Hi , As there was a mistake in my previous email title and as I had big improvement in processing my problem I am sending a new email . As I said in previous email I want to configure freeradius to reply different framed-ip-addresses based on nas servers . I found following email in the archive which helped a lot : http://lists.cistron.nl/pipermail/freeradius-users/2009-January/msg00630.htm... the only problem that I have is if user is membership of 2 groups . freeradius is processing none of them ! even if both are matching ! but if I remove one of groups its working without any problem ! and assigning ip from ip pool read-groups is on here is my tables : select * from radcheck; +----+----------+---------------+----+--------+ | id | username | attribute | op | value | +----+----------+---------------+----+--------+ | 4 | test1 | User-Password | := | 123456 | +----+----------+---------------+----+--------+ select * from radgroupcheck; +----+-----------+----------------+----+-------------+ | id | groupname | attribute | op | value | +----+-----------+----------------+----+-------------+ | 1 | group1 | Nas-IP-Address | == | 192.168.1.5 | | 2 | group1 | Pool-Name | := | pool1 | | 3 | group2 | Nas-IP-Address | == | 192.168.1.6 | | 4 | group2 | Pool-Name | := | pool2 | +----+-----------+----------------+----+-------------+ select * from radusergroup; +----------+-----------+----------+ | username | groupname | priority | +----------+-----------+----------+ | test1 | group1 | 0 | | test1 | group2 | 0 | +----------+-----------+----------+ select * from radippool; +----+-----------+-----------------+--------------+-----------------+------------------+-------------+----------+----------+ | id | pool_name | framedipaddress | nasipaddress | calledstationid | callingstationid | expiry_time | username | pool_key | +----+-----------+-----------------+--------------+-----------------+------------------+-------------+----------+----------+ | 1 | pool1 | 90.90.90.1 | | | | NULL | | 0 | | 2 | pool1 | 90.90.90.2 | | | | NULL | | | | 5 | pool2 | 91.90.90.1 | | | | NULL | | 0 | | 6 | pool2 | 91.90.90.2 | | | | NULL | | | +----+-----------+-----------------+--------------+-----------------+------------------+-------------+----------+----------+
On Thu, Mar 18, 2010 at 2:21 PM, power159 <power159@gmail.com> wrote:
the only problem that I have is if user is membership of 2 groups . freeradius is processing none of them ! even if both are matching ! but if I remove one of groups its working without any problem ! and assigning ip from ip pool
+----------+-----------+----------+ | username | groupname | priority | +----------+-----------+----------+ | test1 | group1 | 0 | | test1 | group2 | 0 | +----------+-----------+----------+
See doc/rlm_sql in particular, I think the priority should be different. Also if you want both groups processed, you might need Fall-Through. -- Fajar
I have read doc/rlm_sql many times but I unable to find any solution . adding Fall-Through in radreply for user or radgroupreply for groups doesn't help .. even I tried to use huntgroups but same result .. it works just when the user is membership of a group .. mean if I add user to second group its not working any more and sqlippool is not processing ! its not matter if group checks is matching or no .. it seems there is something wrong when a user is membership of 2 groups because its checking none of them when user is in more than 1 group
participants (2)
-
Fajar A. Nugraha -
power159