Fw: RADIUS does not send reply for all groups the user is a member of

Det Det det.explorer at yahoo.com
Tue Aug 23 09:38:27 CEST 2011




----- Forwarded Message -----
From: Det Det <det.explorer at yahoo.com>
To: Fajar A. Nugraha <list at fajar.net>
Sent: Tuesday, August 23, 2011 3:37 PM
Subject: Re: RADIUS does not send reply for all groups the user is a member of


Thanks Fajar! I just added the fall-through. I leave the priority as is. Worked! Thanks!



________________________________
From: Fajar A. Nugraha <list at fajar.net>
To: Det Det <det.explorer at yahoo.com>; FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Sent: Tuesday, August 23, 2011 3:10 PM
Subject: Re: RADIUS does not send reply for all groups the user is a member of

On Tue, Aug
 23, 2011 at 1:53 PM, Det Det <det.explorer at yahoo.com> wrote:
> Hi there,
> here is the SQL and debug logs from radius.
>
> mysql> select * from radusergroup;
> +---------------------------+-----------+----------+
> | username                  | groupname | priority |
> +---------------------------+-----------+----------+
> | user1 at mydomain.com  | defgroup  |        1 |
> user1 at mydomain.com  | dynamic   |        1 |
>
 +---------------------------+-----------+----------+

It'd be easier if you use different priorities. Since the debug log
shows it's using "defgroup", try changing "dynamic"'s priority to "2"
...

> mysql> select * from radgroupreply;
> +----+-----------+-------------------+----+-----------------+
> | id | groupname | attribute         | op | value           |
> +----+-----------+-------------------+----+-----------------+
> |  1 | defgroup  | Framed-MTU        | =  | 1500            |
> |  2 | defgroup  | Service-Type      | =  | Framed-User     |
> |  3 | defgroup  | Port-Limit        | =  |
 1               |
> |  7 | dynamic   | Framed-IP-Netmask | =  | 255.255.255.255 |
> |  6 | dynamic   | Framed-IP-Address | =  | 255.255.255.254 |
> +----+-----------+-------------------+----+-----------------+

... and add a radgroupreply entry like

defgroup | Fall-Through | = | Yes

-- 
Fajar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110823/09a8f54e/attachment.html>


More information about the Freeradius-Users mailing list