doc/rlm_sql is wrong?

Michael Griego mgriego at utdallas.edu
Mon Jan 8 21:04:42 CET 2007


The code that handles SQL groups individually may still only exist in  
the CVS HEAD.

--Mike


On Jan 8, 2007, at 1:38 PM, Phil Mayers wrote:

> I've been looking at using rlm_sql to replace a fairly complex set  
> of Autz-Type and rlm_passwd maps. Primarily this is to speed up  
> updates when e.g. blocking systems and not have to HUP the server.
>
> The doc/rlm_sql file states that processing is done with pairs of  
> check/reply items at a time - that is, first the user check items  
> are compared and if matches the reply items added; then for each  
> group (in order of priority) the group check items are compared and  
> if match the reply items added.
>
> The code in rlm_sql.c definitely does not do that, at least in  
> 1.1.3 as far as I can understand the code? Instead it appears to  
> smoosh the user and all the group check items together, compares  
> them, and if they *all* match adds *all* the reply items.
>
> This seems to make groups pretty useless except for using the SQL- 
> Group construct in the users file.
>
> Comments?
> - List info/subscribe/unsubscribe? See http://www.freeradius.org/ 
> list/users.html

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6184 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20070108/0c1820a3/attachment.bin>


More information about the Freeradius-Users mailing list