You return only one and not all lists, this worked once. Thank you.
Follows the debug attached. The user is "robson_santos@tubaron.net", he has to return two lists for Mikrotik, "liberado-cadastro-atayo-confirmado" and "bloqueio-arquivado-atayo", but the user only enter Mikrotik to list "liberado-cadastro-atayo-confirmado". Order by ID ASC " liberado-cadastro-atayo-confirmado" is the first list in the database. -----Mensagem original----- De: freeradius-users-bounces+anderson=tubaron.com.br@lists.freeradius.org [mailto:freeradius-users-bounces+anderson=tubaron.com.br@lists.freeradius.or g] Em nome de Alan DeKok Enviada em: quarta-feira, 2 de julho de 2014 22:37 Para: FreeRadius users mailing list Assunto: Re: Two or more Address Lists Anderson Scouto da Silva wrote:
You return only one and not all lists, this worked once. Thank you.
You need to post the debug output as suggested in the FAQ, "man" page, web page, and daily on this list. And learn to ask good questions. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Thu, Jul 3, 2014 at 10:20 AM, Anderson Scouto da Silva <anderson@tubaron.com.br> wrote:
Follows the debug attached. The user is "robson_santos@tubaron.net", he has to return two lists for Mikrotik, "liberado-cadastro-atayo-confirmado" and "bloqueio-arquivado-atayo", but the user only enter Mikrotik to list "liberado-cadastro-atayo-confirmado". Order by ID ASC " liberado-cadastro-atayo-confirmado" is the first list in the database.
You need to ask better questions for others to be able to understand what you need. For example: Q: Can I have FR return only ONE reply attribute for a particular user, when radreply table has two records for that user? ... and the answer to that question would generally be "No". There is, however, a way to achieve a similar result IF: - you use " :=" operator - you use the same attribute name in both records The ":=" operator will replace reply attribute for the same name, making only one exist (see the docs included in your installation, or https://github.com/FreeRADIUS/freeradius-server/blob/v2.x.x/doc/rlm_sql) Is that what you wanted to ask? -- Fajar
That's exactly what I need to return two records there (two address lists for Mikrotik), so I thought using "+ =" return both as a response to Mikrotik. Definitely no way to do this? -----Mensagem original----- De: freeradius-users-bounces+anderson=tubaron.com.br@lists.freeradius.org [mailto:freeradius-users-bounces+anderson=tubaron.com.br@lists.freeradius.or g] Em nome de Fajar A. Nugraha Enviada em: quinta-feira, 3 de julho de 2014 00:49 Para: FreeRadius users mailing list Assunto: Re: Two or more Address Lists On Thu, Jul 3, 2014 at 10:20 AM, Anderson Scouto da Silva <anderson@tubaron.com.br> wrote:
Follows the debug attached. The user is "robson_santos@tubaron.net", he has to return two lists for Mikrotik, "liberado-cadastro-atayo-confirmado" and "bloqueio-arquivado-atayo", but the user only enter Mikrotik to list "liberado-cadastro-atayo-confirmado". Order by ID ASC " liberado-cadastro-atayo-confirmado" is the first list in the database.
You need to ask better questions for others to be able to understand what you need. For example: Q: Can I have FR return only ONE reply attribute for a particular user, when radreply table has two records for that user? ... and the answer to that question would generally be "No". There is, however, a way to achieve a similar result IF: - you use " :=" operator - you use the same attribute name in both records The ":=" operator will replace reply attribute for the same name, making only one exist (see the docs included in your installation, or https://github.com/FreeRADIUS/freeradius-server/blob/v2.x.x/doc/rlm_sql) Is that what you wanted to ask? -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Thu, Jul 3, 2014 at 11:10 AM, Anderson Scouto da Silva <anderson@tubaron.com.br> wrote:
That's exactly what I need to return two records there (two address lists for Mikrotik),
Do you mean "I need to return both Mikrotik-Address-List attributes to mikrotik"? In this case, FR already does that. See the end of the debug log. If mikrotik does NOT see that (i.e. it only sees one Mikrotik-Address-List), then most likely it's mikrotik's fault. You can probably check with tcpdump to be ABSOLUTELY sure that FR DOES return both attributes. -- Fajar
so I thought using "+ =" return both as a response to Mikrotik. Definitely no way to do this?
-----Mensagem original----- De: freeradius-users-bounces+anderson=tubaron.com.br@lists.freeradius.org [mailto:freeradius-users-bounces+anderson=tubaron.com.br@lists.freeradius.or g] Em nome de Fajar A. Nugraha Enviada em: quinta-feira, 3 de julho de 2014 00:49 Para: FreeRadius users mailing list Assunto: Re: Two or more Address Lists
On Thu, Jul 3, 2014 at 10:20 AM, Anderson Scouto da Silva <anderson@tubaron.com.br> wrote:
Follows the debug attached. The user is "robson_santos@tubaron.net", he has to return two lists for Mikrotik, "liberado-cadastro-atayo-confirmado" and "bloqueio-arquivado-atayo", but the user only enter Mikrotik to list "liberado-cadastro-atayo-confirmado". Order by ID ASC " liberado-cadastro-atayo-confirmado" is the first list in the database.
You need to ask better questions for others to be able to understand what you need. For example:
Q: Can I have FR return only ONE reply attribute for a particular user, when radreply table has two records for that user?
... and the answer to that question would generally be "No".
There is, however, a way to achieve a similar result IF: - you use " :=" operator - you use the same attribute name in both records
The ":=" operator will replace reply attribute for the same name, making only one exist (see the docs included in your installation, or https://github.com/FreeRADIUS/freeradius-server/blob/v2.x.x/doc/rlm_sql)
Is that what you wanted to ask?
-- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
That's exactly what I need to return two records there (two address lists for Mikrotik), so I thought using "+ =" return both as a response to Mikrotik. Definitely no way to do this?
at the end of the debug you will see Sending Access-Accept of id 12 to 172.21.10.14 port 58465 Mikrotik-Address-List += "liberado-cadastro-atayo-confirmado" Mikrotik-Address-List += "bloqueio-arquivado-atayo" Mikrotik-Rate-Limit = "400k/1536k 800k/2M 150k/750k 60/60 8 400k/1536k" ...so your server is sending that back to the NAS. is that what you want? if so, all is well. if the NAS isnt working right thats a different thing altogether. also, see the big warning in your debug about 'User-Password' being used as an attribute in your DB? I'd advise that you change the DB entry to Cleartext-Password as requested(!) alan
Freeradius supports multiple address-list response. Mikrotik does'nt. Clayton A. Alves <http://claytonaalves.github.com> *claytonaalves* +55 66 9233-3406 2014-07-03 2:08 GMT-04:00 <A.L.M.Buxey@lboro.ac.uk>:
Hi,
That's exactly what I need to return two records there (two address lists for Mikrotik), so I thought using "+ =" return both as a response to Mikrotik. Definitely no way to do this?
at the end of the debug you will see
Sending Access-Accept of id 12 to 172.21.10.14 port 58465 Mikrotik-Address-List += "liberado-cadastro-atayo-confirmado" Mikrotik-Address-List += "bloqueio-arquivado-atayo" Mikrotik-Rate-Limit = "400k/1536k 800k/2M 150k/750k 60/60 8 400k/1536k"
...so your server is sending that back to the NAS. is that what you want? if so, all is well. if the NAS isnt working right thats a different thing altogether.
also, see the big warning in your debug about 'User-Password' being used as an attribute in your DB? I'd advise that you change the DB entry to Cleartext-Password as requested(!)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (5)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Anderson Scouto da Silva -
Clayton Alves -
Fajar A. Nugraha