How to get FR user check items override group check items

[Alan DeKok]

On Nov 18, 2024, at 6:02 AM, Abraham Jacob <abrahamj at gmail.com> wrote:
> Yes, when I put Session-Timeout in reply tables it is working except
> for the limiting the user using sqlcounter dailycounter.

  It would have been helpful to describe that at the start.  It's difficult to give the correct answer when the question is wrong.

  In this case, at least one issue is using Session-Timeout the wrong way.  That attribute is meant to go into the reply, as the session timeout.  It's not meant to be used in the dailycounter configuration.

  i.e. the default dailycounter configuration use "Max-Daily-Session" as the check name, in order to clearly separate the roles of the two different attributes.

> Hope my understanding on how FR dailycounter module works is right and
> for this to work, the attribute has to be in one of the check tables
> and when it does, FR is working like a charm. Except that I am not
> able to find a method to override Session-Timeout in radgroupcheck for
> specific users by putting the attribute in radcheck table.

  Configure the dailycounter module to use Max-Daily-Session.

  Don't use Session-Timeout in the check tables.  Use Max-Daily-Session.

  And then in the radgroupcheck table use "+=" as the operator.  The dailycounter module will only look at the first Max-Daily-Session, so that will be fine.

  Asking the right question gets you the right answer.

  Alan DeKok.