Sequencing the users file with include
Hello, I noticed a problem if I configure the file this way : root@radius:/etc/freeradius/3.0# cat users # user_zone1 $INCLUDE /etc/freeradius/3.0/users_1 # user_zone2 $INCLUDE /etc/freeradius/3.0/users_2 # Test test Cleartext-Password := "::123456789@" Reply-Message := "Hello, %{User-Name}" #DEFAULLT Section DEFAULT Alc-Primary-Dns = 8.8.8.8, Alc-Secondary-Dns = 192.168.100.100, Framed-IP-Netmask = 255.255.255.0, Alc-Default-Router = 192.168.100.1, Fall-Through = Yes DEFAULT Framed-Protocol == PPP Framed-Protocol = PPP, Framed-Compression = Van-Jacobson-TCP-IP DEFAULT Hint == "CSLIP" Framed-Protocol = SLIP, Framed-Compression = Van-Jacobson-TCP-IP DEFAULT Hint == "SLIP" Framed-Protocol = SLIP All the DNS and default-router part is not transmitted... I have to reorganize the file in this way for it to work : root@radius:/etc/freeradius/3.0# cat users #DEFAULLT Section DEFAULT Alc-Primary-Dns = 8.8.8.8, Alc-Secondary-Dns = 192.168.100.100, Framed-IP-Netmask = 255.255.255.0, Alc-Default-Router = 192.168.100.1, Fall-Through = Yes DEFAULT Framed-Protocol == PPP Framed-Protocol = PPP, Framed-Compression = Van-Jacobson-TCP-IP DEFAULT Hint == "CSLIP" Framed-Protocol = SLIP, Framed-Compression = Van-Jacobson-TCP-IP DEFAULT Hint == "SLIP" Framed-Protocol = SLIP # user_zone1 $INCLUDE /etc/freeradius/3.0/users_1 # user_zone2 $INCLUDE /etc/freeradius/3.0/users_2 # Test test Cleartext-Password := "::123456789@" Reply-Message := "Hello, %{User-Name}" Is this normal behavior (FreeRADIUS Version 3.0.21) ? Thanks for the explanation.
On Jan 24, 2023, at 9:10 AM, Sébastien 65 <sebastien-65@live.fr> wrote:
I noticed a problem if I configure the file this way :
It helps to describe what you're doing. It's usually not helpful to just dump configuration files onto the mailing list, and ask people here to figure out what you intended to do. The "users" file works as documented. See "man users". Or, read the debug output to see which parts of the "users" file match. From what I can tell, you're either not following, or not understanding the documentation. If you want multiple entries to match, the entries have to include a "Fall-Through = yes" line. This is clearly documented. Alan DeKok.
participants (2)
-
Alan DeKok -
Sébastien 65