Hello FreeRadius 3.2.10 with sqlippool and split read/write to a backend Galera cluster. I have an issue where SQL-Group is not populating the group since I’ve moved from a single module (sql) to two (sql_read and sql_write). This is what I see with a single module named sql: (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: --> SELECT groupname FROM radusergroup WHERE username = '100061702368@boxbb.uk' ORDER BY priority (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = '100061702368@boxbb.uk' ORDER BY priority (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: User found in the group table (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: EXPAND SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: --> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '1g' ORDER BY id (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: Executing select query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '1g' ORDER BY id (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: Group "1g": Conditional check items matched (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: Group "1g": Merging assignment check items (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: EXPAND SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: --> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '1g' ORDER BY id (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: Executing select query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '1g' ORDER BY id (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: Group "1g": Merging reply items (1596321) Tue Oct 13 07:04:26 2026: Debug: sql: ERX-CoS-Shaping-Pmt-Type = "T06 1g” This is what I see when I change the module to be sql_read: (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: --> SELECT groupname FROM radusergroup WHERE username = '10091055046@boxbb.uk' ORDER BY priority (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: Executing select query: SELECT groupname FROM radusergroup WHERE username = '10091055046@boxbb.uk' ORDER BY priority (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: User found in the group table (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: EXPAND SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: --> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '' ORDER BY id (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: Executing select query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '' ORDER BY id (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: Group "1g": Conditional check items matched (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: Group "1g": Merging assignment check items (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: EXPAND SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: --> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '' ORDER BY id (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: Executing select query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '' ORDER BY id (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: Group "1g": Merging reply items The difference is in the bold line - the response from sql_read no longer has the groupname set. Nothing has changed in the database. What have I missed please? Thanks David David Lake Visiting Professor 5G Innovation Centre (5GIC and 6GIC) Tel: +44 (0)7711 736784 Email: d.lake@surrey.ac.uk<mailto:%20d.lake@surrey.ac.uk> Web: surrey.ac.uk<http://www.surrey.ac.uk/?utm_medium=internal&utm_source=emailsignature&utm_campaign=reputation+50th+brand> [A blue text on a black background Description automatically generated]<http://www.surrey.ac.uk/?utm_source=emailsignature&utm_medium=internal&utm_campaign=emailsignature_1819&utm_content=emailsignature_homepage> James Clerk Maxwell Building, University of Surrey, Guildford, Surrey, GU2 7XH, UK
On 13/10/2026 10:42, David Lake via Freeradius-Users wrote:
This is what I see when I change the module to be sql_read:
(55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: EXPAND SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: --> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '' ORDER BY id
The difference is in the bold line
ASCII list, there's no bold text.
the response from sql_read no longer has the groupname set. Nothing has changed in the database.
What have I missed please?
See `group_attribute` in the SQL module config. You want the `group_attribute = "${.:instance}-SQL-Group"` version on the sql_read instance, then use `sql_read-SQL-Group`. -- Matthew
Thank you! That solved the issue. David From: Matthew Newton via Freeradius-Users <freeradius-users@lists.freeradius.org> Date: Tuesday, 13 October 2026 at 11:45 To: freeradius-users@lists.freeradius.org <freeradius-users@lists.freeradius.org> Cc: Matthew Newton <mcn@freeradius.org> Subject: Re: Issue with SQL-Group On 13/10/2026 10:42, David Lake via Freeradius-Users wrote:
This is what I see when I change the module to be sql_read:
(55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: EXPAND SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id (55912) Tue Oct 13 06:28:24 2026: Debug: sql_read: --> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '' ORDER BY id
The difference is in the bold line
ASCII list, there's no bold text.
the response from sql_read no longer has the groupname set. Nothing has changed in the database.
What have I missed please?
See `group_attribute` in the SQL module config. You want the `group_attribute = "${.:instance}-SQL-Group"` version on the sql_read instance, then use `sql_read-SQL-Group`. -- Matthew - List info/subscribe/unsubscribe? See https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=05%7C02%7Cd.lake%40surrey.ac.uk%7Cc32dfd7405504675bcad08df29172531%7C6b902693107440aa9e21d89446a2ebb5%7C0%7C0%7C639274851546730208%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=h9sFnZBkwVUfoAI9gKxB9lZkkYTMRqbskvE6DUub0lA%3D&reserved=0<http://www.freeradius.org/list/users.html>
participants (2)
-
David Lake -
Matthew Newton