Cisco AV Pair

Dan Fleming flemingdp at
Mon Jul 28 15:03:01 CEST 2014

Thank you I have read through it makes sense. So how do I do something
based on the results? I would like to only authorize a connection if the
users password matches and they are connecting to the correct ssid in the
av-pair. Is there a HOWTO or other document outlining how to do that?

Thank you again for your assistance.



On Mon, Jul 28, 2014 at 8:02 AM, Alan DeKok <aland at>

> Dan Fleming wrote:
> > Here is the debug. For some reason my user dfleming is being accepted
> > even though the cisco-avpair does not match.
>   Users are accepted when their credentials are OK.
>   The SQL tables you posted shows it *checking* the Cisco-AVPair.  But
> not *doing* anything with it.  The SQL module doesn't reject people if
> the conditions don't match.  It just doesn't match the conditions.
>   Read this to see how the SQL module works:
>   Odds are you're assuming it works differently than how it's documented.
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the Freeradius-Users mailing list