(Sorry - posted to devel by mistake :( )
I'm trying to use the sql module to allow for different return values
dependant upon (for example) the called station id .
I've had a good look through the stuff and cant see where the tables have
enough information to allow for :-
username is in group abc
if group abc and called-station-id is 1
if time is xxx
allow login
session-timeout is 2400
if time is yyy
dont allow login
if group abc and called-station-id is 2
allo login
session-timeout is 4800
This is easy to code in the users file, but surely the radgroupcheck table
would need to set a new group if the items matched :- eg
radgroupcheck :-
rad
group item value 'newgroup'
abc called-station-id 1 abc1
abc called-station-id 2 abc2
abc1 time xxx abc1xxx
radgroupreply
abc1xxx session-timeout 2400
abc2 session-timeout 4800
abc1yyy authorise no
etc
But radgroupcheck doesnt have the extra field needed, no I suspect does
the module recurse anyway :(
Unless I'm missing something wrt the sql implementation (that isnt covered
in the documentation ;) ) then this cant be done. I've also checked the
more extensive documentation with icradius and that seems to have the same
limitation.
If the limitation is real , then is it possible to use an sql table for
auth and accounting, but still use the users file for the rest of the
settings ??
Lance
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
