Section 3.78. <AuthBy FREERADIUSSQL>

3.78. <AuthBy FREERADIUSSQL>

This clause handles authentication and accounting from a FreeRADIUS compatible SQL database. The default SQL queries use the standard FreeRadius tables radcheck, radreply, radgroupcheck, radgroupreply and radacct.

Tip

The sample configuration file in goodies/freeradiussql.cfg in your Radiator distribution shows how to set up a complete FreeRADIUS emulator. Use of this configuration file can make migration from an existing FreeRADIUS installation easy.

<AuthBy FREERADIUSSQL> understands also the same parameters as <AuthBy SQL>. For more information, see Section 3.41. <AuthBy SQL>.

3.78.1. ConvertCleartextPassword

ConvertCleartextPassword flag parameter causes FreeRADIUS Cleartext-Password check item to be used as a Radiator clear text password check item. When this flag is not set, Radiator does not consider Cleartext-Password a special password check item. All new configurations should enable this parameter. ConvertCleartextPassword currently defaults to not enabled for backwards compatibility.

# Use Cleartext-Password as a Radiator User-Password check item
ConvertCleartextPassword

3.78.2. AuthCheck

This optional parameter specifies an SQL query that is used to get check items for a user. Special characters are supported, as well as a single bind variable for the user name being searched. Defaults to:

SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE
Username=? ORDER BY id

3.78.3. AuthReply

This optional parameter specifies an SQL query that is used to get reply items for a user. Special characters are supported, as well as a single bind variable for the user name being searched. Defaults to:

SELECT id, UserName, Attribute, Value, op FROM radreply WHERE
Username=? ORDER BY id

3.78.4. AuthGroupCheck

This optional parameter specifies an SQL query that is used to get check items for a user's group. Special characters are supported, as well as a single bind variable for the group name being searched. Defaults to:

SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,
radgroupcheck.Value,radgroupcheck.op FROM
radgroupcheck,usergroup WHERE usergroup.Username = ? AND
usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id

3.78.5. AuthGroupReply

This optional parameter specifies an SQL query that is used to get reply items for a user's group. Special characters are supported, as well as a single bind variable for the group name being searched. Defaults to:

SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,
radgroupreply.Value,radgroupreply.op FROM
radgroupreply,usergroup WHERE usergroup.Username = ? AND
usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id

3.78.6. AcctOnoffQuery, AcctStartQuery, AcctStartQueryAlt, AcctUpdateQuery, AcctUpdateQueryAlt, AcctStopQuery, AcctStopQueryAlt

These optional parameters specify SQL queries to handle various accounting requests by inserting or updating the radacct table. The ‘Alt’ versions are run if the non-Alt version fails (usually because the appropriate accounting record is missing).