Ackbar Joolia wrote:
The radcheck table contains an entry for the password.
The radreply table contains a Fall-Through = Yes for the user user1.
The radgroupcheck contains groupnames (coming from the usergroup table) and
Calling-Station-Id which I need to authenticate against.
The radgroupreply table contains the replies I want to send to the different
groups, which would have been authenticated/differentiated through their
calling-station-id.
That's not right, and if I'm understanding you correctly you can't do
exactly what you want with the current release version of FreeRadius.
Fall-Through does nothing on the current release version of FreeRadius -
the SQL module merges the user and all the group check items into one,
checks them, then puts all the reply items in. Since they're all merged,
putting users into >1 group with conflicting check items will fail, as
will putting users into >1 group with the same reply items.
Also, you would not normally assign IPs to groups - you would assign
them to sessions from a pool (see rlm_sqlippool) or statically to users
(using Framed-IP-Address in the radreply items)
Could you be a bit more specific about what you're trying to do?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
