FreeRadius using two SQL servers
Hi, my version of FreeRadius is 1.0.5 and what I'm trying to do is that when a radius client ask my freeradius, if the Realm is "xxxx" I want to autorize him with the first SQL server and if the Realm is "yyyy" with the second one. I already have two diferent sql configuration files, sql1.conf and sql2.conf, with instance name SQL1 and SQL2. I had been trying to do exactly what the Autz-Type Doc says, but I had no luck with it. I don't know what to do... Thanks NanO
when a radius client ask my freeradius, if the Realm is "xxxx" I want to autorize him with the first SQL server and if the Realm is "yyyy" with the second one.
I already have two diferent sql configuration files, sql1.conf and sql2.conf, with instance name SQL1 and SQL2.
I had been trying to do exactly what the Autz-Type Doc says, but I had no luck with it. I don't know what to do... Thanks
So, what have you tried?
Hi NanO, You may want something like this. (there are probably other ways of detecting the realm, but it will depend of which modules you are using in authorize, and which order).. In users: DEFAULT User-Name =~ "xxxx", Autz-Type := AUTZ_SQL1 DEFAULT User-Name =~ "yyyy", Autz-Type := AUTZ_SQL2 and in radiusd.conf: authorize { files Autz-Type AUTZ_SQL1 { SQL1 } Autz-Type AUTZ_SQL2 { SQL2 } } Hope that helps, Mike
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Fernando Brito Sent: Tuesday, 15 November 2005 2:43 AM To: Freeradius-Users@lists.freeradius.org Subject: FreeRadius using two SQL servers
Hi, my version of FreeRadius is 1.0.5 and what I'm trying to do is that when a radius client ask my freeradius, if the Realm is "xxxx" I want to autorize him with the first SQL server and if the Realm is "yyyy" with the second one.
I already have two diferent sql configuration files, sql1.conf and sql2.conf, with instance name SQL1 and SQL2.
I had been trying to do exactly what the Autz-Type Doc says, but I had no luck with it. I don't know what to do... Thanks
NanO
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Mike, I just made exactly what you told me, but the Radius gave me the next output: Radius -X ------------------- Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:32805, id=128, length=63 User-Name = "fbrito@dhcp" Password = "fbrito" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 users: Matched entry DEFAULT at line 9 modcall[authorize]: module "files" returns ok for request 0 radius_xlat: '/home/fbrito/Radius/acct//auth-detail-20051114' rlm_detail: /home/fbrito/Radius/acct/%{Client-IP-Address}/auth-detail-%Y %m%d expands to /home/fbrito/Radius/acct//auth-detail-20051114 modcall[authorize]: module "auth_log" returns ok for request 0 modcall: group authorize returns ok for request 0 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Login incorrect: [fbrito@dhcp/fbrito] (from client localhost port 1812) Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 128 to 127.0.0.1:32805 Waking up in 4 seconds... ----------------------------- I think that I had already try this and the answer was the same. I really don't know what is happening. Thanks a lot for your help!! NanO El mar, 15-11-2005 a las 08:02 +1100, Mike Mitchell escribió:
Hi NanO,
You may want something like this. (there are probably other ways of detecting the realm, but it will depend of which modules you are using in authorize, and which order)..
In users:
DEFAULT User-Name =~ "xxxx", Autz-Type := AUTZ_SQL1 DEFAULT User-Name =~ "yyyy", Autz-Type := AUTZ_SQL2
and in radiusd.conf:
authorize {
files
Autz-Type AUTZ_SQL1 { SQL1 }
Autz-Type AUTZ_SQL2 { SQL2 }
}
Hope that helps, Mike
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Fernando Brito Sent: Tuesday, 15 November 2005 2:43 AM To: Freeradius-Users@lists.freeradius.org Subject: FreeRadius using two SQL servers
Hi, my version of FreeRadius is 1.0.5 and what I'm trying to do is that when a radius client ask my freeradius, if the Realm is "xxxx" I want to autorize him with the first SQL server and if the Realm is "yyyy" with the second one.
I already have two diferent sql configuration files, sql1.conf and sql2.conf, with instance name SQL1 and SQL2.
I had been trying to do exactly what the Autz-Type Doc says, but I had no luck with it. I don't know what to do... Thanks
NanO
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Dusty Doris -
Fernando Brito -
Mike Mitchell