darkblue wrote:
DEFAULT Auth-Type := System, Group == "admin", Huntgroup-Name == "cisco" Service-Type = NAS-Prompt-User, Cisco-AVPair = "shell:priv-lvl=15", Login-Service = Telnet
DEFAULT Auth-Type := System, Group == "monitor", Huntgroup-Name == "cisco" Service-Type = NAS-Prompt-User, Cisco-AVPair = "shell:priv-lvl=1", Login-Service = Telnet
DEFAULT Auth-Type := System, Group == "admin", Huntgroup-Name == "3com" Login-Service = Telnet, 3Com-User-Access-Level = 3
DEFAULT Auth-Type := System, Group == "monitor", huntgroup-Name == "3com" Login-Service = Telnet, 3Com-User-Access-Level = 1
this kind of configuration work just fine. and now, I would like to use mysql for user db backend. So I got two problem. 1. could mysql utilize the huntgroup file? yes 2. how to transfer this user info , group check and group reply info into mysql?
INSERT into radgroupcheck set GroupName='admin', Attribute='User-Name', op=':=', Value='DEFAULT'; INSERT into radgroupcheck set GroupName='admin', Attribute='Auth-Type', op=':=', Value='local'; INSERT into radgroupcheck set GroupName='admin', Attribute='Huntgroup-Name', op=':=', Value='cisco'; INSERT into radgroupreply set GroupName='admin', Attribute='Service-Type', op'=', Value='NAS-Prompt-User'; INSERT into radgroupreply set GroupName='admin', Attribute='Cisco-AVPair', op'=', Value='shell:priv-lvl=15'; INSERT into radgroupreply set GroupName='admin', Attribute='Login-Service', op'=', Value='Telnet'; I think the above would work but I honestly can't see why you would want to use the db for that few number of users. I have never used the Huntgroup-Name attribute like that so you may be better off using the hints file for that if it doesn't work. The hints file might look like this: DEFAULT NAS-IP-Address == "192.168.1.1" Huntgroup-Name := "cisco" I believe you are still going to have to have an entry in the radcheck table that lists the user and password as well. INSERT into radcheck set UserName='DEFAULT', Attribute='Password', op=':=', Value='changeme'; Then to pull it all together an entry in the usergroup table: INSERT into usergroups set UserName='DEFAULT', GroupName='admin'; It would seem to me that you would also need a Fall-Through = Yes there somewhere in radgroupcheck. Like I said, never tried to enter anything with the DEFAULT username in the db before. That is really what one intendeduse of the users file. If I am off I am sure that Alan will correct me.