RE: modcall[authorize] after Access-Accept

2006-06-07 Thread Ryan Melendez 
Thanks, exactly what I needed.  Here is my being very impressed that is
a config option.

Ryan

> -Original Message-
> From:
[EMAIL PROTECTED]
> [mailto:freeradius-users-
> [EMAIL PROTECTED] On Behalf Of Alan
> DeKok
> Sent: Wednesday, June 07, 2006 12:03 PM
> To: FreeRadius users mailing list
> Subject: Re: modcall[authorize] after Access-Accept
> 
> "Ryan Melendez" <[EMAIL PROTECTED]> wrote:
> > I have both the realm and sql modules in my authorize section.
After
> > freeradius receives an Access-Accept it processes the authorize
section.
> 
>   See post_proxy_authorize.
> 
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: modcall[authorize] after Access-Accept

2006-06-07 Thread Alan DeKok 
"Ryan Melendez" <[EMAIL PROTECTED]> wrote:
> I have both the realm and sql modules in my authorize section.  After
> freeradius receives an Access-Accept it processes the authorize section.

  See post_proxy_authorize.

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

modcall[authorize] after Access-Accept

2006-06-07 Thread Ryan Melendez 
Hello,

I have both the realm and sql modules in my authorize section.  After
freeradius receives an Access-Accept it processes the authorize section.
It is not clear to me why, but I assume this is intentional based on
debug messages:

  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok for request 0
rlm_realm: Proxy reply, or no User-Name.  Ignoring.
  modcall[authorize]: module "realmslash" returns noop for request 0
rlm_realm: Proxy reply, or no User-Name.  Ignoring.
  modcall[authorize]: module "realmat" returns noop for request 0


My problem is that the sql module is called after the realm modules and
querys the db.  I don't know why this would ever be necessary, but it is
undesirable for my configuration.  I cannot simply group 'realmslash'
and 'relamat' and return if 'noop'.  This would cause a 'LOCAL' realm to
skip the sql.  I appreciate any help.

Thanks,
Ryan

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html