Thanks Ivan for your answer. My freeradius version is 2.0.5. I added a Reply-Message in the radgroupreply table like this : +----+-----------+---------------+----+-------------------------+ | id | groupname | attribute | op | value | +----+-----------+---------------+----+-------------------------+ | 1 | hotel1 | Reply-Message | = | You are in hotel1 group | +----+-----------+---------------+----+-------------------------+ and when I launch the radtest command, it doesn't seems to send it : #> radtest user1 5f4dcc3b5aa765d61d8327deb882cf99 127.0.0.1 3990 testing123 Sending Access-Request of id 229 to 127.0.0.1 port 1812 User-Name = "user1" User-Password = "5f4dcc3b5aa765d61d8327deb882cf99" NAS-IP-Address = 127.0.0.1 NAS-Port = 3990 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=229, length=26 Idle-Timeout = 60 On the server side, here is what happens : rad_recv: Access-Request packet from host 127.0.0.1 port 32782, id=141, length=73 User-Name = "user1" User-Password = "5f4dcc3b5aa765d61d8327deb882cf99" NAS-IP-Address = 127.0.0.1 NAS-Port = 3990 +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "user1", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound ++[files] returns noop expand: %{User-Name} -> user1 rlm_sql (sql): sql_set_user escaped user --> 'user1' rlm_sql (sql): Reserving sql socket id: 2 expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'user1' ORDER BY id rlm_sql (sql): User found in radcheck table expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'user1' ORDER BY id expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'user1' ORDER BY priority expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'hotel1' ORDER BY id rlm_sql (sql): Released sql socket id: 2 ++[sql] returns ok rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair ++[noresetcounter] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated rad_check_password: Found Auth-Type auth: type "PAP" +- entering group PAP rlm_pap: login attempt with password "5f4dcc3b5aa765d61d8327deb882cf99" rlm_pap: Using clear text password "5f4dcc3b5aa765d61d8327deb882cf99" rlm_pap: User authenticated successfully ++[pap] returns ok +- entering group post-auth ++[exec] returns noop Sending Access-Accept of id 141 to 127.0.0.1 port 32782 Idle-Timeout = 60 Finished request 22. ...well... doesn't seems to change anything... I added an Idle-Timeout parameter in the radreply table, this one works fine, but in the radgroupreply table, it looks like it ignores it. Another thing, I didn't really understood the first part of your answer:
Not only that but Auth-Type Local also wasn't forced. Adding it there is a mistake in the first place but it still didn't work.
Could you explain me this please? Thanks ! tnt-4 wrote:
Not only that but Auth-Type Local also wasn't forced. Adding it there is a mistake in the first place but it still didn't work.
What freeradius version is this? Add Reply-Message to radgroupreply and see if that shows in the reply.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://www.nabble.com/Checking-NAS-Identifier-in-the-radgroupcheck-table-tp1... Sent from the FreeRadius - User mailing list archive at Nabble.com.