Thanks Kalik, We changed the default sql to allow it to actually insert the grouname.
2009/2/26 <freeradius-users-requ...@lists.freeradius.org> > Send Freeradius-Users mailing list submissions to > freeradius-users@lists.freeradius.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-users > or, via email, send a message with subject or body 'help' to > freeradius-users-requ...@lists.freeradius.org > > You can reach the person managing the list at > freeradius-users-ow...@lists.freeradius.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Freeradius-Users digest..." > > > Today's Topics: > > 1. Re: SQLCounter configuration (Alan DeKok) > 2. Re: SQLCounter configuration (Alexander Solodukhin) > 3. Re: EAP-PEAP GTC auth_type (t...@kalik.net) > 4. Re: Freeradius-Users Digest, Vol 46, Issue 102 Why is > groupname fieldblank in radacct (t...@kalik.net) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 26 Feb 2009 11:03:22 +0100 > From: Alan DeKok <al...@deployingradius.com> > Subject: Re: SQLCounter configuration > To: FreeRadius users mailing list > <freeradius-users@lists.freeradius.org> > Message-ID: <49a668ea.40...@deployingradius.com> > Content-Type: text/plain; charset=ISO-8859-1 > > alt_ wrote: > > Can you show some examples please? I try to do like this: > > > > noresetBytecounter > > > > if (reject) { > > update reply { > > Reply-Message := "Traffic limit exceeded." > > } > > } > > > > but if noresetBytecounter return reject freeradius immediatly return > reject > > to user and do not process 'if' clause > > You need to put this in the "post-auth" section, "Reject" subsection. > See the example configuration files. > > Alan DeKok. > > > ------------------------------ > > Message: 2 > Date: Thu, 26 Feb 2009 12:12:50 +0200 > From: "Alexander Solodukhin" <a...@softwarium.net> > Subject: Re: SQLCounter configuration > To: "FreeRadius users mailing list" > <freeradius-users@lists.freeradius.org> > Message-ID: <op.upyenokwqsf...@demon.cris.net> > Content-Type: text/plain; format=flowed; delsp=yes; charset=koi8-r > > On Thu, 26 Feb 2009 12:03:22 +0200, Alan DeKok <al...@deployingradius.com> > wrote: > > > alt_ wrote: > >> Can you show some examples please? I try to do like this: > >> > >> noresetBytecounter > >> > >> if (reject) { > >> update reply { > >> Reply-Message := "Traffic limit exceeded." > >> } > >> } > >> > >> but if noresetBytecounter return reject freeradius immediatly return > >> reject > >> to user and do not process 'if' clause > > > > You need to put this in the "post-auth" section, "Reject" subsection. > > See the example configuration files. > > > /etc/freeradius/sites-enabled/default[412]: "SQL Counter" modules aren't > allowed in 'post-auth' sections -- they have no such method. > > -- > ISP CrIS, Softwarium > > > ------------------------------ > > Message: 3 > Date: Thu, 26 Feb 2009 11:14:37 +0100 > From: <t...@kalik.net> > Subject: Re: EAP-PEAP GTC auth_type > To: "FreeRadius users mailing list" > <freeradius-users@lists.freeradius.org> > Message-ID: <fwafhixv.1235643277.5432590....@kalik.net> > Content-Type: text/plain; charset=ISO-8859-2 > > >Great! It works perfectly. > >Other than enabling ldap in authorize and authenticate in > >inner-tunnel, I also had to change eap.conf's gtc section to auth_type > >= LDAP. > > > >This works, but it brings up another problem. Setting auth_type to > >PAP, Local, or commented out on gtc section does not work for LDAP. On > >the other hand, If I set auth_type = LDAP, PEAP-GTC with system user > >(which works if I set auth_type = PAP on gtc section) does not work. > > > >Is there a way I can authenticate with BOTH system user and LDAP using > PEAP-GTC? > >the main radiusd.conf can have multiple authorize methods available, > >right? Why does gct have to explicitly set auth_type? > > > > Leave gtc as pap. Change set_auth_type to no in ldap module > configuration. Module will then just collect the password and pass it to > pap module for authentication. It will not do "bind as user" ldap > authentication. > > Ivan Kalik > Kalik Informatika ISP > > > > ------------------------------ > > Message: 4 > Date: Thu, 26 Feb 2009 11:34:28 +0100 > From: <t...@kalik.net> > Subject: Re: Freeradius-Users Digest, Vol 46, Issue 102 Why is > groupname fieldblank in radacct > To: "FreeRadius users mailing list" > <freeradius-users@lists.freeradius.org> > Message-ID: <i1ceiofk.1235644468.0624740....@kalik.net> > Content-Type: text/plain; charset=ISO-8859-2 > > >I have MySQL 5.0.67 and PostgreSQL 8.3.6 and freeRADIUS 2.17 installed on > >GNU/Linux Fedora 10 distribution. I have identical radius databases on > both > >MySQL and PostgreSQL. When I use the PostgreSQL, the groupname field in > the > >radacct table gets filled in but when I change the database to MySQL, the > >groupname filled is blank. I checked the queries in mysql/diaup.conf and > >postgresql/dialup.conf and found out that they are the same. Why is it > >working with PostgreSQL and not working with MySQL? The groupnames are > >defined in radusergroup table. > > > > Default queries that come with the source don't write to groupname > field. MySQL or PostgreSQL. You can place Class in radgroupreply and > give it the value of the group name. Then put %{Class} into groupname > field in accounting queries. > > Ivan Kalik > Kalik Informatika ISP > > > > ------------------------------ > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > End of Freeradius-Users Digest, Vol 46, Issue 105 > ************************************************* >
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html