<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 9.00.8112.16434"></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Segoe UI"><SPAN style="WIDOWS: 2; TEXT-TRANSFORM: none; TEXT-INDENT: 0px; LETTER-SPACING: normal; FONT: medium 'Times New Roman'; WHITE-SPACE: normal; ORPHANS: 2; COLOR: rgb(0,0,0); WORD-SPACING: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px" class=Apple-style-span>
<H1><FONT size=4 face="Times New Roman Baltic">Arran,</FONT></H1>
<DIV><FONT face="Times New Roman Baltic">Yea - I did give that a try. I'm not sure if fall-through appears in the reply list at the end of the transaction like the other attributes do, but it didn't show up, nor did the group attributes show up.</FONT></DIV>
<DIV><FONT face="Times New Roman Baltic"></FONT> </DIV>
<DIV><FONT face="Times New Roman Baltic">JD</FONT><BR></DIV>
<H1> </H1>
<H1>Re: rlm_sql not checking radgroupreply</H1>
<HR>
<UL>
<LI><EM>To</EM>: FreeRadius users mailing list <<A href="mailto:freeradius-users%40lists.freeradius.org">freeradius-users@lists.freeradius.org</A>></LI>
<LI><EM>Subject</EM>: Re: rlm_sql not checking radgroupreply</LI>
<LI><EM>From</EM>: Arran Cudbard-Bell <<A href="mailto:a.cudbardb%40freeradius.org">a.cudbardb@freeradius.org</A>></LI>
<LI><EM>Date</EM>: Mon, 26 Sep 2011 18:50:32 +0200</LI>
<LI><EM>In-reply-to</EM>: <<A href="mailto:4E806228.97D9.0098.1%40wsc.edu"></A><A href="http://lists.freeradius.org/pipermail/freeradius-users/2011-September/msg00530.html">4E806228.97D9.0098.1@wsc.edu</A>></LI>
<LI><EM>References</EM>: <<A href="mailto:4E806228.97D9.0098.1%40wsc.edu"></A><A href="http://lists.freeradius.org/pipermail/freeradius-users/2011-September/msg00530.html">4E806228.97D9.0098.1@wsc.edu</A>></LI>
<LI><EM>Reply-to</EM>: FreeRadius users mailing list <<A href="mailto:freeradius-users%40lists.freeradius.org">freeradius-users@lists.freeradius.org</A>></LI></UL>
<HR>
<TABLE width="100%">
<TBODY>
<TR>
<TD>
<DIV>
<BLOCKQUOTE type="cite">
<DIV style="MARGIN: 4px 4px 1px; FONT: 10pt 'Segoe UI'">
<DIV> </DIV>
<DIV>I have the read_groups setting set to "yes" in sql.conf and the debug log would make it appear that it's reading it in correctly. The mac is found in radcheck and any attributes in radreply are correctly returned, but rlm_sql never checks for any group memberships at all. I've done a trace on the sql server and it confirms what I see in the debug log from radius - it just never checks.</DIV>
<DIV> </DIV>
<DIV>Thoughts?</DIV></DIV></BLOCKQUOTE>
<DIV><BR></DIV>
<DIV>Weird... Have you tried setting Fall-Through := yes in radcheck... In theory you shouldn't need to, but just to see if it works.</DIV>
<DIV><BR></DIV>
<DIV>-Arran</DIV>
<DIV><BR></DIV></DIV>
<DIV><SPAN style="WIDOWS: 2; TEXT-TRANSFORM: none; TEXT-INDENT: 0px; LETTER-SPACING: normal; BORDER-COLLAPSE: separate; FONT: medium Helvetica; WHITE-SPACE: normal; ORPHANS: 2; COLOR: rgb(0,0,0); WORD-SPACING: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px" class=Apple-style-span><SPAN style="WIDOWS: 2; TEXT-TRANSFORM: none; TEXT-INDENT: 0px; LETTER-SPACING: normal; BORDER-COLLAPSE: separate; FONT: medium Helvetica; WHITE-SPACE: normal; ORPHANS: 2; COLOR: rgb(0,0,0); WORD-SPACING: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px" class=Apple-style-span>
<DIV style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space"><SPAN style="WIDOWS: 2; TEXT-TRANSFORM: none; TEXT-INDENT: 0px; LETTER-SPACING: normal; BORDER-COLLAPSE: separate; FONT: medium Helvetica; WHITE-SPACE: normal; ORPHANS: 2; COLOR: rgb(0,0,0); WORD-SPACING: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px" class=Apple-style-span>
<DIV style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space">Arran Cudbard-Bell<BR><A href="mailto:a.cudbardb@freeradius.org" rel=nofollow>a.cudbardb@freeradius.org</A><BR><BR>Betelwiki, Betelwiki, Betelwiki....<SPAN class=Apple-converted-space> </SPAN>http://wiki.freeradius.org/ !</DIV></SPAN></DIV></SPAN></SPAN></DIV><BR></TD></TR></TBODY></TABLE>
<HR>
<UL>
<LI><STRONG>References</STRONG>:
<UL>
<LI><STRONG><A href="http://lists.freeradius.org/pipermail/freeradius-users/2011-September/msg00530.html" name=00530>rlm_sql not checking radgroupreply</A></STRONG>
<UL>
<LI><EM>From:</EM><SPAN class=Apple-converted-space> </SPAN>"John Dunning" <jodunni1@wsc.edu></LI></UL></LI></UL></LI></UL>
<UL>
<LI>Previous by Date:<SPAN class=Apple-converted-space> </SPAN><A href="http://lists.freeradius.org/pipermail/freeradius-users/2011-September/msg00531.html">Re: EAP authentication accept, user not found</A></LI>
<LI>Previous by Thread:<SPAN class=Apple-converted-space> </SPAN><A href="http://lists.freeradius.org/pipermail/freeradius-users/2011-September/msg00530.html">rlm_sql not checking radgroupreply</A></LI>
<LI>Next by Thread:<SPAN class=Apple-converted-space> </SPAN><A href="http://lists.freeradius.org/pipermail/freeradius-users/2011-September/msg00077.html">run more than one radius on single machine</A></LI>
<LI>Freeradius-Users September 2011 archives indexes sorted by:<SPAN class=Apple-converted-space> </SPAN><A href="http://lists.freeradius.org/pipermail/freeradius-users/2011-September/thread.html">[ thread ]</A><SPAN class=Apple-converted-space> </SPAN><A href="http://lists.freeradius.org/pipermail/freeradius-users/2011-September/subject.html">[ subject ]</A><SPAN class=Apple-converted-space> </SPAN><A href="http://lists.freeradius.org/pipermail/freeradius-users/2011-September/author.html">[ author ]</A><SPAN class=Apple-converted-space> </SPAN><A href="http://lists.freeradius.org/pipermail/freeradius-users/2011-September/date.html">[ date ]</A></LI>
<LI>Freeradius-Users list archive<SPAN class=Apple-converted-space> </SPAN><A href="http://lists.freeradius.org/pipermail/freeradius-users/index.html">Table of Contents</A></LI>
<LI><A href="http://lists.freeradius.org/mailman/listinfo/freeradius-users">More information about the Freeradius-Users mailing list</A></LI></UL>
<HR>
<I>This archive was generated by a fusion of Pipermail (Mailman edition) and<SPAN class=Apple-converted-space> </SPAN><A href="http://www.mhonarc.org/">MHonArc</A>.</I></SPAN></BODY></HTML>