Thank you I have read through it makes sense. So how do I do something based on the results? I would like to only authorize a connection if the users password matches and they are connecting to the correct ssid in the av-pair. Is there a HOWTO or other document outlining how to do that? Thank you again for your assistance. Regards, Dan On Mon, Jul 28, 2014 at 8:02 AM, Alan DeKok <aland@deployingradius.com> wrote:
Dan Fleming wrote:
Here is the debug. For some reason my user dfleming is being accepted even though the cisco-avpair does not match.
Users are accepted when their credentials are OK.
The SQL tables you posted shows it *checking* the Cisco-AVPair. But not *doing* anything with it. The SQL module doesn't reject people if the conditions don't match. It just doesn't match the conditions.
Read this to see how the SQL module works:
http://wiki.freeradius.org/modules/Rlm_sql
Odds are you're assuming it works differently than how it's documented.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html