SQL Groups broken in v 1.1.5 but fixed in CVS head :)
Arran Cudbard-Bell
A.Cudbard-Bell at sussex.ac.uk
Sat Apr 7 17:15:40 CEST 2007
Phil Mayers wrote:
> On Fri, Apr 06, 2007 at 08:43:30PM +0100, Arran Cudbard-Bell wrote:
>
>> Hi,
>>
>> Updated The sql querys to honour priority field, and happily it seems
>> that rlm_sql processes groups in the order they come out of the
>> database... which is good.
>> What the packets below are show, is that if the group with the highest
>> priority has all it's check items match, then it's reply items are added
>> fine.
>>
>> However if the first group doesn't match then the other groups arn't
>> processed ! So although the user is still authorised via LDAP none of
>> the group reply items are sent :(
>>
>
> So Fall-Through is not being obeyed, correct?
>
No Fall-Through shouldn't even be checked. Whats happening is if the
first groups check items don't match, it doesn't check the second group.
Fall-Through status for a group should only be checked if the group
actually matches.
---
Arran
More information about the Freeradius-Users
mailing list