Lorenzo Milesi wrote:
I know it's a stupid question but so far I couldn't manage to dig it out.
The answer should be in the debug output.
I'm using FR2 with MySQL backend. All my users belong to one or more group. I usually set the Idle-Timeout attribute using the radgroupreply table, and it works great. For a minority of users I'd like to override this attribute to a different value, but I cannot have FR reply as I wish.
Current situation: Radcheck: USERA MD5-Password := somemd5hash Radusergroup: USERA c_gvt 30 Radgroupreply c_gvt Idle-Timeout := 3800
This works fine and replies 3800.
OK.
If I add
USERA Idle-Timeout := 100
to radreply it will still reply 3800.
Because the radusergroup checks are done AFTER the radreply checks. This is visible in the debug output.
Then I checked manpage of USERS [1] so I changed:
Radreply: USERA Idle-Timeout := 100 Radgroupreply c_gvt Idle-Timeout = 3800
but the reply is always the same. What am I missing?
That should work. What does the debug output say? Alan DeKok.