Sorry, but maybe I didn't understand how virtual servers really work. I have one big users base. The users can be in one or more groups. User:John - Group:dialup User:John - Group:broadband User:Jack - Group:dialup User:Jack - Group: hotspot John and Jack are in my radcheck and radusergroup tables. Username: John Username: Jack Attribute: Password Attribute: Password Op: := Op: := Value: crypt('test') Value: crypt('test2') My nas clients are in database too. nasname: 192.168.2.2 nasname: 192.168.2.3 shortname: dialup-nas shortname: broadband-nas type: cisco type: cisco secret: secret-password secret: secret-password server: dialup server: broadband My problem is here: expand: %{User-Name} -> John rlm_sql (sql): sql_set_user escaped user --> 'John' rlm_sql (sql): Reserving sql socket id: 2 expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'John' ORDER BY id rlm_sql (sql): User found in radcheck table expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'John' ORDER BY id expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'John' ORDER BY priority expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'dialup' ORDER BY id rlm_sql (sql): User found in group dialup expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'dialup' ORDER BY id rlm_sql (sql): Released sql socket id: 2 John is connecting through broadband-nas, but freeradius is getting dialup groupname and all its checks and replys. Dialup and broadband has the same priority in radusergroup table. I wish to 'force' something like 'dialup-nas'->'dialup group', 'broadband-nas'->'broadband group'. Maybe I'm going through the wrong way. I have separated into different virtual servers because each type of service have different modules implemented by me. In freeradius1 I was using the groupreply 'Exec-Program-Wait' and different radius servers for each service. In each server I have modified the sql querys to get only replys and checks for respectives groups (services). How is the 'right' way to implement this scenario with freeradius 2? Thank you for the help. 2008/9/6 <tnt@kalik.net>:
No. You define virtual home servers in proxy.conf.
Ivan Kalik Kalik Informatika ISP
Dana 6/9/2008, "Carlos Eduardo Tavares Terra" <eduardo.terra@gmail.com> piše:
Can I associate in groupcheck a groupname with a virtual server?
I have separated each type of services into different virtual servers, because each one of then has different modules.
Thanks
On Fri, Sep 5, 2008 at 2:49 PM, Ivan Kalik <tnt@kalik.net> wrote:
Radgroupcheck table.
Ivan Kalik Kalik Informatika ISP
-----Original Message----- From: freeradius-users-bounces+tnt=kalik.net@lists.freeradius.org [mailto:freeradius-users-bounces+tnt=kalik.net@lists.freeradius.org] On Behalf Of Carlos Eduardo Tavares Terra Sent: 05 September 2008 02:42 To: freeradius-users@lists.freeradius.org Subject: FreeRadius2 + MySQL: NAS x Usergroup
Dear freeradius users,
I have a special scenario. Today I have many freeradius servers, each one responsible for differente services.
Now I want to group this freeradius servers into one master server, but I have users in many differente usergroups (one for each service). How can I associate an usergroup to a nas? Example: NAS (192.168.2.1) -> Usergroup (Dialup) NAS (192.168.2.2) -> Usergroup (Broadband) NAS (192.168.2.3) -> Usergroup (Hotspot)
I saw how to do this using huntgroups, but I want to use a mysql database with all clients.
There are another ways to implement this different services into one radius server, maybe the right way? If not, how can I associate the usergroups and nas using mysql?
Thank you -- Carlos Eduardo Tavares Terra GNU/Linux #413291 [http://counter.li.org] Slackware Linux - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.169 / Virus Database: 270.6.16/1652 - Release Date: 2008-09-04 18:54
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Carlos Eduardo Tavares Terra Analista de Sistemas Petróleo Brasileiro S/A GNU/Linux #413291 [http://counter.li.org] Slackware Linux
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Carlos Eduardo Tavares Terra Analista de Sistemas Petróleo Brasileiro S/A GNU/Linux #413291 [http://counter.li.org] Slackware Linux