Files merging with SQL

Dean Smith dean at
Thu Aug 23 01:29:03 CEST 2018

Alan - Thanks for such a rapid and definitive response

And of course, now I know what I'm looking for - yes I've found the old config that achieved the same. Apologies for the unnecessary question. 

Dean Smith

-----Original Message-----
From: Freeradius-Users < at> On Behalf Of Alan DeKok
Sent: 22 August 2018 23:53
To: FreeRadius users mailing list <freeradius-users at>
Subject: Re: Files merging with SQL

On Aug 22, 2018, at 6:32 PM, Dean Smith <dean at> wrote:
> I have updated a Freeradius 2.x system to a fresh 3.0.16 build (new 
> hardware/os from the ground up)

  That's good.

> On 3.0.16 I am seeing that a request that matches a DEFAULT entry 
> within files (which accepts with assorted tunnel attributes)  is also 
> then using the sql module and merging the attributes rather than not 
> processing the SQL if the files section matches.

  The two modules are completely independent.

> Have I missed a change in behaviour between 2.x and 3.0.x ? 

  No.  v2 behaves the same as v3.

  I suspect that your configuration changed the default v2 behaviour to skip "sql" if the "files" module matched a user.

> In the debug I can see the match in users.then it also calls sql.

  Which is what it's supposed to do.

> Wed Aug 22 23:22:30 2018 : Debug: (1) files: users: Matched entry 
> DEFAULT at line 1366
> Wed Aug 22 23:22:30 2018 : Debug: (1)     modsingle[authorize]: returned
> from files (rlm_files)
> Wed Aug 22 23:22:30 2018 : Debug: (1)     [files] = ok
> Wed Aug 22 23:22:30 2018 : Debug: (1)     modsingle[authorize]: calling sql
> (rlm_sql)

  If you don't want it to do that, do:

	if (!ok) {

  See "man unlang" for details.

  Alan DeKok.

List info/subscribe/unsubscribe? See

More information about the Freeradius-Users mailing list