FreeRadius and MySql custom attributes

2008-11-05 Thread Aaron Seibert
Hello, I work in the NOC of an isp. Currently we have VIRCOM Radius servers set up to authenticate against a MySql server cluster, but we'd like to switch to FreeRadius. There is a profiles column that contains a few different service definitions (slip for SlipStream, newsgroups, a combo

Re: FreeRadius and MySql custom attributes

2008-11-05 Thread Stephen Bowman
have created a dictionary.slipstream file with the following: VENDOR Slipstream 7000 ATTRIBUTE SlipStream-Auth True string Slipstream However, that will not authenticate the slip client. If I hardcode the attribute into the auth_reply query, the client is then authenticated. (Query =

Re: FreeRadius and MySql custom attributes

2008-11-05 Thread Aaron Seibert
I'll also add that the dictionary.slipstream is included in the dictionary file. FreeRadius running on freeBSD On Wed, 2008-11-05 at 12:14 -0500, Aaron Seibert wrote: Hello, I work in the NOC of an isp. Currently we have VIRCOM Radius servers set up to authenticate against a MySql server

Re: FreeRadius and MySql custom attributes

2008-11-05 Thread Aaron Seibert
Posting relevant sections along with an explanation - I was doing some fiddling in between posting and responding here. Here is the current setup, as I was trying to make it work: dictionary.slipstream - VENDOR Slipstream 7000 ATTRIBUTE Profile 1 string Slipstream reply query in mssql.conf -

Re: FreeRadius and MySql custom attributes

2008-11-05 Thread Stephen Bowman
authorize_reply_query = SELECT '',Username,'Profile',Profiles,':=' FROM radius_auth WHERE Username = '%{SQL-User-Name}' It's doing exactly what you tell it to do. query: SELECT '',Username,'Profile',Profiles,':=' FROM radius_auth WHERE Username = '[EMAIL PROTECTED]' There's the query

Re: FreeRadius and MySql custom attributes

2008-11-05 Thread Aaron Seibert
Becuase the database is already established with thousands of customers We're looking to migrate from an existing VOPRadius system. The MsSql database is tied into our account management system as well On Wed, 2008-11-05 at 16:45 -0500, Stephen Bowman wrote:

Re: FreeRadius and MySql custom attributes

2008-11-05 Thread Venkatesh K
You can extend the rlm_sql module to read from your schema though it is some work. Alternatively you can go with perl and scripting. I believe extending rlm_sql module to read your schema and generate AVP's will give better performance, but I might be wrong. I have taken this path for a custom

Re: FreeRadius and MySql custom attributes

2008-11-05 Thread Aaron Seibert
I think what I'll do is just change the reply query to pull from the Profiles table so the query would look like id,username,profiles,'true',';='. Then I'll change the dictionary file so the Slip profile gets the correct attributes, and true will be passed tith each of the account types On