The MySQL databases for Freeradius

John Dennis jdennis at redhat.com
Tue Nov 24 17:24:28 CET 2009


On 11/24/2009 10:32 AM, Peter Carlstedt wrote:
> The database "radcheck" is for a singeluser if I have understood it
> correctly.

I don't know what you mean by single user, but radcheck has all the 
users in it. It may have more than one row for a given user if you want 
to check more than one attribute for that user.

> What I want to do is that through MS Access make a form where I can add
> several attributes to the same row in the table.

I don't know what MS Access has to do with this unless you're somehow 
using it as a GUI front end to MySQL, but it should be obvious you can't 
have more than one attribute per row (because that's the schema).

> But since radcheck only seem to work with one attribute per row for one
> user I dont really know how to do.
> What I mean is that if I have a user called "test-user" and want to have
> two attributes for that user, in this case "Cleartext-Password" &
> "NAS-Port-Id" I need to have two rows for that user.

Thats right.

The way radcheck works is does a query for all the attributes associated 
with a user, if *any* attribute comparison matches (using the operator 
for that attribute) then the check succeeds.

Caveat: some attributes are skipped during comparison (e.g. passwords, 
auth_type, etc.) because they aren't relevant during authorization.

>
> The table looks like this in Access(when i want to use two or more
> attributes):
>
> radcheck:
> ------------------------------------------------------
> _|id|username |attribute |op |value |_
> |1 |user-test |Cleartext-Password|== |test-pass |
> |2 |user-test |NAS-Port-Id |== |raket |
> -------------------------------------------------------


-- 
John Dennis <jdennis at redhat.com>

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



More information about the Freeradius-Users mailing list