<div>yey thats seam to work, but still getting one problem.</div>
<div>So the comp gets bloket regardless of username, but the Reply-message from the bloked table is not being displayed. So I have "bloked" huntgroup name and I have SQL group: Deny_Trial that sends Reply-Message + Reject for all its members (which works fine if i assign user to that group)</div>
<div> </div>
<div>Here is my debug:</div>
<div> </div>
<div>rad_recv: Access-Request packet from host xxx.147.xxx.xxx:60365, id=125, length=138<br> NAS-IP-Address = xxx.147.xxx.xxx<br> NAS-Identifier = "<a href="http://domain.com">domain.com</a>"<br> User-Name = "alexus"<br>
User-Password = "xxxxxxxx"<br> Service-Type = Login-User<br> NAS-Port-Type = Ethernet<br> NAS-Port = 1<br> Framed-IP-Address = 192.168.1.244<br> Called-Station-Id = "00:0d:b9:xx:xx:xx"<br>
Calling-Station-Id = "00:0b:6a:xx:xx:xx"<br> Processing the authorize section of radiusd.conf<br>modcall: entering group authorize for request 2<br>rlm_sql (sql): - sql_groupcmp<br>radius_xlat: 'alexus'<br>
rlm_sql (sql): sql_set_user escaped user --> 'alexus'<br>radius_xlat: 'SELECT GroupName FROM usergroup WHERE UserName='alexus''<br>rlm_sql (sql): Reserving sql socket id: 3<br>rlm_sql_mysql: query: SELECT GroupName FROM usergroup WHERE UserName='alexus'<br>
rlm_sql (sql): Released sql socket id: 3<br>rlm_sql (sql): - sql_groupcmp finished: User does not belong in group Deny_Trial<br>No huntgroup access: [alexus] (from client home_segment port 1 cli 00:0b:6a:xx:xx:xx)<br> modcall[authorize]: module "preprocess" returns reject for request 2<br>
modcall: leaving group authorize (returns reject) for request 2<br>Delaying request 2 for 1 seconds<br>Finished request 2<br>Going to the next request<br>--- Walking the entire request list ---<br>Waking up in 1 seconds...<br>
--- Walking the entire request list ---<br>Waking up in 1 seconds...<br>--- Walking the entire request list ---<br>Sending Access-Reject of id 125 to xxx.147.xxx.xxx port 60365<br>Waking up in 4 seconds...<br>--- Walking the entire request list ---<br>
Cleaning up request 2 ID 125 with timestamp 498cd334<br>Nothing to do. Sleeping until we see a request.<br></div>
<div><br><br> </div>
<div class="gmail_quote">2009/1/31 <span dir="ltr"><<a href="mailto:tnt@kalik.net">tnt@kalik.net</a>></span><br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">Here is a trick from the old days:<br><br>Create a huntgroup like:<br><br>blocked Calling-Station-Id == whatever<br>
SQL-Group == "suspend"<br><br>Where suspend is the group with Auth-Type := Reject in it. That will blok<br>him if he is in suspend group or not (only the message in radius.log<br>will be different). It means using huntgroups file and restart for each<br>
change to it but if it's only 3 users ...<br>
<div>
<div></div>
<div class="Wj3C7c"><br>Ivan Kalik<br>Kalik Informatika ISP<br><br><br><br>Dana 31/1/2009, "Alex M" <<a href="mailto:freeradius@lrcommunications.net">freeradius@lrcommunications.net</a>> piše:<br><br>>damn, upgrade will be painfull for me :(<br>
>I guess I will try to use other means to block missbehaving users. At least<br>>we got only 3 people who try to free ride.<br>><br>>thanks for help<br>><br>>2009/1/31 <<a href="mailto:tnt@kalik.net">tnt@kalik.net</a>><br>
><br>>> Ah, sql groups don't work properly in 1.x. Upgrade.<br>>><br>>> Ivan Kalik<br>>> Kalik Informatika ISP<br>>><br>>><br>>> Dana 31/1/2009, "Alex M" <<a href="mailto:freeradius@lrcommunications.net">freeradius@lrcommunications.net</a>> piše:<br>
>><br>>> >I guess its different in newer version of radius but in my 1.5 the only<br>>> >table that has PRIO is radgroupreply<br>>> ><br>>> >and there is table radusergroup instead there is a group called usergroup.<br>
>> ><br>>> >I'm getting fustrated. :(<br>>> ><br>>> >On Fri, Jan 30, 2009 at 7:32 PM, <<a href="mailto:tnt@kalik.net">tnt@kalik.net</a>> wrote:<br>>> ><br>>> >> >Tried that...<br>
>> >> >now i'm getting all users rejected regardless of mac address in the<br>>> given<br>>> >> >group :(<br>>> >><br>>> >> That shouldn't happen. Post the debug.<br>
>> >><br>>> >> >How do i set priorities?<br>>> >><br>>> >> You have priority field in radusergroup table.<br>>> >><br>>> >> >I though priorities only apply to radreply.<br>
>> >><br>>> >> There are no priorities in radreply.<br>>> >><br>>> >> ><br>>> >> >Do I have to set fall through?<br>>> >> ><br>>> >><br>
>> >> No.<br>>> >><br>>> >> Ivan Kalik<br>>> >> Kalik Informatika ISP<br>>> >><br>>> >> -<br>>> >> List info/subscribe/unsubscribe? See<br>
>> >> <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>>> >><br>>> ><br>>> ><br>>><br>>> -<br>>> List info/subscribe/unsubscribe? See<br>
>> <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>>><br>><br>><br><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br>