On Fri, 25 Feb 2005, Vincent Chen wrote:

>
> I do have the following configuration in postgresql.conf
>
>         default_user_profile = "DEFAULT"
>         query_on_not_found = yes
>
> Do I need other options?
>
> In /etc/raddb/users, I have this profile:
>
> "Presario 2135AD"       EAP-Type := EAP-TLS, NAS-IP-Address == 10.1.3.5
>
> In postgresql database, I have following data rows:
>
>  11 | Presario 2135AD | EAP-Type              | := | EAP-TLS
>  13 | Presario 2135AD | NAS-IP-Address        | == | 10.1.3.5
>  15 | DEFAULT         | Auth-Type             | := | Reject
>
> If I use files module, this user will be rejected. If I switch to sql module,
> this user will be accepted. How can I tell whether DEFAULT profile choosed or
> not while using sql module?
>
>
> Thanks for your help,
>
> Vincent Chen
>

I'm not sure how the sql module works with checkitems, but if its not
honoring additional checkitems such as the nas-ip-address, then you
probably have to use the checkval module.  That will compare the
attributes in the request with check items and based on your
configuration, reject them if they don't match.

-Dusty Doris

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to