Re: HuntGroup + MySQL

On Wed, 11 May 2005, Julien freeradius wrote:

> Hello,
>
> I would like to set freeradius to send a PPP like configuration if the
> request come from a nas and a VPN style configuration if coming from
> another NAS. More or less like that :
>
> huntgroups file:
> PPP NAS-IP-Address == 192.168.2.1
> VPN NAS-IP-Address == 192.168.2.2
>
>
> Users file:
>
> DEFAULT Huntgroup-Name = "PPP"
> Framed-Protocol = PPP,
> Framed-Compression = Van-Jacobson-TCP-IP,
> Framed-IP-Address = 255.255.255.254
>
> DEFAULT Huntgroup-Name = "VPN"
> CVPN3000-Primary-DNS = "XXX.XXX.XXX.XXX",
> CVPN3000-Secondary-DNS = "XXX.XXX.XXX.XXX"
>
>
> But I'm using MySQL. So I have set it as this:
>
> Usergroup table :
>
> | id | UserName | GroupName |
> | 1 | TestUser | confPPP |
> | 2 | TestUser | confVPN |
>
> Radgroupcheck Table :
>
> | id | GroupName | Attribute | op |
> Value |
> | 4 | confVPN | Huntgroup-Name | += | VPN |
> | 8 | confPPP | Huntgroup-Name | += |
> PPP |

Why do you have the operator as += ? Try it with == instead.

>
> RadgroupReply table :
>
> | id | GroupName | Attribute
> | op | Value | prio |
> | 701 | confPPP | Framed-Address |
> := | 255.255.255.254 | 3 |
> | 700 | confPPP | Framed-Protocol
> | := | PPP | 2 |
> | 702 | confPPP | Framed-Compression | :=
> | Van-Jacobsen-TCP-IP | 4 |
> | 711 | confPPP | Fall-Through
> | := | No | 5 |
> | 703 | confVPN | CVPN3000-Primary-DNS | := |
> 1 | 0 |
> | 704 | confVPN | CVPN3000-Secondary-DNS | := |
> 1 | 0 |
>
>
> The authentification work, the huntgroup is well match (I see the hunt
> group on the log), but the reply include always both data, the reply of
> the VPN AND the reply of the PPP. How can I reply only the VPN
> attributes when the request is coming from the VPN nas and PPP atribute
> for the other one.
>
> Thanks in advance.
>

Read man 5 users. In that it says += always matches as a check item and
== matches if the named attribute is present and has the given value.

I think that is where your problem lies.



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html