d := "guest",
> LVL7-Wireless-Client-Policy-Dn := "policy1",
>
>
>
> Similarly for a usergroup say "usergroup1" I should send radius
> attributes.. Also with client Mac which can be seen in radius request as
> calling station id.
>
> Can we
In */etc/raddb/users* file
*user1 Cleartext-Password := "user1"*
*
Tunnel-Type := 13,
Tunnel-Medium-Type := 6,
Tunnel-Private-Group-Id := "guest",
*
*LVL7-Wireless-Client-Policy-Dn := "policy1"*,
Similarly for a
On Sun, Sep 30, 2012 at 4:53 PM, Subhani sk m wrote:
> Hi,
>
> I am using free radius on Linux, Fedora 13. I am able to push policy for a
> user.. I need help on two scenarios given below.
>
> 1.how to push policy for a specific usergroup from free radius sever
>
Depend
Hi,
I am using free radius on Linux, Fedora 13. I am able to push policy for a
user.. I need help on two scenarios given below.
1.how to push policy for a specific usergroup from free radius sever
2. how to push a policy for a specific Calling-Station-ID like
00:16:6F:A2:XX:XX [ no user
Alan DeKok wrote:
The simple solution here is to use the "instantiate" section of
radiusd.conf. List "sql-acct" first, and "sql-auth" section. That way,
the SQL-Group comparison will use the "sql-auth" module, and not the
"sql-acct" module.
Alan DeKok.
-
List info/subscribe/unsubscribe? Se
Trey Scarborough wrote:
> Alan DeKok wrote:
...
>> Let me guess... you have policies for accounting which use "SQL-Group"?
>>
> No It breaks the Authentication when I add the Accounting configuration
Fine. You have *authentication* policies which use "SQL-Group".
That's the issue.
When
th): Reserving sql socket id: 3
rlm_sql_mysql: query: SELECT GroupName FROM usergroup WHERE
UserName='t...@testdomain.net'
[sql-auth] sql_groupcmp finished: User is a member of group active
rlm_sql (sql-auth): Released sql socket id: 3
Runs like this when I add the rad-acct to accounting. It
Trey Scarborough wrote:
> All I am trying to do is run the radius auth querys on a database on one
> machine and the accounting on another in another database. The problem I
> am seeing is that when the additional sql configuration is put in for
> the accounting database it begins to use that conf
"radius"
postauth_table = "radpostauth"
authcheck_table = "radcheck"
authreply_table = "radreply"
groupcheck_table = "radgroupcheck"
groupreply_table = "radgroupreply"
usergroup_table = "usergroup"
nas_table
Trey Scarborough wrote:
> Yes I am aware of how it is Documented I followed the documentation but
> still is not functioning correctly.
>
> I have a configuration that is similar to as follows
Similar is not the same.
Perhaps you could explain in *detail* what you are trying to do with
SQL
database
no authentication queries configured
}
#dose not work uses accounting sql2 for usergroup query
authorize {
sql1
files
}
accounting {
detial
sql
}
#configuration of groups works fine but I lose accounting sql
uthorize {
sql1
files
}
accounting {
detial
}
Alan DeKok wrote
Trey Scarborough wrote:
> I have to mysql configurations for one for my authentication request and
> one for the accounting data. When it make a groupcheck query it is
> always using the module for the accounting server is there anyway to
> make this function correctly and have it use the configura
I have to mysql configurations for one for my authentication request and
one for the accounting data. When it make a groupcheck query it is
always using the module for the accounting server is there anyway to
make this function correctly and have it use the configuration for the
authentication
Hi,(salaam)
Thanks for your help, But I solved the problem and I changed the
radgroupcheck query so it get groupname from usergroup table and then
compare it! I think I have a better solution, isn't it?
BTW thank for your help, please inform me if you know why this problem
exist? is it a bug
>>It looks like you have edited sql queries and mixed user and group
>>queries. Post the part of the startup debug with sql initializing.
>
>
>>Ivan Kalik
>>Kalik Informatika ISP
>
> Thanks for your response, I attached full log.
authorize_check_query = "SELECT id, groupname, attribute,
>It looks like you have edited sql queries and mixed user and group
>queries. Post the part of the startup debug with sql initializing.
>Ivan Kalik
>Kalik Informatika ISP
Thanks for your response, I attached full log.
