Reg: Different databases with single frerradius
Dear all, Can any possible to manage two database(MySQL) with single radius server. Here, One database manage by one operator and another database manage by another operator. This two operators database data will not see each other. Please can anyone give suggestions on this regards. Thanks & Best Regards, MallaReddy,
On Fri, Jun 29, 2012 at 3:04 PM, Malla reddy Sama <mallareddy.sama@yahoo.com> wrote:
Dear all,
Can any possible to manage two database(MySQL) with single radius server.
You mean USE more than one database? Sure. Just create different sql module instances: http://wiki.freeradius.org/Rlm_sql#wiki-Instances Each instance can connect to a different database or schema.
Here, One database manage by one operator and another database manage by another operator. This two operators database data will not see each other.
You need to realize the consequences though. For example: - where will you store accounting? is it on db1 or db2? or both? - both database might have different information for the same user (e.g. different password), thus making the result unpredictable The usual case for different instances is if you use them for different purposes (e.g. one to store user info, the other to store accounting) or for different realms (e.g. all user @domain1 will read data from db1, while all user @domain1 will read data from db2). -- Fajar
Hello, On Fri, Jun 29, 2012 at 03:13:45PM +0700, Fajar A. Nugraha wrote:
or for different realms (e.g. all user @domain1 will read data from db1, while all user @domain1 will read data from db2).
most probably he'd like to differentiate them by IMSI ranges. P.S. I don't know how to do this or if this is even possible. -- With best regards, xrgtn
Alexander Gattin wrote:
most probably he'd like to differentiate them by IMSI ranges.
P.S. I don't know how to do this or if this is even possible.
Yes. Look at the contents of the packets... write regular expressions to split the ranges. FreeRADIUS can do just about anything. Alan DeKok.
Yes. Look at the contents of the packets... write regular expressions to split the ranges. > FreeRADIUS can do just about anything.
I not get your point Alan. What you means by range..? could you explain ..? The db1 and db2 are in different location and operated by different people (include accounting and user data). db1 data doesn't have access to db2 person and vice versa. This databases are connected to single radius server. Any poosiblity of this sloution.? Fajar, You need to realize the consequences though. For example: - where will you store accounting? is it on db1 or db2? or both? - both database might have different information for the same user (e.g. different password), thus making the result unpredictable db1 and db2 have to stored accounting because db1 and db2 are in different location and db1 db2 are operated by different persons. Different users in db1 and bd2. I not understanding how it is possible with radius becuase when authentication request from NAS, which db the radius server contact to get the user information..? Any possibility the radius server send request to two db at same, If so how..? Thank you very much Alan and Fajar for your time .. :) Regards, Malla Reddy.
Malla reddy Sama wrote:
Yes. Look at the contents of the packets... write regular expressions to split the ranges. FreeRADIUS can do just about anything.
I not get your point Alan. What you means by range..? could you explain ..?
<sigh> The message I replied to talked about IMSI ranges.
The db1 and db2 are in different location and operated by different people (include accounting and user data). db1 data doesn't have access to db2 person and vice versa. This databases are connected to single radius server. Any poosiblity of this sloution.?
Can the FreeRADIUS machine access both databases over the network? If so, yes, it will work. The server doesn't care who's operating the databases.
db1 and db2 have to stored accounting because db1 and db2 are in different location and db1 db2 are operated by different persons.
The server doesn't care where the databases are, or who's operating them.
Different users in db1 and bd2.
The whole point of two databases is to have different content.
I not understanding how it is possible with radius becuase when authentication request from NAS, which db the radius server contact to get the user information..? Any possibility the radius server send request to two db at same, If so how..?
No. You pick the database to use based on the incoming IMSI. It's not hard. Look at the incoming packets. Decide which ones use db1, and which ones use db2. Look for *differences* in the packets. Use those differences to write "unlang" to select different databases. Alan DeKok.
participants (4)
-
Alan DeKok -
Alexander Gattin -
Fajar A. Nugraha -
Malla reddy Sama