Alan, I got a little mixed up. I was thinking the sql query would use the group attribute along with the username (as though the group mechanism supported users with the same name in different groups). I know better now. What was actually happening (I should have looked at the sql closer) is one of the queries (the one for radreply) was failing because I put no user specific attributes there. Do I have to supply a dummy (constant) attribute per user? Right now, all attributes to be returned appear in the radgroupreply table. Thanks for your quick response. Bill Alan DeKok wrote:
Bill Schoolfield <bill@billmax.com> wrote:
Here's our problem; the proxy works fine but the authentication (actually the user lookup) is failing when testing via radclient. The user lookup fails because the 'Group' attribute in the referenced attribute file (-f file) is being ignored (not sent) by radclient. Why is this? Is there a workaround?
The "Group" attribute is specific to the internals of FreeRADIUS. It *can't* go on the wire.
Perhaps you could say what you're trying to do...
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Bill Schoolfield Vice President, BillMax bill@billmax.com 877.245.5629 (USA toll free) 817.446.7776 (International)