Files merging with SQL

Alan DeKok aland at deployingradius.com
Thu Aug 23 00:53:15 CEST 2018


On Aug 22, 2018, at 6:32 PM, Dean Smith <dean at eatworms.org.uk> wrote:
> 
> I have updated a Freeradius 2.x system to a fresh 3.0.16 build (new
> hardware/os from the ground up)

  That's good.

> On 3.0.16 I am seeing that a request that matches a DEFAULT entry within
> files (which accepts with assorted tunnel attributes)  is also then using
> the sql module and merging the attributes rather than not processing the SQL
> if the files section matches.

  The two modules are completely independent.

> Have I missed a change in behaviour between 2.x and 3.0.x ? 

  No.  v2 behaves the same as v3.

  I suspect that your configuration changed the default v2 behaviour to skip "sql" if the "files" module matched a user.

> In the debug I can see the match in users.then it also calls sql.

  Which is what it's supposed to do.

> Wed Aug 22 23:22:30 2018 : Debug: (1) files: users: Matched entry DEFAULT at
> line 1366
> 
> Wed Aug 22 23:22:30 2018 : Debug: (1)     modsingle[authorize]: returned
> from files (rlm_files)
> 
> Wed Aug 22 23:22:30 2018 : Debug: (1)     [files] = ok
> 
> Wed Aug 22 23:22:30 2018 : Debug: (1)     modsingle[authorize]: calling sql
> (rlm_sql)

  If you don't want it to do that, do:

	files
	if (!ok) {
		sql
	}

  See "man unlang" for details.

  Alan DeKok.




More information about the Freeradius-Users mailing list