SQL Huntgroup only work with user check, not group check

Carlos Eduardo Tavares Terra eduardo.terra at gmail.com
Thu Sep 3 12:36:31 CEST 2009


On Thu, Sep 3, 2009 at 6:30 AM, George Koulyabin<jumbo at vinf.ru> wrote:
>
>> +----+----------+--------------------+----+----------+
>> | id | username | attribute          | op | value    |
>> +----+----------+--------------------+----+----------+
>> |  5 | jack     | Huntgroup-Name     | == | wireless |
>> |  4 | jack     | Cleartext-Password | := | foo      |
>> +----+----------+--------------------+----+----------+
> You wrote rules for authorization/athentication of jack: Jack grants access from hardware of 'wireless' huntgroup with 'foo' password.

I wrote the rules for huntgroup here because the rules in groupcheck
didn't work. If I take this out, just keeping the groupcheck, 'jack'
will connect from any hardware. The groupcheck is ignoring the
huntgroups.

>
>> mysql> select * from radgroupcheck;
>> +----+-----------+----------------+----+----------+
>> | id | groupname | attribute      | op | value    |
>> +----+-----------+----------------+----+----------+
>> |  8 | wireless  | Huntgroup-Name | == | wireless |
>> +----+-----------+----------------+----+----------+
>
> But there is You wrote that You want to authorize the 'wireless' memebership for jack.


-- 
Carlos Eduardo Tavares Terra
GNU/Linux #413291 [http://counter.li.org]




More information about the Freeradius-Users mailing list