Re: files: How to choose SQL entry for users?

2009-08-24 Thread George Koulyabin
Hi. On Mon, Aug 24, 2009 at 02:59:27PM +0200, Alan DeKok wrote: > George Koulyabin wrote: > > On Mon, Aug 24, 2009 at 01:45:11PM +0200, Alan DeKok wrote: > >> George Koulyabin wrote: > >>> I had got success when 'sql_auth' was defined as last entry into > >>> instantiate { }. But I think that thi

Re: files: How to choose SQL entry for users?

2009-08-24 Thread Ivan Kalik
> On Mon, Aug 24, 2009 at 01:45:11PM +0200, Alan DeKok wrote: >> George Koulyabin wrote: >> > I had got success when 'sql_auth' was defined as last entry into >> instantiate { }. But I think that this >> > solution is unsecure and wrong. >> >> Why is that? > > For example, I added new sql-m

Re: files: How to choose SQL entry for users?

2009-08-24 Thread Alan DeKok
George Koulyabin wrote: > On Mon, Aug 24, 2009 at 01:45:11PM +0200, Alan DeKok wrote: >> George Koulyabin wrote: >>> I had got success when 'sql_auth' was defined as last entry into >>> instantiate { }. But I think that this >>> solution is unsecure and wrong. >> Why is that? > > For exam

Re: files: How to choose SQL entry for users?

2009-08-24 Thread George Koulyabin
On Mon, Aug 24, 2009 at 01:45:11PM +0200, Alan DeKok wrote: > George Koulyabin wrote: > > I had got success when 'sql_auth' was defined as last entry into > > instantiate { }. But I think that this > > solution is unsecure and wrong. > > Why is that? For example, I added new sql-module

Re: files: How to choose SQL entry for users?

2009-08-24 Thread Ivan Kalik
> I tried to use sql_auth-SQL-Group like ldap example (DEFAULT > sql_auth-SQL-Group == "Group1"), but FR-server > failed with error 'users[1]: Parse error (check) for entry DEFAULT: > Invalid octet string "Group1" for > attribute name "sql_auth-SQL-Group"'. This error says that attribute is > not d

Re: files: How to choose SQL entry for users?

2009-08-24 Thread Alan DeKok
George Koulyabin wrote: > I had got success when 'sql_auth' was defined as last entry into instantiate > { }. But I think that this > solution is unsecure and wrong. Why is that? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: files: How to choose SQL entry for users?

2009-08-24 Thread George Koulyabin
Hi. I tried to use sql_auth-SQL-Group like ldap example (DEFAULT sql_auth-SQL-Group == "Group1"), but FR-server failed with error 'users[1]: Parse error (check) for entry DEFAULT: Invalid octet string "Group1" for attribute name "sql_auth-SQL-Group"'. This error says that attribute is not defin

Re: files: How to choose SQL entry for users?

2009-08-21 Thread Ivan Kalik
> users: > DEFAULT SQL-Group == 'Group1' > ... > > But files chooses sql_acct (alphabetic first) as sql entry. > How to choose sql_auth? http://wiki.freeradius.org/Rlm_ldap#Group_Support Same applies to sql groups. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http:

files: How to choose SQL entry for users?

2009-08-20 Thread George
Hi I am running FreeRADIUS v2.1.6. Problem is found when SQL works in 'users'. sql.conf: sql sql_auth { Some auth-queries... } sql sql_acct { Some acct-queries... } radiusd.conf: authorize { files sql_auth } users: DEFAULT SQL-Group == 'Group1' ... But files