sql authorize with password and mac

Marcin marcin at nicram.net
Mon Apr 20 16:49:35 CEST 2015


2015-04-20 16:26 GMT+02:00 Alan DeKok <aland at deployingradius.com>:

> On Apr 20, 2015, at 9:48 AM, Marcin <marcin at nicram.net> wrote:
> > I've that config for query:
> >
> > #v+
> > authorize_check_query = "SELECT \
> >            id, lower(name) as UserName , 'Cleartext-Password' as
> Attribute
> > , passwd as Value, ':=' as op \
> >        FROM nodes \
> >        WHERE name = '%{User-Name}'\
> >        UNION \
> >        SELECT n.id, lower(name) as UserName, 'Calling-Station-Id' as
> > Attribute, upper(mac) as Value, ':=' as op FROM \
>
>   See http://wiki.freeradius.org/config/Operators
>
>   The ":=" operator has a well-defined meaning.  You probably want "=="
> instead.
>
>
Ok, thanks. I didn't notice that :/




> > callint station id from database doesn't contain proper mac, but
> > authorization is accepted
>
>   Because you told it to do that.  If you want a comparison, use the
> comparison operator.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html




-- 
Pozdrawiam
Marcin / nicraM


More information about the Freeradius-Users mailing list