RESOLVED: Re: Freeradius PSQL not correctly parsing groupcheck/groupreply

Vacheslav m_zouhairy at skno.by
Fri Aug 24 14:51:45 CEST 2018



-----Original Message-----
From: Freeradius-Users <freeradius-users-bounces+m_zouhairy=skno.by at lists.freeradius.org> On Behalf Of Rens Houben via Freeradius-Users
Sent: Friday, August 24, 2018 3:49 PM
To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Cc: Rens Houben <rhouben at systemec.nl>
Subject: RESOLVED: Re: Freeradius PSQL not correctly parsing groupcheck/groupreply

>Update: I'm an idiot, apparently.

As you can see admitting the problem to yourself is the first step of healing, you are my favorite kind :)

>I'd made a custom instance of the SQL RLM to fit the exact needs and avoid overwriting existing config files, but overlooked this little bit in the config:

        # This entry should be used for additional instances (sql foo {})
        # of the SQL module.
        #group_attribute = "${.:instance}-SQL-Group"

        # This entry should be used for the default instance (sql {})
        # of the SQL module.
       group_attribute = "SQL-Group"


>Running with radiusd -XX showed that it didn't substitute the group attribute correctly into the groupcheck/groupreply queries, which put me on the trail and led me to find my error.

>Uncommenting the first group_attribute line and commenting out the second fixed it.
Everything works now.


--
Rens Houben
Systemec Internet Services


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html





More information about the Freeradius-Users mailing list