On 11/09/2018 22:21, Rohan wrote:

I cannot disable NAS check.

NAS check (NASType is set to unknown by default) should be disabled by default but radiator is still checking user status even when NASType is set to ignore. How do we disable NAS check?

Hello Rohan,

CountQuery in your config is returning incorrect values. The first column it must return must be NAS IP address (or DNS name, IP preferred). Now it's returning the username which can't be mapped to any known RADIUS Client.

Once it finds the correct client, the default NAS type should cause the extra check to be skipped.

I would also recommend using CountQueryParam with CountQuery, or changing CountQuery to use %0 to make sure any special characters get quoted correctly.

You could also consider similar changes to other SQL queries you have. We recommend using query params when possible.

For more information about CountQuery, please see Radiator reference manual. It describes in detail what this and any other queries should return and gives hints about configuring them.

We are using version 4.14

Corrected CountQuery should work fine with 4.14, altough I recommend updating to get all enhancements, security and other bug fixes.

Thanks,
Heikki

--
Heikki Vatiainen <[email protected]>

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, TACACS+, PAM, Active Directory,
EAP, TLS, TTLS, PEAP, WiMAX, RSA, Vasco, Yubikey, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, etc.
_______________________________________________
radiator mailing list
[email protected]
http://lists.open.com.au/mailman/listinfo/radiator

Reply via email to