Help on Users file, Group name and Pool-Name
Hello all, I encountered a strange problem while editing "users" file. I have Freeradius 2.0.5 and MS SQL working together. When a request coming in, Freeradius forwards it to MS SQL for authentication of username and password, and Freeradius reads Group Name attribute saved in MS SQL. My goal is to have each username associated to a Group Name. Then based on Group Name, Freeradius decides what IP pool to use, and choose the proper Pool-Name attribute. So in "users" file, I created the following: DEFAULT Group := "doctor", Pool-Name := "julienne"-----------------line133 Group := "dentist", Pool-Name := "netplus"-----------------line134 Group := "staff", Pool-Name := "staffnet"-------------------line135 When I execute Freeradius, I got the following error: /usr/local/etc/raddb/users[135]: Syntax error: Previous line is missing a trailing comma for entry DEFAULT root@Server1:/usr/local/etc/raddb# Errors reading /usr/local/etc/raddb/users /usr/local/etc/raddb/radiusd.conf[1085]: Instantiation failed for module "files" /usr/local/etc/raddb/sites-enabled/inner-tunnel[111]: Failed to find module "files". /usr/local/etc/raddb/sites-enabled/inner-tunnel[34]: Errors parsing authorize section. } } Errors initializing modules It seems we need a comma at the end of the line which is not right for check items. So instead of doing that, I changed the sentenses to the following, in "users" file: DEFAULT Group := "doctor", Pool-Name := "julienne" DEFAULT Group := "dentist", Pool-Name := "netplus" Group := "staff", Pool-Name := "staffnet" This time everything works just fine. I successfully execute Freeradius, and for every user in either of the three groups, Freeradius uses proper Pool-Name to fine IP pool, and user gets a proper IP address falling into that pool. So can anyone shed some lights on this? Why it returns two results after I do that change? Seems DEFAULT can only have two lines? Thanks in advance XJ
It seems we need a comma at the end of the line which is not right for check items. So instead of doing that, I changed the sentenses to the following, in "users" file:
DEFAULT Group := "doctor", Pool-Name := "julienne"
DEFAULT Group := "dentist", Pool-Name := "netplus"
Group := "staff", Pool-Name := "staffnet"
This time everything works just fine. I successfully execute Freeradius, and for every user in either of the three groups, Freeradius uses proper Pool-Name to fine IP pool, and user gets a proper IP address falling into that pool.
Surprising, since that is still very wrong. Users file entry should look like this: username check_item,check_item # <== no trailing comma reply_item, # <== has trailing comma reply_item, # <== you can have more reply_item # <== no comma at the end You can also leave out all check or reply items. Since you did put := for group in the first DEFAULT line all users should end up in pool julienne. BTW attribute for matching sql groups should be SQL-Group. On the other hand - why is this in users file? Why didn't you put Pool-Name in radgroupcheck? Ivan Kalik Kalik Informatika ISP
participants (2)
-
tnt@kalik.net -
Xiaochen Jing