prevent Fall-through to profile in rlm_sql?

Alan DeKok aland at deployingradius.com
Tue Nov 8 18:52:06 CET 2016


On Nov 8, 2016, at 12:30 PM, Chen, Christof <christof at chen.de> wrote:
> 
> can someone give me a hint why freeradius 3.0.12 falls through to profile
> processing in rlm_sql even if there is "fall-through = No" in the last
> group reply?

  The behaviour of the SQL is extensively documented.

http://wiki.freeradius.org/modules/Rlm_sql

> Is there a way to tell the server NOT to fall-through to profile processing
> IF there was a match in the group processing?

  Edit the source.  Or don't use profiles.

> The "default" profile contains a deny reply which should only be returned
> if the user was not found in any usergroup.

  You'll have to find another way to do that.

  Alan DeKok.



More information about the Freeradius-Users mailing list