usergroup problems with separate auth and accounting databases

[Alan DeKok]

Trey Scarborough wrote:
> Alan DeKok wrote:
...
>>   Let me guess... you have policies for accounting which use "SQL-Group"?
>>   
> No It breaks the Authentication when I add the Accounting  configuration

  Fine.  You have *authentication* policies which use "SQL-Group".
That's the issue.

  When there is *one* SQL module, the SQL-Group attribute refers only to
it.  When there are *two* SQL modules... which one does it refer to?
That's the problem you're running into.

  The simple solution here is to use the "instantiate" section of
radiusd.conf.  List "sql-acct" first, and "sql-auth" section.  That way,
the SQL-Group comparison will use the "sql-auth" module, and not the
"sql-acct" module.

  Alan DeKok.