stenmark wrote:

Well, I tested what I said I was going to do
When I run radiusd -X, I do not see the server using the
> reply_attr_query that I have set in the sql.conf file
reply_attr_query = "SELECT id,UserName,Attribute,Value,op FROM
> radreply WHERE username='%{SQL-User-Name}'"
So it seems that this is not a query that the SQL modules know
> to use (or the more probable answer...I am doing something wrong)

FreeRADIUS will return to the NAS all attributes in the radreply table belonging to the user (via 'authorize_reply_query'), as well as all attributes belonging to the user's group in radgrouprelply (via 'authorize_group_reply_query'). There's no need for any sort of custom query.

As has been said, all the queries FreeRADIUS can use are listed in the sql.conf file--and messing with the returned columns in those queries is probably a bad idea.

I am obviously doing something wrong. When you say "Just list the attribute in the normal SQL tables.
There's nothing special about a vendor attribute once
you've added it to the dictionary."
I must appologize. I am new to FreeRadius. Can you explain a little more by what you mean here? Do you
> mean I should put this attribute into an extra column
> in the radreply table?

No. Just use the normal columns.

INSERT INTO radreply SET username = "$user", attribute = "Slipstream-Auth", op = ":=", value = "$slip_value";

Is there a way to see all of the
attributes in the Access-Accept packet? (I tried using
> ethereal, but I was not able to find them)

Use the 'radtest' program. It's compiled/installed along with radiusd in FreeRADIUS. Just make certain you set up the machine you're running radtest on as a client in clients.conf first--that sent me for a loop the first time... :-) If the auth packet it sends is accepted, radtest will print a listing of the attribs it received from the server.

Craig.
------

thanks again for your help
Evan Stenmark


- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to