Can I associate in groupcheck a groupname with a virtual server? I have separated each type of services into different virtual servers, because each one of then has different modules. Thanks On Fri, Sep 5, 2008 at 2:49 PM, Ivan Kalik <tnt@kalik.net> wrote:

Radgroupcheck table.

Ivan Kalik Kalik Informatika ISP

-----Original Message----- From: freeradius-users-bounces+tnt=kalik.net@lists.freeradius.org [mailto:freeradius-users-bounces+tnt=kalik.net@lists.freeradius.org] On Behalf Of Carlos Eduardo Tavares Terra Sent: 05 September 2008 02:42 To: freeradius-users@lists.freeradius.org Subject: FreeRadius2 + MySQL: NAS x Usergroup

Dear freeradius users,

I have a special scenario. Today I have many freeradius servers, each one responsible for differente services.

Now I want to group this freeradius servers into one master server, but I have users in many differente usergroups (one for each service). How can I associate an usergroup to a nas? Example: NAS (192.168.2.1) -> Usergroup (Dialup) NAS (192.168.2.2) -> Usergroup (Broadband) NAS (192.168.2.3) -> Usergroup (Hotspot)

I saw how to do this using huntgroups, but I want to use a mysql database with all clients.

There are another ways to implement this different services into one radius server, maybe the right way? If not, how can I associate the usergroups and nas using mysql?

Thank you -- Carlos Eduardo Tavares Terra GNU/Linux #413291 [http://counter.li.org] Slackware Linux - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.169 / Virus Database: 270.6.16/1652 - Release Date: 2008-09-04 18:54

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- Carlos Eduardo Tavares Terra Analista de Sistemas Petróleo Brasileiro S/A GNU/Linux #413291 [http://counter.li.org] Slackware Linux

Sorry, but maybe I didn't understand how virtual servers really work. I have one big users base. The users can be in one or more groups. User:John - Group:dialup User:John - Group:broadband User:Jack - Group:dialup User:Jack - Group: hotspot John and Jack are in my radcheck and radusergroup tables. Username: John Username: Jack Attribute: Password Attribute: Password Op: := Op: := Value: crypt('test') Value: crypt('test2') My nas clients are in database too. nasname: 192.168.2.2 nasname: 192.168.2.3 shortname: dialup-nas shortname: broadband-nas type: cisco type: cisco secret: secret-password secret: secret-password server: dialup server: broadband My problem is here: expand: %{User-Name} -> John rlm_sql (sql): sql_set_user escaped user --> 'John' rlm_sql (sql): Reserving sql socket id: 2 expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'John' ORDER BY id rlm_sql (sql): User found in radcheck table expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'John' ORDER BY id expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'John' ORDER BY priority expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'dialup' ORDER BY id rlm_sql (sql): User found in group dialup expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'dialup' ORDER BY id rlm_sql (sql): Released sql socket id: 2 John is connecting through broadband-nas, but freeradius is getting dialup groupname and all its checks and replys. Dialup and broadband has the same priority in radusergroup table. I wish to 'force' something like 'dialup-nas'->'dialup group', 'broadband-nas'->'broadband group'. Maybe I'm going through the wrong way. I have separated into different virtual servers because each type of service have different modules implemented by me. In freeradius1 I was using the groupreply 'Exec-Program-Wait' and different radius servers for each service. In each server I have modified the sql querys to get only replys and checks for respectives groups (services). How is the 'right' way to implement this scenario with freeradius 2? Thank you for the help. 2008/9/6 <tnt@kalik.net>:

No. You define virtual home servers in proxy.conf.

Ivan Kalik Kalik Informatika ISP

Dana 6/9/2008, "Carlos Eduardo Tavares Terra" <eduardo.terra@gmail.com> piše:

...

Can I associate in groupcheck a groupname with a virtual server?

I have separated each type of services into different virtual servers, because each one of then has different modules.

Thanks

On Fri, Sep 5, 2008 at 2:49 PM, Ivan Kalik <tnt@kalik.net> wrote:

...

Radgroupcheck table.

Ivan Kalik Kalik Informatika ISP

-----Original Message----- From: freeradius-users-bounces+tnt=kalik.net@lists.freeradius.org [mailto:freeradius-users-bounces+tnt=kalik.net@lists.freeradius.org] On Behalf Of Carlos Eduardo Tavares Terra Sent: 05 September 2008 02:42 To: freeradius-users@lists.freeradius.org Subject: FreeRadius2 + MySQL: NAS x Usergroup

Dear freeradius users,

I have a special scenario. Today I have many freeradius servers, each one responsible for differente services.

Now I want to group this freeradius servers into one master server, but I have users in many differente usergroups (one for each service). How can I associate an usergroup to a nas? Example: NAS (192.168.2.1) -> Usergroup (Dialup) NAS (192.168.2.2) -> Usergroup (Broadband) NAS (192.168.2.3) -> Usergroup (Hotspot)

I saw how to do this using huntgroups, but I want to use a mysql database with all clients.

There are another ways to implement this different services into one radius server, maybe the right way? If not, how can I associate the usergroups and nas using mysql?

Thank you -- Carlos Eduardo Tavares Terra GNU/Linux #413291 [http://counter.li.org] Slackware Linux - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.169 / Virus Database: 270.6.16/1652 - Release Date: 2008-09-04 18:54

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- Carlos Eduardo Tavares Terra Analista de Sistemas Petróleo Brasileiro S/A GNU/Linux #413291 [http://counter.li.org] Slackware Linux

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- Carlos Eduardo Tavares Terra Analista de Sistemas Petróleo Brasileiro S/A GNU/Linux #413291 [http://counter.li.org] Slackware Linux

Many thanks... It is working now! :) On Tue, Sep 9, 2008 at 5:11 AM, Alan DeKok <aland@deployingradius.com> wrote:

Carlos Eduardo Tavares Terra wrote:

...

Sorry, but maybe I didn't understand how virtual servers really work.

raddb/sites-available/README

Each virtual server is a RADIUS server, just like in 1.x. The only difference is that you don't need to run multiple processes to get multiple server configurations.

...

I have separated into different virtual servers because each type of service have different modules implemented by me. In freeradius1 I was using the groupreply 'Exec-Program-Wait' and different radius servers for each service. In each server I have modified the sql querys

i.e. in 1.x, you modified the SQL queries in the sql module configuration, for each server. i.e. you were running TWO different instances of the SQL module.

I think the problem is that you're trying to use only ONE instance of the SQL module in 2.x. Instead, do this in the "modules" section:

sql sql1 { ... content from 1.x server1, INCLUDING queries }

sql sql2 { ... content from 1.x server2, INCLUDING queries }

Then, use "sql1" in the virtual server for server1, and "sql2" in the virtual server for sql2.

Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- Carlos Eduardo Tavares Terra GNU/Linux #413291 [http://counter.li.org] Slackware Linux