How to get FR user check items override group check items

[Abraham Jacob]

On Mon, Nov 18, 2024 at 5:18 PM Alan DeKok <aland at deployingradius.com> wrote:
>
> On Nov 18, 2024, at 6:02 AM, Abraham Jacob <abrahamj at gmail.com> wrote:
> > Yes, when I put Session-Timeout in reply tables it is working except
> > for the limiting the user using sqlcounter dailycounter.
>
>   It would have been helpful to describe that at the start.  It's difficult to give the correct answer when the question is wrong.
>
>   In this case, at least one issue is using Session-Timeout the wrong way.  That attribute is meant to go into the reply, as the session timeout.  It's not meant to be used in the dailycounter configuration.
>
>   i.e. the default dailycounter configuration use "Max-Daily-Session" as the check name, in order to clearly separate the roles of the two different attributes.

Ok

> > Hope my understanding on how FR dailycounter module works is right and
> > for this to work, the attribute has to be in one of the check tables
> > and when it does, FR is working like a charm. Except that I am not
> > able to find a method to override Session-Timeout in radgroupcheck for
> > specific users by putting the attribute in radcheck table.
>
>   Configure the dailycounter module to use Max-Daily-Session.
>
>   Don't use Session-Timeout in the check tables.  Use Max-Daily-Session.

Done

>   And then in the radgroupcheck table use "+=" as the operator.  The dailycounter module will only look at the first Max-Daily-Session, so that will be fine.

Yes, now it is giving the desired behaviour. Thank you so much.

I hope this is the intended method of using attributes/operators in
radcheck//radgroupcheck tables (not a workaround).

Thanks again.
Abraham