Re: read_groups in cvs
reposting.... I've got <mssql.conf> read_groups = yes but the rlm_sql module does not process the groups. The user is found in radcheck and the check items (password) does match... and I do NOT have "Fall-Through" = yes in the radreply ... as per docs... (3d) 3. Group processing then begins if any of the following conditions are met: a. The user IS NOT found in radcheck b. The user IS found in radcheck, but the check items don't match c. The user IS found in radcheck, the check items DO match AND Fall-Through is set in the radreply table d. The user IS found in radcheck, the check items DO match AND the read_groups directive is set to 'yes' Am I doing something wrong here? If I have Fall-Through = yes then everything works as per docs (3c) But 3d does not say that Fall-Through has to be yes
"Duane Cox" <duanec@mail.illicom.net> wrote:
I've got <mssql.conf> read_groups = yes
but the rlm_sql module does not process the groups.
Honestly, I don't use that, and haven't even looked at it. I'd suggest looking at the source to see what's going on. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Duane Cox wrote:
reposting....
I've got <mssql.conf> read_groups = yes
but the rlm_sql module does not process the groups.
My own testing found that the usergroup table would not be used unless the SQL-Group attribute is found. I set it in the huntgroups file myself, but you should be able to do it in the radcheck table. As a test, set SQL-Group in the users table and run the server in debugging mode. You will see where it is trying to do the lookup. I found this in the server docs, so it is there. I just don't recall where I read it. I did find the part that you quoted misleading though... -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com
You are right, but is that right?? I dont' see that anywhere in the docs, that behaviour doesn't make sense... Duane Cox ----- Original Message ----- From: "Dennis Skinner" <dskinner@bluefrog.com> To: "Duane Cox" <duanec@mail.illicom.net>; "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, August 07, 2006 2:17 PM Subject: Re: read_groups in cvs Duane Cox wrote:
reposting....
I've got <mssql.conf> read_groups = yes
but the rlm_sql module does not process the groups.
My own testing found that the usergroup table would not be used unless the SQL-Group attribute is found. I set it in the huntgroups file myself, but you should be able to do it in the radcheck table. As a test, set SQL-Group in the users table and run the server in debugging mode. You will see where it is trying to do the lookup. I found this in the server docs, so it is there. I just don't recall where I read it. I did find the part that you quoted misleading though... -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com
Please don't top post. It makes it hard to respond and have it make sense.... Duane Cox wrote:
Dennis Skinner wrote:
My own testing found that the usergroup table would not be used unless the SQL-Group attribute is found. I set it in the huntgroups file myself, but you should be able to do it in the radcheck table.
As a test, set SQL-Group in the users table and run the server in debugging mode. You will see where it is trying to do the lookup.
I found this in the server docs, so it is there. I just don't recall where I read it. I did find the part that you quoted misleading though...
You are right, but is that right?? I dont' see that anywhere in the docs, that behaviour doesn't make sense...
Just pretend you didn't read the docs about groups that you quoted and it makes sense :) I don't recall where I read the part that led me to that solution. It may have been in the wiki, but I can't get to it now to check. Wiki down again?? My requests time out. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com
What version of the server are you using and do you have any debug output? --Mike On Aug 7, 2006, at 8:28 AM, Duane Cox wrote:
reposting....
I've got <mssql.conf> read_groups = yes
but the rlm_sql module does not process the groups.
The user is found in radcheck and the check items (password) does match... and I do NOT have "Fall-Through" = yes in the radreply ...
as per docs... (3d)
3. Group processing then begins if any of the following conditions are met: a. The user IS NOT found in radcheck b. The user IS found in radcheck, but the check items don't match c. The user IS found in radcheck, the check items DO match AND Fall-Through is set in the radreply table d. The user IS found in radcheck, the check items DO match AND the read_groups directive is set to 'yes'
Am I doing something wrong here?
If I have Fall-Through = yes then everything works as per docs (3c)
But 3d does not say that Fall-Through has to be yes
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/ users.html
participants (4)
-
Alan DeKok -
Dennis Skinner -
Duane Cox -
Michael Griego