files: How to choose SQL entry for users?

Alan DeKok aland at deployingradius.com
Mon Aug 24 14:59:27 CEST 2009


George Koulyabin wrote:
> On Mon, Aug 24, 2009 at 01:45:11PM +0200, Alan DeKok wrote:
>> George Koulyabin wrote:
>>> I had got success when 'sql_auth' was defined as last entry into instantiate { }. But I think that this
>>> solution is unsecure and wrong.
>>   Why is that?
> 
> 	For example, I added new sql-module into sql.conf and forgot to fix order of loading of sql-modules 
> into instantiate { }. I tried to do it. The 'users' used last sql-module of sql.conf. 
> Variable 'sqlmod-inst' is used by 'sqlcounter'-module, but why isn't such variable used into 'files'-module?

  (a) That doesn't make it "unsecure".

  (b) you may have MULTIPLE sql modules, and may be doing MULTIPLE sql
group comparisons in the "files" module.  Adding one "sqlmod-inst" to
the "files" module won't help you try to use MULTIPLE sql modules.

  Alan DeKok.



More information about the Freeradius-Users mailing list