Hi Alan, I have attached the debug file from freeradius -x. I have also been looking extensively at the documentation. I can see the group is showing up in the queries. My-Daily-Usage is also correctly calculated to 538215123, which is above the set limit of 1000000, so the connection should fail. What I can't see is the limit of 1000000 in the radgroupcheck table showing up anywhere in the log. I'm quite stuck on this, Looking at the log I'm not sure what I have missed. Would you be able to throw me a hint, please? Many Thanks, On 8 January 2018 at 01:43, Alan DeKok <aland@deployingradius.com> wrote:
On Jan 7, 2018, at 2:29 PM, Houman <houmie@gmail.com> wrote:
1) When I said it doesn't work, I meant I tried to replicate your previous solution by utilising radgroupcheck instead of radcheck. And I have explained the steps I have taken to make this possible. Would you say I have missed any step?
What does the FAQ say about "it does't work"?
If only there was some "debug output" that told you what the server was doing...
2) What is the purpose of groupname field in radacct table then? I was expecting freeradius to check that the user belongs to that group in radusergroup and then would automatically fill that field as well in radacct next to everything it already does.
Does the SQL module documentation say that happens?
Does the debug log show that happens?
Do the default queries have "group name" in them?
Honestly, this isn't magic. The server doesn't magically do things. It does exactly what it's configured to do. It does what it's documented to do. It shows what it does in the debug output.
All you need to do is to read the documentation, and to read the debug output. If you're not doing that, then you won't get anything done.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html