Thank you I have read through it makes sense. So how do I do something based on the results? I would like to only authorize a connection if the users password matches and they are connecting to the correct ssid in the av-pair. Is there a HOWTO or other document outlining how to do that?

Thank you again for your assistance.

Regards,

Dan

On Mon, Jul 28, 2014 at 8:02 AM, Alan DeKok <aland@deployingradius.com> wrote:

Dan Fleming wrote:
> Here is the debug. For some reason my user dfleming is being accepted
> even though the cisco-avpair does not match.

Users are accepted when their credentials are OK.

The SQL tables you posted shows it *checking* the Cisco-AVPair. But
not *doing* anything with it. The SQL module doesn't reject people if
the conditions don't match. It just doesn't match the conditions.

Read this to see how the SQL module works:

http://wiki.freeradius.org/modules/Rlm_sql

Odds are you're assuming it works differently than how it's documented.

Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html