-----Original Message----- From: Freeradius-Users <freeradius-users-bounces+m_zouhairy=skno.by@lists.freeradius.org> On Behalf Of Rens Houben via Freeradius-Users Sent: Friday, August 24, 2018 3:49 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Cc: Rens Houben <rhouben@systemec.nl> Subject: RESOLVED: Re: Freeradius PSQL not correctly parsing groupcheck/groupreply
Update: I'm an idiot, apparently.
As you can see admitting the problem to yourself is the first step of healing, you are my favorite kind :)
I'd made a custom instance of the SQL RLM to fit the exact needs and avoid overwriting existing config files, but overlooked this little bit in the config:
# This entry should be used for additional instances (sql foo {}) # of the SQL module. #group_attribute = "${.:instance}-SQL-Group" # This entry should be used for the default instance (sql {}) # of the SQL module. group_attribute = "SQL-Group"
Running with radiusd -XX showed that it didn't substitute the group attribute correctly into the groupcheck/groupreply queries, which put me on the trail and led me to find my error.
Uncommenting the first group_attribute line and commenting out the second fixed it. Everything works now.
-- Rens Houben Systemec Internet Services - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html