On Wed 20 Sep 2006 11:21, Benoît Bianchi wrote:
Hi,
We are currently using freeradius with users file configuration for our Wireless system, authenticating through ldap and rlm_eap which is working fine, but wed like to use a sql database to store login/password for guest accounts. This seems to us the easiest way to manage this because well have to create and delete theses accounts from a web interface.
Can we do this with rlm_sql?
yes
After lookink at the documentation and googled about this, my feeling is that using rlm_sql will prevent the server to parse the users file,
no. where on earth did you get this idea?
but Id like the users to be parsed first and then if there is no match, the sql database to be queried. Is this possible?
yes
Do we have to create all radius tables in the sql server even if we use only the radcheck one?
yes
Here is our actual users file which I dont see how to configure with rlm_mysql:
DEFAULT hint == "WPA" , FreeRADIUS-Proxied-To == 127.0.0.1, Ldap-Group != "WPA_Allowed", Auth-Type := Reject
DEFAULT
User-Name := "%{User-Name}"
Will putting sql in the authorise section of radius.conf just after file do the trick?
yes -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc