- Freeradius-Users - lists.freeradius.org

FreeRadius 1.1.3 and PHPMyPrepaid
by Michelle Manning 10 Nov '06

10 Nov '06

I was wondering if anyone has worked the two of these together happily? I've managed to get Radius configured and running (Thanks guys!). But I can't login with a phpmyprepaid user - If I create my own user (very simplistic) it works, with no worries, otherwise the user is rejected because of a value in the database. Here is an example of the database records. radcheck is the table. The create table statement is as follows: CREATE TABLE `radcheck` ( `id` int(11) unsigned NOT NULL auto_increment, `UserName` varchar(64) NOT NULL default '', `FirstName` varchar(40) NOT NULL default '', `LastName` varchar(40) NOT NULL default '', `CustID` varchar(5) NOT NULL default '', `Attribute` varchar(32) NOT NULL default '', `op` char(2) NOT NULL default '==', `Value` varchar(253) NOT NULL default '', `CrDate` timestamp NOT NULL default '0000-00-00 00:00:00', `creator` varchar(20) default 'NULL', `Location` smallint(4) default '0', `activated` smallint(4) NOT NULL default '0', `activeDate` timestamp NOT NULL default '0000-00-00 00:00:00', `status` smallint(4) NOT NULL default '0', `rate` smallint(4) NOT NULL default '1', `Type` varchar(50) NOT NULL default '', `BillingPlan` smallint(4) NOT NULL default '0', `TimeToFinish` smallint(1) NOT NULL default '0', PRIMARY KEY (`id`), KEY `UserName` (`UserName`(32)) ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=67 ; id 1 works - username michelle, id 2 fails and the reason given when running radiusd -X is that it doesn't recognize Max-All-Session. Have I missed something in the configuration that would set that up for me? Or am I whistling up a tree trying to get phpmyprepaid to work? I will admit that it wasn't pleasant getting oddities to work for me in phpmyprepaid, there were a lot of little things in the code that drove me bonkers.... I am also using DD-WRT on a Linksys, Chillispot, and FreeRadius1.1.3 on CentOS. INSERT INTO `radcheck` (`id`, `UserName`, `FirstName`, `LastName`, `CustID`, `Attribute`, `op`, `Value`, `CrDate`, `creator`, `Location`, `activated`, `activeDate`, `status`, `rate`, `Type`, `BillingPlan`, `TimeToFinish`) VALUES (*1, 'michelle', 'michelle', 'manning', '1', 'Password', ':=', 'michelle', '0000-00-00 00:00:00', 'NULL', 0, 0, '0000-00-00 00:00:00', 0, 1, '', 0, 0)*, (2, 'tansel6', '', 'tansel6', '', 'Password', ':=', 'tansel6', '2006-11-09 16:01:52', 'admin', 1, 0, '0000-00-00 00:00:00', 0, 1, 'Hourly', 1, 0), (3, 'tansel6', '', 'tansel6', '', 'Simultaneous-Use', ':=', '1', '2006-11-09 16:01:52', 'admin', 1, 0, '0000-00-00 00:00:00', 0, 1, 'Hourly', 1, 0), (4, 'tansel6', '', 'tansel6', '', '*Max-All-Session*', ':=', '1800', '2006-11-09 16:01:52', 'admin', 1, 0, '0000-00-00 00:00:00', 0, 1, 'Hourly', 1, 0), (5, 'tansel6', '', 'tansel6', '', 'WISPr-Location-ID', ':=', '1', '2006-11-09 16:01:52', 'admin', 1, 0, '0000-00-00 00:00:00', 0, 1, 'Hourly', 1, 0), (6, 'tansel6', '', 'tansel6', '', 'Expiration', ':=', '09 May 2007 00:00:00', '2006-11-09 16:01:52', 'admin', 1, 0, '0000-00-00 00:00:00', 0, 1, 'Hourly', 1, 0),

1 0

dialup_admin+ldap+sql
by jerrrry＠voila.fr 10 Nov '06

10 Nov '06

Hi, I saw that dialup_admin can use ldap or SQL to manage users. I'd like to know if i can, using dialup-admin: 1- authenticate users with ldap and add in the radius server answer per user attributes that are stored in my sql DB. 2- authenticate users with ldap and add in the radius server answer attributes depending on the nas hintgroups and ldap-group. i already did this with freeradius users configuration file and now i'd like to add new users or default users using only a GUI: see my users file: Robert Auth-Type = LDAP service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=1" DEFAULT Ldap-Group == "ou=admin,ou=groupe,dc=company,dc=com", Huntgroup-Name == "alphen" service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=15" thank you for your help Thomas

