Files merging with SQL
Alan DeKok
aland at deployingradius.com
Thu Aug 23 00:53:15 CEST 2018
On Aug 22, 2018, at 6:32 PM, Dean Smith <dean at eatworms.org.uk> wrote:
>
> I have updated a Freeradius 2.x system to a fresh 3.0.16 build (new
> hardware/os from the ground up)
That's good.
> On 3.0.16 I am seeing that a request that matches a DEFAULT entry within
> files (which accepts with assorted tunnel attributes) is also then using
> the sql module and merging the attributes rather than not processing the SQL
> if the files section matches.
The two modules are completely independent.
> Have I missed a change in behaviour between 2.x and 3.0.x ?
No. v2 behaves the same as v3.
I suspect that your configuration changed the default v2 behaviour to skip "sql" if the "files" module matched a user.
> In the debug I can see the match in users.then it also calls sql.
Which is what it's supposed to do.
> Wed Aug 22 23:22:30 2018 : Debug: (1) files: users: Matched entry DEFAULT at
> line 1366
>
> Wed Aug 22 23:22:30 2018 : Debug: (1) modsingle[authorize]: returned
> from files (rlm_files)
>
> Wed Aug 22 23:22:30 2018 : Debug: (1) [files] = ok
>
> Wed Aug 22 23:22:30 2018 : Debug: (1) modsingle[authorize]: calling sql
> (rlm_sql)
If you don't want it to do that, do:
files
if (!ok) {
sql
}
See "man unlang" for details.
Alan DeKok.
More information about the Freeradius-Users
mailing list