Can anyone explain to me the purpose and usage of the 'prio' column in the radgroupreply table? Much Googling has returned nothing, accept other questions. -- --------------------------- | Nick White | | Network Administrator | | Tele-NET Internet | | http://www.tele-net.net | | nwtech@tele-net.net | ---------------------------
N White <nwtech@tele-net.net> wrote:
Can anyone explain to me the purpose and usage of the 'prio' column in the radgroupreply table?
Order. "SELECT ... by prio" See the "users" file for examples: DEFAULT ... Foo-Stuff = 1 Bar-Junk = 2 is *not* the same as DEFAULT ... Bar-Junk = 2 Foo-Stuff = 1 Sometimes order *does* matter. Alan DeKok.
Alan DeKok wrote:
N White <nwtech@tele-net.net> wrote:
Can anyone explain to me the purpose and usage of the 'prio' column in the radgroupreply table?
Order. "SELECT ... by prio"
See the "users" file for examples:
DEFAULT ... Foo-Stuff = 1 Bar-Junk = 2
is *not* the same as
DEFAULT ... Bar-Junk = 2 Foo-Stuff = 1
Sometimes order *does* matter.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I see. So, for example, if a user belongs to two groups, which group has the "prio"rity. So is a lower number a higher priority? 0 being highest? Thanks! -- --------------------------- | Nick White | | Network Administrator | | Tele-NET Internet | | http://www.tele-net.net | | nwtech@tele-net.net | ---------------------------
N White <nwtech@tele-net.net> wrote:
I see. So, for example, if a user belongs to two groups, which group has the "prio"rity. So is a lower number a higher priority? 0 being highest? Thanks!
See your SQL docs for what priority means. The SQL queries use it, but other than that, FreeRADIUS doesn't even know it exists. Alan DeKok.
Hi, I have managed to get EAP-TLS authentication working with freeradius 1.04 and a windows XP supplicant. However, when I enable CRL all certificates seem to be rejected not just those in the CRL. Could anyone help me with this issue? Let me know if you require any more information. Cheers, Ben
We need to see the log from FreeRADIUS ("radiusd -X") There are a couple of reasons that all certs will be rejected * CA is not designated a CRL issuer * CRL is out of date (CRLs have limited validity period) * something else On 9/14/05, Ben Dowling <bendowling@lineone.net> wrote:
Hi,
I have managed to get EAP-TLS authentication working with freeradius 1.04 and a windows XP supplicant. However, when I enable CRL all certificates seem to be rejected not just those in the CRL. Could anyone help me with this issue? Let me know if you require any more information.
Cheers, Ben
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Fixed the problem, didn't realise the CRL has to be appended to the CA certificate. Cheers On Wed, 2005-09-14 at 08:31 +1000, Ben Walding wrote:
We need to see the log from FreeRADIUS ("radiusd -X")
There are a couple of reasons that all certs will be rejected
* CA is not designated a CRL issuer * CRL is out of date (CRLs have limited validity period) * something else
On 9/14/05, Ben Dowling <bendowling@lineone.net> wrote: Hi,
I have managed to get EAP-TLS authentication working with freeradius 1.04 and a windows XP supplicant. However, when I enable CRL all certificates seem to be rejected not just those in the CRL. Could anyone help me with this issue? Let me know if you require any more information.
Cheers, Ben
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Ben Dowling -
Ben Walding -
N White