Hello all, The scenario will be: when Freeradius receives a user request, it forwards it to SQL server (local or remote) for authenticating the username/password. If the username/password is valid, then Freeradius will use a certain ippool to assign IP address to the user, based on username. Can this be accomplished? I am wondering, when SQL sends a reply back to Freeradius, how can Freeradius knows what ippool it should use to assign IP based on user name? Can anyone shed some light on it? Thanks in advance
Hi! I think, SQL server with some stored procedures should think of it. But I doubt that it's possible to bind username to pool. If I'm right NAS already has to know the name of pool from which it requests the IP for client and SQL server simply returns to radius free ip from this pool. It's possible to bind NAS ip address to some pool or to bind username to certain ip address. My answer is not the last instance but I think it's somewhere near the truth. Best regards, Maxim. ----- Original Message ----- From: "Xiaochen Jing" <xjing@datavalet.com> To: "'FreeRadius users mailing list'" <freeradius-users@lists.freeradius.org> Sent: Thursday, September 18, 2008 6:36 PM Subject: SQL and ippool
Hello all,
The scenario will be: when Freeradius receives a user request, it forwards it to SQL server (local or remote) for authenticating the username/password. If the username/password is valid, then Freeradius will use a certain ippool to assign IP address to the user, based on username.
Can this be accomplished? I am wondering, when SQL sends a reply back to Freeradius, how can Freeradius knows what ippool it should use to assign IP based on user name?
Can anyone shed some light on it?
Thanks in advance
--------------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Xiaochen Jing wrote:=
The scenario will be: when Freeradius receives a user request, it forwards it to SQL server (local or remote) for authenticating the username/password.
No. It READS the username/password from the DB. SQL isn't an authentication protocol.
Can this be accomplished? I am wondering, when SQL sends a reply back to Freeradius, how can Freeradius knows what ippool it should use to assign IP based on user name?
See the documentation for the SQL ippool module... Alan DeKok.
Thanks Alan and Maxim, So after Freeradius reads the username/password in SQL, how can we bind username/password to a specific ippool? Like what I do in /users, Username Cleartext-Password := "password", Pool-Name := "poolname" Thanks in advance Xiaochen -----Original Message----- From: freeradius-users-bounces+xjing=datavalet.com@lists.freeradius.org [mailto:freeradius-users-bounces+xjing=datavalet.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Thursday, September 18, 2008 12:08 PM To: FreeRadius users mailing list Subject: Re: SQL and ippool Xiaochen Jing wrote:=
The scenario will be: when Freeradius receives a user request, it forwards it to SQL server (local or remote) for authenticating the username/password.
No. It READS the username/password from the DB. SQL isn't an authentication protocol.
Can this be accomplished? I am wondering, when SQL sends a reply back to Freeradius, how can Freeradius knows what ippool it should use to assign IP based on user name?
See the documentation for the SQL ippool module... Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
So after Freeradius reads the username/password in SQL, how can we bind username/password to a specific ippool?
Like what I do in /users,
Username Cleartext-Password := "password", Pool-Name := "poolname"
http://wiki.freeradius.org/SQL_HOWTO#Populating_SQL Ivan Kalik Kalik Informatika ISP
On Thu, Sep 18, 2008 at 01:11:33PM -0400, Xiaochen Jing wrote:
Thanks Alan and Maxim,
So after Freeradius reads the username/password in SQL, how can we bind username/password to a specific ippool?
It's a check item so this attribute goes in either radcheck or radgroupcheck, depending on your preferences. Mit freundlichem Gru�, -- Matthias Witte - witte@netzquadrat.de Telefon: +49 (0)211-30 20 33-18 Telefax: +49 (0)211-30 20 33-22 [netzquadrat] GmbH - Gladbacher Str. 74 - 40219 D�sseldorf HRB D�sseldorf 36121 - Gesch�ftsf�hrer: Thilo Salmon, Tim Mois Steuernummer: 106/5719/1836, Umsatzsteuer-ID: DE246863050 billiger-telefonieren.de - billiger-surfen.de - stromseite.de - sms.de
participants (5)
-
Alan DeKok -
Matthias Witte -
Maxim Sirenko -
tnt＠kalik.net -
Xiaochen Jing