Basically freeradius does not care where they are located if the users are in the same default privacyidea realm. Kind regardsCornelius Cornelius KölbelCornelius.koelbel@netknights.it+49 151 2960 1417 NetKnights GmbHhttp://netknights.itLandgraf-Karl-Str. 19, 34131 Kassel, GermanyTel: +49 561 3166797, Fax: +49 561 3166798 Amtsgericht Kassel, HRB 16405Geschäftsführer: Cornelius Kölbel -------- Ursprüngliche Nachricht -------- Von: Tevfik Ceydeliler <tevfik.ceydeliler@astron.yasar.com.tr> Datum: 22.01.2016 07:59 (GMT+01:00) An: freeradius-users@lists.freeradius.org Betreff: Local user or DB? Hi, I want to use both local files and mySQL DB to authenticate my user. But How can I tell to freeradius which user is located where local files or DB. Is there any way to do this? Realm can use for this aim? Have you any hint? Regards.. Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz. The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
OK. Let me clearify my problem. There are 3 places where located my users. 1. Local files 2. MySql DB (freeradius schema) 3. MSSQl DB (only have username and Surname) What I want to? If user try to authenticate and if this user defined local file or MySQL radiusdb, there is no problem. If user try to authenticate and if this user is defined im MSSQL DB, I have to use custom query. Thats' why freeradius should know where com from authentication request and which custom query will be run . To separate localfiles/Mysql and MSSQL can I use realm? and If possible how can I trigger this custom query? I hope I can explain what is my problem. Regards... On 22-01-2016 09:10, Cornelius Kölbel wrote:
Basically freeradius does not care where they are located if the users are in the same default privacyidea realm. Kind regardsCornelius
Cornelius KölbelCornelius.koelbel@netknights.it+49 151 2960 1417 NetKnights GmbHhttp://netknights.itLandgraf-Karl-Str. 19, 34131 Kassel, GermanyTel: +49 561 3166797, Fax: +49 561 3166798 Amtsgericht Kassel, HRB 16405Geschäftsführer: Cornelius Kölbel
-------- Ursprüngliche Nachricht -------- Von: Tevfik Ceydeliler <tevfik.ceydeliler@astron.yasar.com.tr> Datum: 22.01.2016 07:59 (GMT+01:00) An: freeradius-users@lists.freeradius.org Betreff: Local user or DB?
Hi, I want to use both local files and mySQL DB to authenticate my user. But How can I tell to freeradius which user is located where local files or DB. Is there any way to do this? Realm can use for this aim? Have you any hint? Regards.. Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz. The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
On Jan 22, 2016, at 9:42 AM, Tevfik Ceydeliler <tevfik.ceydeliler@astron.yasar.com.tr> wrote:
OK. Let me clearify my problem. There are 3 places where located my users.
Which users are where? Is it random? Or is there a method to the organization of users? And why not just unify all of the users into one database?
If user try to authenticate and if this user defined local file or MySQL radiusdb, there is no problem. If user try to authenticate and if this user is defined im MSSQL DB, I have to use custom query.
OK...
Thats' why freeradius should know where com from authentication request and which custom query will be run .
How do you expect it to know that? i.e. is it random? Is it something in the packet?
To separate localfiles/Mysql and MSSQL can I use realm? and If possible how can I trigger this custom query?
You can run a custom query by using "unlang" policies. As to *when* to run the custom query, that's up to you. Right now, your problem statement is this: - I have users in database A, B, or C - when requests come with a user-name, I want to check one of the 3 databases - but I don't know which database to check - and I don't want to check all of them So... figure out which database you want to check, and why that user is in that database. FreeRADIUS isn't magic. There's no magical way for it to know what to do. You can't write policies which say "magically do what I want". You need to know what you want FreeRADIUS to do. Then, write those rules down in "unlang". If you don't know what you want FreeRADIUS to do, then you can't configure it to do anything. Alan DeKok.
Which users are where? Is it random? Or is there a method to the organization of users? And why not just unify all of the users into one database? -- Not random. -- I can not collect all users into one database. Because, MSSQL database is not a radius database. It is used for another purposes. And totally different workers seed this database. How do you expect it to know that? i.e. is it random? Is it something in the packet? -- Actually it is not expectation. Just prediction or foresight. But, I think it is something in packet. You need to know what you want FreeRADIUS to do. Then, write those rules down in "unlang". If you don't know what you want FreeRADIUS to do, then you can't configure it to do anything -- Freeradius is very useful and have big capacity and elastic. Thats why I cant know whole capacity of that. On 22-01-2016 16:58, Alan DeKok wrote:
On Jan 22, 2016, at 9:42 AM, Tevfik Ceydeliler <tevfik.ceydeliler@astron.yasar.com.tr> wrote:
OK. Let me clearify my problem. There are 3 places where located my users. Which users are where? Is it random? Or is there a method to the organization of users?
And why not just unify all of the users into one database?
If user try to authenticate and if this user defined local file or MySQL radiusdb, there is no problem. If user try to authenticate and if this user is defined im MSSQL DB, I have to use custom query. OK...
Thats' why freeradius should know where com from authentication request and which custom query will be run . How do you expect it to know that? i.e. is it random? Is it something in the packet?
To separate localfiles/Mysql and MSSQL can I use realm? and If possible how can I trigger this custom query? You can run a custom query by using "unlang" policies.
As to *when* to run the custom query, that's up to you.
Right now, your problem statement is this:
- I have users in database A, B, or C - when requests come with a user-name, I want to check one of the 3 databases - but I don't know which database to check - and I don't want to check all of them
So... figure out which database you want to check, and why that user is in that database.
FreeRADIUS isn't magic. There's no magical way for it to know what to do. You can't write policies which say "magically do what I want".
You need to know what you want FreeRADIUS to do. Then, write those rules down in "unlang".
If you don't know what you want FreeRADIUS to do, then you can't configure it to do anything.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
On Jan 22, 2016, at 10:17 AM, Tevfik Ceydeliler <tevfik.ceydeliler@astron.yasar.com.tr> wrote:
-- I can not collect all users into one database. Because, MSSQL database is not a radius database. It is used for another purposes. And totally different workers seed this database.
Which workers, and why?
-- Actually it is not expectation. Just prediction or foresight. But, I think it is something in packet.
You will need to know *exactly* what it is in the packet.
-- Freeradius is very useful and have big capacity and elastic. Thats why I cant know whole capacity of that.
I'm telling you that you don't need to know the whole functionality of FreeRADIUS. You need to know the "something" in the packet. Only you have access to those packets. So.. read the debug output. I don't think there's anything else we can do to help you. Alan DeKok.
participants (3)
-
Alan DeKok -
Cornelius Kölbel -
Tevfik Ceydeliler