usergroup and radgroupcheck problem!
Hamid Reza Hasani
hr.hasani at gmail.com
Thu Nov 12 11:48:51 CET 2009
Hi, (Salam)
I'm using last version of freeradius. when my users are going to connect, I
see this message:
[sql] expand: %{User-Name} -> myuser
[sql] sql_set_user escaped user --> 'myuser'
rlm_sql (sql): Reserving sql socket id: 2
[sql] expand: SELECT id, groupname, attribute, Value,
op FROM radgroupcheck WHERE groupname =
'%{Sql-Group}' ORDER BY id -> SELECT id, groupname,
attribute, Value, op FROM radgroupcheck WHERE
groupname = '' ORDER BY id
rlm_sql_mysql: query: SELECT id, groupname, attribute, Value,
op FROM radgroupcheck WHERE groupname = ''
ORDER BY id
[sql] expand: SELECT groupname FROM usergroup WHERE
username = '%{SQL-User-Name}' ORDER BY priority -> SELECT
groupname FROM usergroup WHERE username =
'myuser' ORDER BY priority
rlm_sql_mysql: query: SELECT groupname FROM usergroup
WHERE username = 'myuser' ORDER BY priority
[sql] expand: SELECT id, username, attribute, value, op FROM
radcheck WHERE username = BINARY '%{SQL-User-Name}' ORDER
BY id -> SELECT id, username, attribute, value, op FROM
radcheck WHERE username = BINARY 'myuser' ORDER BY id
rlm_sql_mysql: query: SELECT id, username, attribute, value, op
FROM radcheck WHERE username = BINARY 'myuser' ORDER BY id
[sql] User found in group test
[sql] expand: SELECT id, groupname, attribute, value,
op FROM radgroupreply WHERE groupname =
'%{Sql-Group}' ORDER BY id -> SELECT id, groupname,
attribute, value, op FROM radgroupreply WHERE
groupname = 'test' ORDER BY id
rlm_sql_mysql: query: SELECT id, groupname, attribute, value,
op FROM radgroupreply WHERE groupname = 'test'
ORDER BY id
rlm_sql (sql): Released sql socket id: 2
++[sql] returns ok
rlm_sqlcounter: Entering module authorize code
rlm_sqlcounter: Could not find Check item value pair
++[dailycounter] returns noop
++[expiration] returns noop
++[logintime] returns noop
if you look at them carefully, you can see there is a bit problem! my
freeradius is read radgroupcheck before usergroup table, so it can't
recognize user's group name for radgroupcheck query! so it can't read
radgroupcheck attributes!
where is my fault? can I change it priority?
thanks
Ya Ali
Hamid Reza Hasani
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20091112/50f93e4b/attachment.html>
More information about the Freeradius-Users
mailing list