1 0

networkaddresses in huntgroupfile
by Hans Bornemann 10 Nov '06

10 Nov '06

Hi, is there a way to define networks in the huntgroupfile, something like name == 10.0.0.1/24 Hans -- Hans Bornemann Universitaet Dortmund - Hochschulrechenzentrum Tel. ++49 231 755 2132 Fax. ++49 231 755 2731

1 0

rlm_sql multiple instances handling of
by Graeme Hinchliffe 10 Nov '06

10 Nov '06

Hi, I have a problem where I need a lot of threads to catch accounting data, a lot of threads means a lot of DB handles. Alas this means more than 256 db handles which is the limit for rlm_sql. My thoughts therefore was to instantiate multiple rlm_sql modules to increase the number of db handles availible. However I am wondering on how to now use this. This system is purely for accounting. If I say put in the accounting stanza: sql1 sql2 sqln Will the accounting packet be sent to all sql instanses in turn, or just the 1st one that succeeds ? and then not any further ? Will a "no free db handles" error from sql1 lead to sql2 being attempted ? Thanks in advance ----- Graeme Hinchliffe (BSc) Core Systems Designer Zen Internet (http://www.zen.co.uk/) Direct: 0845 058 9074 Main : 0845 058 9000 Fax : 0845 058 9005

1 0

Queries apear in Dialup_admin page
by CASTANHEIRA, Nuno Osvaldo 10 Nov '06

10 Nov '06

Hi, i have a strange problem in my freeradius with dialup_admin interface. When i choose the fields, statistics, user statistics, online users, radius clients .....etc, the queries apear in Dialup_Admin page............... very strange. Can anyone tell me what i´m i doing wrong. Sorry for my english. Thanks. Nuno Castanheira REFERTELECOM E-mail: nocastanheira(a)refertelecom.pt

3 4

howto get/send the fullname of an user
by Ariel VIVES 09 Nov '06

09 Nov '06

Hello the list, I'm starting with freeradius. Authentication works fine ! But the informations I get is only the username (le login name in /etc/passwd). How do I get the Fullname ? Or others informations (like mail, home directory, ...) Is it possible ? is it a configuration of the server or a request from the client ? thanks for your help -- Ariel

