Users file and rlm_sql

Peter Nixon listuser at peternixon.net
Wed Sep 20 11:14:36 CEST 2006


On Wed 20 Sep 2006 11:21, Benoît Bianchi wrote:
> Hi,
>
>
>
>             We are currently using freeradius with users file configuration
> for our Wireless system, authenticating through ldap and rlm_eap which is
> working fine, but we’d like to use a sql database to store login/password
> for guest accounts. This seems to us the easiest way to manage this because
> we’ll have to create and delete theses accounts from a web interface.
>
>             Can we do this with rlm_sql? 

yes

>             After lookink at the documentation 
> and googled about this, my feeling is that using rlm_sql will prevent the
> server to parse the users file, 

no. where on earth did you get this idea?

> but I’d like the users to be parsed first 
> and then if there is no match, the sql database to be queried. Is this
> possible?

yes

> Do we have to create all radius tables in the sql server even if 
> we use only the radcheck one?

yes

> Here is our actual users file which I don’t see how to configure with
> rlm_mysql:
>
>
>
> DEFAULT         hint == "WPA" , FreeRADIUS-Proxied-To == 127.0.0.1,
> Ldap-Group != "WPA_Allowed", Auth-Type := Reject
>
>
>
> DEFAULT
>
>                 User-Name := "%{User-Name}"
>
>
>
>             Will putting sql in the authorise section of radius.conf just
> after file do the trick?

yes

-- 

Peter Nixon
http://www.peternixon.net/
PGP Key: http://www.peternixon.net/public.asc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20060920/ea7cfaed/attachment.pgp>


More information about the Freeradius-Users mailing list