yey thats seam to work, but still getting one problem.
So the comp gets bloket regardless of username, but the Reply-message from the bloked table is not being displayed. So I have "bloked" huntgroup name and I have SQL group: Deny_Trial that sends Reply-Message + Reject for  all its members (which works fine if i assign user to that group)
 
Here is my debug:
 
rad_recv: Access-Request packet from host xxx.147.xxx.xxx:60365, id=125, length=138
        NAS-IP-Address = xxx.147.xxx.xxx
        NAS-Identifier = "domain.com"
        User-Name = "alexus"
        User-Password = "xxxxxxxx"
        Service-Type = Login-User
        NAS-Port-Type = Ethernet
        NAS-Port = 1
        Framed-IP-Address = 192.168.1.244
        Called-Station-Id = "00:0d:b9:xx:xx:xx"
        Calling-Station-Id = "00:0b:6a:xx:xx:xx"
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 2
rlm_sql (sql): - sql_groupcmp
radius_xlat:  'alexus'
rlm_sql (sql): sql_set_user escaped user --> 'alexus'
radius_xlat:  'SELECT GroupName FROM usergroup WHERE UserName='alexus''
rlm_sql (sql): Reserving sql socket id: 3
rlm_sql_mysql: query:  SELECT GroupName FROM usergroup WHERE UserName='alexus'
rlm_sql (sql): Released sql socket id: 3
rlm_sql (sql): - sql_groupcmp finished: User does not belong in group Deny_Trial
No huntgroup access: [alexus] (from client home_segment port 1 cli 00:0b:6a:xx:xx:xx)
  modcall[authorize]: module "preprocess" returns reject for request 2
modcall: leaving group authorize (returns reject) for request 2
Delaying request 2 for 1 seconds
Finished request 2
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 125 to xxx.147.xxx.xxx port 60365
Waking up in 4 seconds...
--- Walking the entire request list ---
Cleaning up request 2 ID 125 with timestamp 498cd334
Nothing to do.  Sleeping until we see a request.


 
2009/1/31 <tnt@kalik.net>
Here is a trick from the old days:

Create a huntgroup like:

blocked   Calling-Station-Id == whatever
              SQL-Group == "suspend"

Where suspend is the group with Auth-Type := Reject in it. That will blok
him if he is in suspend group or not (only the message in radius.log
will be different). It means using huntgroups file and restart for each
change to it but if it's only 3 users ...

Ivan Kalik
Kalik Informatika ISP



Dana 31/1/2009, "Alex M" <freeradius@lrcommunications.net> piše:

>damn, upgrade will be painfull for me :(
>I guess I will try to use other means to block missbehaving users. At least
>we got only 3 people who try to free ride.
>
>thanks for help
>
>2009/1/31 <tnt@kalik.net>
>
>> Ah, sql groups don't work properly in 1.x. Upgrade.
>>
>> Ivan Kalik
>> Kalik Informatika ISP
>>
>>
>> Dana 31/1/2009, "Alex M" <freeradius@lrcommunications.net> piše:
>>
>> >I guess its different in newer version of radius but in my 1.5 the only
>> >table that has PRIO is radgroupreply
>> >
>> >and there is table radusergroup instead there is a group called usergroup.
>> >
>> >I'm getting fustrated. :(
>> >
>> >On Fri, Jan 30, 2009 at 7:32 PM, <tnt@kalik.net> wrote:
>> >
>> >> >Tried that...
>> >> >now i'm  getting all users rejected regardless of mac address in the
>> given
>> >> >group :(
>> >>
>> >> That shouldn't happen. Post the debug.
>> >>
>> >> >How do i set priorities?
>> >>
>> >> You have priority field in radusergroup table.
>> >>
>> >> >I though priorities only apply to radreply.
>> >>
>> >> There are no priorities in radreply.
>> >>
>> >> >
>> >> >Do I have to set fall through?
>> >> >
>> >>
>> >> No.
>> >>
>> >> Ivan Kalik
>> >> Kalik Informatika ISP
>> >>
>> >> -
>> >> List info/subscribe/unsubscribe? See
>> >> http://www.freeradius.org/list/users.html
>> >>
>> >
>> >
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>
>

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html