yes u can do this. in sql database there is a table called "radgroupcheck" mysql> select * from ( select * from radgroupcheck order by id desc limit 10) sub order by id ASC; and "radusergroup" those two tables are related between them check those tables.. On 06/19/2015 01:56 PM, Randeep wrote:
Thanks a lot Tevfik. I was able to make it work.
But I had to give the following in the "/etc/raddb/users".
randeep Pool-Name := "main_pool"
Where randeep is username.
But for each user we cannot give this right. This user is a part of a group. can we specify the ip pool for a group?
Regards, Randeep
On Fri, Jun 19, 2015 at 1:12 PM, Tevfik Ceydeliler < tevfik.ceydeliler@astron.yasar.com.tr> wrote:
radius I think this document will help u about sqlippool:
http://www.tuxlanding.net/freeradius-style-dhcp-and-high-availability/
regards...
On 06/19/2015 10:28 AM, Randeep wrote:
Thanks Tevfik.
One question is what name I have to give in db for pool_name.
Should I give main_pool(defined in/etc/raddb/modules/ippool) or the sqlippool(defined in /etc/raddb/sqlippool.conf)
Regards, Randeep
On Fri, Jun 19, 2015 at 12:40 PM, Tevfik Ceydeliler < tevfik.ceydeliler@astron.yasar.com.tr> wrote:
U have to fill ippool table in sql side
mysql> select * from ( select * from radippool order by id desc limit 10) sub order by id ASC;
+------+--------------+-----------------+--------------+-----------------+------------------+-------------+----------+----------+ | id | pool_name | framedipaddress | nasipaddress | calledstationid | callingstationid | expiry_time | username | pool_key |
+------+--------------+-----------------+--------------+-----------------+------------------+-------------+----------+----------+ | 5565 | IP_VfoneASOS | 172.30.32.247 | | | | NULL | | | | 5566 | IP_VfoneASOS | 172.30.32.248 | | | | NULL | | | | 5567 | IP_VfoneASOS | 172.30.32.249 | | | | NULL | | | | 5568 | IP_VfoneASOS | 172.30.32.250 | | | | NULL | | | | 5569 | IP_VfoneASOS | 172.30.32.251 | | | | NULL | | | | 5570 | IP_VfoneASOS | 172.30.32.252 | | | | NULL | | | | 5571 | IP_VfoneASOS | 172.30.32.253 | | | | NULL | | | | 5572 | IP_VfoneASOS | 172.30.32.254 | | | | NULL | | | | 5573 | IP_VfoneASOS | 172.30.32.255 | | | | NULL | | | | 5574 | IP_VfoneMEAM | 172.30.97.52 | | | | NULL | | 0 |
+------+--------------+-----------------+--------------+-----------------+------------------+-------------+----------+----------+
On 06/19/2015 09:39 AM, Randeep wrote:
I'm trying to configure freeradius to send the ip for the user.
In the radiusd.conf i have uncommented $INCLUDE sqlippool.conf
in the sqlippool.conf,
I have enabled mysql ippool.conf
in the file /etc/raddb/modules/ippool,
I have defined ippool main_pool. And specified the range, netmask etc in the block.
Key I have specified as key = "%{NAS-IP-Address} %{NAS-Port}"
But my radippool table is empty. Do I have to specify anything there?
I'm testing with radtest. I hope this can be tested with it.
In the respose i'm getting like this
[root@localhost ~]# radtest randeep randeep123 192.168.1.182 0 lukup124 Sent Access-Request Id 110 from 0.0.0.0:49548 to 192.168.1.182:1812 length 77 User-Name = 'randeep' User-Password = 'randeep123' NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Message-Authenticator = 0x00 Cleartext-Password = 'randeep123' Received Access-Accept Id 110 from 192.168.1.182:1812 to 0.0.0.0:0 length 56 Framed-Protocol = PPP Framed-IP-Netmask = 255.255.255.0 Framed-MTU = 1500 Framed-Routing = Broadcast-Listen Framed-Compression = Van-Jacobson-TCP-IP Service-Type = Framed-User [root@localhost ~]#
Do I have to give sqlippool or mainpool in authenticate/authorize/account/preauth in sites-enabled/default?
Please advice.
Regards, Randeep - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
Hi all, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--