Re: Can't get rlm_sql to authorize, what's wrong with my query?

Matthew Schumacher wrote:
> Can someone look at my query and tell me what is wrong?
>
> -----------------------------------------------------------
> db=> select id, username, attribute, value, op from radstart('username');
> id | username | attribute | value | op
> ----+----------+-----------------+----------+----
> 1 | username | User-Password | password | ==
> 5 | username | Auth-Type | Local | :=
> 6 | username | Session-Timeout | 600 | =
> -----------------------------------------------------------

Ok, I'm replying to myself to let others know what the fix is....

The authorize_check_query only expects comparison attributes, and
authorize_reply_query only expects set attributes. In my query above I
combined them and used the same query for both.

In order for this to work you must use something like this:

db=> select * from radstart('username', 'check');
id | username | attribute | value | op
----+----------+---------------+----------+----
1 | username | User-Password | password | ==
2 | username | Auth-Type | Local | :=
(2 rows)

db=> select * from radstart('username', 'reply');
id | username | attribute | value | op
----+----------+--------------------+---------------------+----
6 | username | Session-Timeout | 600 | =


schu

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html