**Ceci est une ancienne révision du document !**

Voici des extraits détaillés de la configuration RADIUS de FDN, et un exemple SQL:

users:

DEFAULT Huntgroup-Name == 'td', Auth-Type := td
      Service-Type:1 := "Framed",
      Framed-Protocol:1 := "PPP",
      Class:1 := 0,
      Tunnel-Type:1 := "L2TP",
      Tunnel-Medium-Type:1 := "IP",

radiusd.conf:

modules {
  pap { encryption_scheme = crypt }
  chap { authtype = CHAP }
  realm suffix {
    format = suffix
    delimiter = "@"
    ignore_default = no
    ignore_null = no
  }
  sql sqlfdn {
    driver = "rlm_sql_mysql"
    server = "localhost"
    login = "toto"
    passwd = "toto"
    radius_db = "adsl"
    authorize_check_query = "\ 
            select UATTR_ID,RADUSER_LOGIN,UATTR_ATTR,UATTR_VALUE,UATTR_OP \ 
            from RADUSER,UATTR \ 
            where   ((RADUSER_LOGIN = REPLACE('%{SQL-User-Name}','@fdn.nerim','@fdn.fr')) or (RADUSER_LOGIN = '%{SQL-User-Name}')) and \ 
                    UATTR.RADUSER_ID = RADUSER.RADUSER_ID and \ 
                    UATTR_TYPE = 'check' \ 
            order by UATTR_ID" 
    authorize_reply_query = "\
            select UATTR_ID,RADUSER_LOGIN,UATTR_ATTR,UATTR_VALUE,UATTR_OP \
            from RADUSER,UATTR \
            where   ((RADUSER_LOGIN = REPLACE('%{SQL-User-Name}','@fdn.nerim','@fdn.fr')) or (RADUSER_LOGIN = '%{SQL-User-Name}')) and \
                    UATTR.RADUSER_ID = RADUSER.RADUSER_ID and \
                    UATTR_TYPE = 'reply' \
            order by UATTR_ID"
    ...
  }
}
instantiate {}
authorize {
  preprocess
  suffix
  files
  Autz-Type fdn {
    chap
    sqlfdn
  }
}
authenticate {
  Auth-Type PAP { pap }
  Auth-Type CHAP { chap }
  Auth-Type essai { ok }
  eap
}

Voici un extrait des tables SQL:

mysql> select * from RADUSER where RADUSER_LOGIN='jeannot.lapin@fdn.nerim';
+------------+-------------------------+-------------+----------+
| RADUSER_ID | RADUSER_LOGIN           | RADGROUP_ID | LIGNE_ID |
+------------+-------------------------+-------------+----------+
|        111 | jeannot.lapin@fdn.nerim |           1 |      154 |
+------------+-------------------------+-------------+----------+
1 row in set (0.00 sec)
mysql> select * from UATTR where RADUSER_ID=111;
+----------+-------------------+----------+--------------------+------------+------------+
| UATTR_ID | UATTR_ATTR        | UATTR_OP | UATTR_VALUE        | UATTR_TYPE | RADUSER_ID |
+----------+-------------------+----------+--------------------+------------+------------+
|      362 | User-Password     | ==       | toto               | check      |        111 |
|      363 | Framed-IP-Address | =        | 80.67.176.89       | reply      |        111 |
|      364 | Framed-IP-Netmask | =        | 255.255.255.255    | reply      |        111 |
|      389 | Framed-IPv6-Route | =        | 2001:910:1059::/48 | reply      |        111 |
+----------+-------------------+----------+--------------------+------------+------------+
4 rows in set (0.00 sec)

Et par exemple, ça donne donc:

$ radtest jeannot.lapin@fdn.nerim toto 80.67.169.40 1 pweeet ppp 80.67.169.42
Sending Access-Request of id 44 to 80.67.169.40 port 1812
	User-Name = "jeannot.lapin@fdn.nerim"
	User-Password = "toto"
	NAS-IP-Address = 80.67.169.42
	NAS-Port = 1812
	Message-Authenticator = 0x00000000000000000000000000000000
      Framed-Protocol = PPP
rad_recv: Access-Accept packet from host 80.67.169.40 port 1812, id=44, length=52
	Framed-IP-Address = 80.67.176.89
	Framed-IP-Netmask = 255.255.255.255
	Framed-IPv6-Route = "2001:910:1059::/48"