return ALL the AVPs for a username that belongs multiple groups

[Lenir]

Is not Fall-Through, although I do have it set up, Fall-Through is working.
This is my current config where I use Fall-Through:

DEFAULT Auth-Type = System
        Fall-Through = 1

DEFAULT Service-Type == Call-Check, Auth-Type := None
        Fall-Through = 1

DEFAULT Service-Type == Group-Check, Auth-Type := None
        Fall-Through = 1

DEFAULT Service-Type == SIP-Session, Auth-Type := Digest
        Fall-Through = 1

DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None
        Fall-Through = 1

DEFAULT Service-Type == SIP-Caller-AVPs, Auth-Type := None
        Fall-Through = 1

The radius requests are being authenticated fine. The problem is in the
radius reply. Radius replies with the AVPs of the first group that it
matches that the user belongs to. Instead of returning all the AVPs for all
the groups that the user belongs to. 

So I guess the question is, can a user belong to multiple groups? If so, how
can radius reply with all the AVPs that correspond to ALL the groups that
the user belongs to?


Lenir

-----Original Message-----
From: freeradius-users-bounces at lists.freeradius.org
[mailto:freeradius-users-bounces at lists.freeradius.org] On Behalf Of Alex M
Sent: Sunday, October 23, 2005 11:00 PM
To: edvin.seferovic at kolp.at; 'FreeRadius users mailing list'
Subject: RE: return ALL the AVPs for a username that belongs multiple groups

Probably yes...

-----Original Message-----
From: freeradius-users-bounces at lists.freeradius.org
[mailto:freeradius-users-bounces at lists.freeradius.org] On Behalf Of
Seferovic Edvin
Sent: Sunday, October 23, 2005 10:42 PM
To: 'FreeRadius users mailing list'
Subject: RE: return ALL the AVPs for a username that belongs multiple groups

Fall-Through ???

Regards,

Edvin Seferovic

PS: is a user is matched to one group because of his connection-specific
attributes, he wont be accepted as a member of another group ( to
differentiate between modem and vpn users for example )...

-----Original Message-----
From: freeradius-users-bounces at lists.freeradius.org
[mailto:freeradius-users-bounces at lists.freeradius.org] On Behalf Of Alex M
Sent: Montag, 24. Oktober 2005 04:37
To: 'FreeRadius users mailing list'
Subject: RE: return ALL the AVPs for a username that belongs multiple groups

In config file there should be a line that will allow you to go to the next
parameter despite the fact that it alredy found muching record... that's a
theory, that I remember from documentation

-----Original Message-----
From: freeradius-users-bounces at lists.freeradius.org
[mailto:freeradius-users-bounces at lists.freeradius.org] On Behalf Of Lenir
Sent: Sunday, October 23, 2005 10:14 PM
To: 'FreeRadius users mailing list'
Subject: RE: return ALL the AVPs for a username that belongs multiple groups

Can anybody help me with this?

Thanks in advance,

Lenir

-----Original Message-----
From: freeradius-users-bounces at lists.freeradius.org
[mailto:freeradius-users-bounces at lists.freeradius.org] On Behalf Of Lenir
Sent: Friday, October 21, 2005 12:53 AM
To: 'FreeRadius users mailing list'
Subject: return ALL the AVPs for a username that belongs multiple groups

Hello list,

I have a user that belongs to multiple groups, lets say in the usergroup
table, I have username Paul_S that belongs to Group1, Group2 and Group3
(using a different row for each group membership). In the radgroupreply
table, I have multiple different attributes for each group.

When I do radius authentication for that username, it only returns the AVPs
for the first group match in the radgroupreply table, instead of returning
ALL the AVPs that match ALL the groups that the user belongs to. 

How can I make this happen?

Im using freeradius 1.0.5 and using mysql as the database.

Thanks


Lenir


- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html