Re: use realms to access different mysql tables

--===============0402411897==
Content-Type: multipart/signed; boundary="nextPart2752538.WSNslNT0MD";
protocol="application/pgp-signature"; micalg=pgp-sha1
Content-Transfer-Encoding: 7bit

--nextPart2752538.WSNslNT0MD
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Tuesday 27 March 2007 18:13:09 Alexander Papenburg wrote:
> Hi Freeradius-Mailing-List,
>
> does anyone of you differentiate sql database table with realms?
> E.g.:
>
> Auth-Requests for user1@realm1 will be checked against table db_radius1
> Auth-Requests for user1@realm2 will be checked against table db_radius2
> .....and so on.
>
> I already found out that it is possible to use multiple sql instances,
> but for what i understand is that they would be asked/checked one after
> another. That would be nice for failover scenarios but if there are
> about 20-30 realms to check it would be result in a very slow
> performance (depending on mysql host speed).
> So is there a better way to solve this Problem? All users in one
> database is at the time unfortunately no option...
>
>
> Thanks in advance
>
> Alex

An example of this is below. In each sql definition you can define the=20
different queries necessary to handle a particular realm. realm3 shows how=
=20
to allow multiple realms to use the same db/SQL queries, so you can easily=
=20
merge the databases over time and update the users file to reflect the db=20
changes.

Kevin Bonner

=3D=3D sql.conf =3D=3D
sql db1 { ... }
sql db2 { ... }
=2E..
=3D=3D sql.conf =3D=3D

=3D=3D radiusd.conf =3D=3D
authorize {
...
Autz-Type SQL1 {
db1
}
Autz-Type SQL2 {
db2
}
}
=3D=3D radiusd.conf =3D=3D

=3D=3D users =3D=3D
DEFAULT Realm =3D=3D "realm1", Autz-Type :=3D SQL1
DEFAULT Realm =3D=3D "realm2", Autz-Type :=3D SQL2
DEFAULT Realm =3D=3D "realm3", Autz-Type :=3D SQL2
=2E.. OR
DEFAULT User-Name =3D~ "@realm1$", Autz-Type :=3D SQL1
DEFAULT User-Name =3D~ "@realm2$", Autz-Type :=3D SQL2
DEFAULT User-Name =3D~ "@realm3$", Autz-Type :=3D SQL2
=3D=3D users =3D=3D

--nextPart2752538.WSNslNT0MD
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQBGCZ31/9i/ml3OBYMRAgHMAJ9K6xZTt7HwhxLNel1J2zlAhLow5gCeLH98
szzzyhsUXCDmU4RuR9T53Nc=
=qkXC
-----END PGP SIGNATURE-----

--nextPart2752538.WSNslNT0MD--

--===============0402411897==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--===============0402411897==--