Ya Ali
Hamid Reza Hasani
radius.log
Description: Binary data
-
List info/su
> if you look at them carefully, you can see there is a bit problem! my
> freeradius is read radgroupcheck before usergroup table, so it can't
> recognize user's group name for radgroupcheck query! so it can't read
> radgroupcheck attributes!
> where is my fault?
sql: query: SELECT id, groupname, attribute, Value,
op FROM radgroupcheck WHERE groupname = ''
ORDER BY id
[sql] expand: SELECT groupname FROM usergroup WHERE
username = '%{SQL-User-Name}' ORDER BY priority -> SELECT
gr
Bjørn Mork writes:
> I am wondering if I'm the only one who finds the following default
> behaviour a bit confusing: Given a user defined like this:
>
> user1 Cleartext-Password := "foo", User-Profile := "profile1"
>
> I would expect "profi
Hello,
I am wondering if I'm the only one who finds the following default
behaviour a bit confusing: Given a user defined like this:
user1 Cleartext-Password := "foo", User-Profile := "profile1"
I would expect "profile1" to always be looked up in th
Hi All,
I have a few problem.
i have freeradius version 1.0.5 running with rlm_sql.
radcheck :
username, attribute, op, value
"test1","password","==","testpass"
"test2","password","==","testpass"
radreply :
none
radusergroup :
"test1","HS1"
"test2","HS2"
"test2","HS1"
radgroupcheck :
groupnam
Many thanks... It is working now! :)
On Tue, Sep 9, 2008 at 5:11 AM, Alan DeKok <[EMAIL PROTECTED]> wrote:
> Carlos Eduardo Tavares Terra wrote:
>> Sorry, but maybe I didn't understand how virtual servers really work.
>
> raddb/sites-available/README
>
> Each virtual server is a RADIUS server, j
Carlos Eduardo Tavares Terra wrote:
> Sorry, but maybe I didn't understand how virtual servers really work.
raddb/sites-available/README
Each virtual server is a RADIUS server, just like in 1.x. The only
difference is that you don't need to run multiple processes to get
multiple server confi
gt;On Fri, Sep 5, 2008 at 2:49 PM, Ivan Kalik <[EMAIL PROTECTED]> wrote:
>>> Radgroupcheck table.
>>>
>>> Ivan Kalik
>>> Kalik Informatika ISP
>>>
>>> -Original Message-
>>> From: [EMAIL PROTECTED]
>>> [mailto:[EMAI
--Original Message-
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] On
>> Behalf Of Carlos Eduardo Tavares Terra
>> Sent: 05 September 2008 02:42
>> To: freeradius-users@lists.freeradius.org
>> Subject: FreeRadius2 + MySQL: NAS x Usergroup
>>
>&g
>
> Ivan Kalik
> Kalik Informatika ISP
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Carlos Eduardo Tavares Terra
> Sent: 05 September 2008 02:42
> To: freeradius-users@lists.freeradius.org
> Subject: FreeR
Radgroupcheck table.
Ivan Kalik
Kalik Informatika ISP
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Carlos Eduardo Tavares Terra
Sent: 05 September 2008 02:42
To: freeradius-users@lists.freeradius.org
Subject: FreeRadius2 + MySQL: NAS x Usergroup
associate an usergroup to a nas?
Example:
NAS (192.168.2.1) -> Usergroup (Dialup)
NAS (192.168.2.2) -> Usergroup (Broadband)
NAS (192.168.2.3) -> Usergroup (Hotspot)
I saw how to do this using huntgroups, but I want to use a mysql
database with all clients.
There are anothe
ion on how to set up different
>domains or authentication groups, but couldn't find how to link a nas to a
>usergroup (is community in the nas table equivalent to GroupName?)...
>
>What I want is to define several groups and that only users in a group can
>autenticate throug
Hello,
I've been browsing the wiki looking for information on how to set up different
domains or authentication groups, but couldn't find how to link a nas to a
usergroup (is community in the nas table equivalent to GroupName?)...
What I want is to define several groups and that
I’ve recently configured freeradius with sql support.
I have it doing all the lookups fine. I was wondering thou, if there was any
way to have radius use a default group, rather then having to create a second
entry in the usergroup table. We’re simply using radius for
authentication
31 matches
Mail list logo
