SQL Groups broken in v 1.1.5 but fixed in CVS head :)

Arran Cudbard-Bell A.Cudbard-Bell at sussex.ac.uk
Sat Apr 7 17:15:40 CEST 2007


Phil Mayers wrote:
> On Fri, Apr 06, 2007 at 08:43:30PM +0100, Arran Cudbard-Bell wrote:
>   
>> Hi,
>>
>> Updated The sql querys to honour priority field, and happily it seems 
>> that rlm_sql processes groups in the order they come out of the 
>> database... which is good.
>> What the packets below are show, is that if the group with the highest 
>> priority has all it's check items match, then it's reply items are added 
>> fine.
>>
>> However if the first group doesn't match then the other groups arn't 
>> processed ! So although the user is still authorised via LDAP none of 
>> the group reply items are sent :(
>>     
>
> So Fall-Through is not being obeyed, correct?
>   
No Fall-Through shouldn't even be checked. Whats happening is if the 
first groups check items don't match, it doesn't check the second group.
Fall-Through status for a group should only be checked if the group 
actually matches.

---
Arran



More information about the Freeradius-Users mailing list