all the AVPs for all the groups that the user belongs to. So I guess the question is, can a user belong to multiple groups? If so, how can radius reply with all the AVPs that correspond to ALL the groups that the user belongs to? Lenir -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alex M Sent: Sunday, October 23, 2005 11:00 PM To: [EMAIL PROTECTED]; 'FreeRadius users mailing list' Subject: RE: return ALL the AVPs for a username that belongs multiple groups Probably yes... -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Seferovic Edvin Sent: Sunday, October 23, 2005 10:42 PM To: 'FreeRadius users mailing list' Subject: RE: return ALL the AVPs for a username that belongs multiple groups Fall-Through ??? Regards, Edvin Seferovic PS: is a user is matched to one group because of his connection-specific attributes, he wont be accepted as a member of another group ( to differentiate between modem and vpn users for example )... -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alex M Sent: Montag, 24. Oktober 2005 04:37 To: 'FreeRadius users mailing list' Subject: RE: return ALL the AVPs for a username that belongs multiple groups In config file there should be a line that will allow you to go to the next parameter despite the fact that it alredy found muching record... that's a theory, that I remember from documentation -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lenir Sent: Sunday, October 23, 2005 10:14 PM To: 'FreeRadius users mailing list' Subject: RE: return ALL the AVPs for a username that belongs multiple groups Can anybody help me with this? Thanks in advance, Lenir -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lenir Sent: Friday, October 21, 2005 12:53 AM To: 'FreeRadius users mailing list' Subject: return ALL the AVPs for a username that belongs multiple groups Hello list, I have a user that belongs to multiple groups, lets say in the usergroup table, I have username Paul_S that belongs to Group1, Group2 and Group3 (using a different row for each group membership). In the radgroupreply table, I have multiple different attributes for each group. When I do radius authentication for that username, it only returns the AVPs for the first group match in the radgroupreply table, instead of returning ALL the AVPs that match ALL the groups that the user belongs to. How can I make this happen? Im using freeradius 1.0.5 and using mysql as the database. Thanks Lenir - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html