<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.4.4">
</HEAD>
<BODY>
Il giorno gio, 06/06/2013 alle 09.21 +0200, Marco Marzetti ha scritto:<BR>
<BLOCKQUOTE TYPE=CITE>
Il giorno mer, 05/06/2013 alle 13.41 -0400, Alan DeKok ha scritto:
<BLOCKQUOTE TYPE=CITE>
<PRE>
Marco Marzetti wrote:
> Also, if i understand it correctly, it makes sense to me since "==" is a
> filtering
> operator while ":=" add the attribute to the list for further checking
>
> Anyway, i've updated the record above and putting ":=" and it doesn't work.
It depends what you want to do. I thought you had said you wanted to
*set* the huntgroups in SQL. If so, := is the correct thing to use.
If you're just checking it, == is the right one.
</PRE>
</BLOCKQUOTE>
<BR>
Yes. I'm checking for a match between the NAS-IP-Address and the specified username.<BR>
So, if user "foo" sends an authentication request through NAS "192.0.2.1", FreeRADIUS should check if <BR>
that NAS-IP-Address address matches with the ones associated to the Huntgroup named "APPARATI".<BR>
<BR>
<BLOCKQUOTE TYPE=CITE>
<PRE>
The huntgroups are set in the "huntgroups" file. Have you looked there?
</PRE>
</BLOCKQUOTE>
<BR>
As said, the filter works if the user's Huntgroup-Name is set in the radcheck table and it doesn't if it is set <BR>
in the radgroupcheck one.<BR>
<BR>
<BLOCKQUOTE TYPE=CITE>
<PRE>
Alan DeKok.
</PRE>
</BLOCKQUOTE>
<BR>
Thank You<BR>
<BR>
Marco
<PRE>
-
List info/subscribe/unsubscribe? See <A HREF="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A>
</PRE>
</BLOCKQUOTE>
<BR>
I eventually found this in rlm_sql:<BR>
<BR>
5. For each group this user is a member of, the corresponding check items<BR>
are pulled from radgroupcheck table and compared with the request. If<BR>
there is a match, the reply items for this group are pulled from the<BR>
radgroupreply table and applied.<BR>
<BR>
So there MUST be a match in radgroupcheck to make the user be a part of the group.<BR>
Then you can't make an Huntgroup-Name check on a per group basis.<BR>
<BR>
<BR>
</BODY>
</HTML>