How to get FR user check items override group check items

Nick Porter nick at portercomputing.co.uk
Fri Nov 15 17:04:45 UTC 2024


On 15/11/2024 15:49, Abraham Jacob wrote:
> So I think this is the expected behaviour in the new version.
It is with the data you've got
> Following are the sql contents.
>
> Table radgroupreply:
> +----+------------+--------------+----+-------+
> | id | groupname  | attribute    | op | value |
> +----+------------+--------------+----+-------+
> |  9 | VPN-60-Min | Idle-Timeout | := | 600   |
> +----+------------+--------------+----+-------+

The behaviour you want can be easily achieved by changing the operator 
in radgroupreply

if you use "=" instead of ":=", the group reply won't overwrite the user 
one, since an instance of the attribute already exists.

Nick

-- 
Nick Porter

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 665 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20241115/7b29b9cd/attachment.sig>


More information about the Freeradius-Users mailing list