4 9

Re:
by Eric Faden 09 Nov '06

09 Nov '06

Debug log is below, censored of course. It seems to be pulling the correct things out of the LDAP database, e.g. the NT-Password, but then mschap returns noop instead of anything. After that it seems to default to Auth-Type System which won't work because the user is only on LDAP. Ignore the first attempt, in which I forgot to have the dialupAccess attribute set. -Eric #################### DEBUG LOG ######################3 halogen:/BACKUP_DRIVE# freeradius -X -A Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/freeradius/proxy.conf Config: including file: /etc/freeradius/clients.conf Config: including file: /etc/freeradius/snmp.conf Config: including file: /etc/freeradius/eap.conf Config: including file: /etc/freeradius/sql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/freeradius" main: libdir = "/usr/lib/freeradius" main: radacctdir = "/var/log/freeradius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/freeradius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/freeradius/freeradius.pid" main: user = "freerad" main: group = "freerad" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib/freeradius Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = yes mschap: require_strong = yes mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded LDAP ldap: server = "127.0.0.1" ldap: port = 389 ldap: net_timeout = 1 ldap: timeout = 4 ldap: timelimit = 3 ldap: identity = "<REMOVED>" ldap: tls_mode = no ldap: start_tls = no ldap: tls_cacertfile = "(null)" ldap: tls_cacertdir = "(null)" ldap: tls_certfile = "(null)" ldap: tls_keyfile = "(null)" ldap: tls_randfile = "(null)" ldap: tls_require_cert = "allow" ldap: password = "<REMOVED>" ldap: basedn = "<REMOVED>" ldap: filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" ldap: base_filter = "(objectclass=radiusprofile)" ldap: default_profile = "(null)" ldap: profile_attribute = "(null)" ldap: password_header = "(null)" ldap: password_attribute = "userPassword" ldap: access_attr = "dialupAccess" ldap: groupname_attribute = "cn" ldap: groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" ldap: groupmembership_attribute = "(null)" ldap: dictionary_mapping = "/etc/freeradius/ldap.attrmap" ldap: ldap_debug = 0 ldap: ldap_connections_number = 5 ldap: compare_check_items = no ldap: access_attr_used_for_allow = yes ldap: do_xlat = yes ldap: edir_account_policy_check = yes ldap: set_auth_type = yes rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name ldap rlm_ldap: reading ldap<->radius mappings from file /etc/freeradius/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP sambaLMPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNTPassword mapped to RADIUS NT-Password rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message conns: 0x8145378 Module: Instantiated ldap (ldap) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/freeradius/huntgroups" preprocess: hints = "/etc/freeradius/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded detail detail: detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (auth_log) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/etc/freeradius/users" files: acctusersfile = "/etc/freeradius/acct_users" files: preproxy_usersfile = "/etc/freeradius/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) detail: detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "/etc/shadow" unix: group = "(null)" unix: radwtmp = "/var/log/freeradius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded radutmp radutmp: filename = "/var/log/freeradius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:32771, id=213, length=58 User-Name = "<REMOVED>" User-Password = "<REMOVED>" NAS-IP-Address = 255.255.255.255 NAS-Port = 1801 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 radius_xlat: '/var/log/freeradius/radacct/127.0.0.1/auth-detail-20061106' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/auth-detail-20061106 modcall[authorize]: module "auth_log" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "<REMOVED>", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for <REMOVED> radius_xlat: '(uid=REMOVED>)' radius_xlat: '<REMOVED>' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to 127.0.0.1:389, authentication 0 rlm_ldap: bind as <REMOVED> to 127.0.0.1:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: performing search in <REMOVED>, with filter (uid=<REMOVED>) rlm_ldap: no dialupAccess attribute - access denied by default rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns userlock for request 0 modcall: leaving group authorize (returns userlock) for request 0 Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 213 to 127.0.0.1 port 32771 Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 213 with timestamp 45500c67 Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 127.0.0.1:32771, id=217, length=58 User-Name = "<REMOVED>" User-Password = "<REMOVED>" NAS-IP-Address = 255.255.255.255 NAS-Port = 1801 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 radius_xlat: '/var/log/freeradius/radacct/127.0.0.1/auth-detail-20061106' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/auth-detail-20061106 modcall[authorize]: module "auth_log" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_realm: No '@' in User-Name = "<REMOVED>", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 1 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 1 rlm_ldap: - authorize rlm_ldap: performing user authorization for <REMOVED> radius_xlat: '(uid=<REMOVED>)' radius_xlat: '<REMOVED>' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in <REMOVED>, with filter (uid=<REMOVED>) rlm_ldap: checking if remote access for MREMOVED> is allowed by dialupAccess rlm_ldap: Added password <REMOVED, NT-Password> in check items rlm_ldap: looking for check items in directory... rlm_ldap: Adding sambaNTPassword as NT-Password, value <REMOVED> & op=21 rlm_ldap: Adding sambaLMPassword as LM-Password, value <REMOVED> & op=21 rlm_ldap: looking for reply items in directory... rlm_ldap: user <REMOVED> authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns ok for request 1 modcall: leaving group authorize (returns ok) for request 1 rad_check_password: Found Auth-Type System auth: type "System" ERROR: Unknown value specified for Auth-Type. Cannot perform requested action. auth: Failed to validate the user. Delaying request 1 for 1 seconds Finished request 1 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 217 to 127.0.0.1 port 32771 Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 1 ID 217 with timestamp 45500c97 Nothing to do. Sleeping until we see a request.

3 6

Re: Server logs say users authenticate, but they don't (Now with more details!)
by Ernie Dunbar 09 Nov '06

09 Nov '06

> G'day Ernie, > > Can you sniff on the AS5300 and ensure the Access-Accept packets are > arriving before the 3 second (default) timeout? Yes, we tried that. The access-accept packets aren't arriving at all! > Does it work if you temporarily disable the Simultaneous-Use check? No, that doesn't work either.

2 4

RE: Multiple LDAP (Not failover) lookup...
by Garber, Neal 09 Nov '06

09 Nov '06

> If(authentication in ldap1 success) { Use ldap1 in the authenticate stage of radiusd.conf > if(productCode attribute exists in ldap2 success) { Use ldap2 in the authorize stage of radiusd.conf Authorize is performed first in FreeRadius (you show authenticate First), but it shouldn't matter for what you're trying to do. Configure ldap.attrmap to obtain the productCode attribute.

3 3

RE: Assign IP based on CallingStationID.
by John Longland 09 Nov '06

09 Nov '06

The idea is to do IP-assignment based on the Calling-Station-ID and disregarding the username,password that is passed to radius. JOhn -----Original Message----- From: freeradius-users-bounces+jlongland=grintek.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+jlongland=grintek.com@lists.freeradius. org]On Behalf Of Collen Blijenberg Sent: 09 November 2006 15:40 To: FreeRadius users mailing list Subject: Re: Assign IP based on CallingStationID. Hmm i tried this, but it ain't working.. ?! i have: id - 1 username - blah attribute - Calling-Stattion-Id op - == value - [mac adress] still get username ask ?! no connection. dunno, what's the idea behinf this query ? mac = username ? no username, auth is done true mac ? Cheers Collen John Longland wrote: > > authorize_check_query = "select id,UserName,Attribute,Value,op FROM > ${authcheck_table} WHERE UserName in > (select UserName from ${authcheck_table} WHERE Value = > '%{Calling-Station-ID}') > ORDER BY id" > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0