[Help-gnu-radius] Fall-Through and databases

[Luis Miguel Navas Santos]

Hi all,

We are trying to migrate the users file to a database. The problem we have
found is that we have some kind of "universal access", i.e. we allow the
same user to be authenticated with the same credentials (login and password)
by using the Calling-Station-Id attribute to distinguish among different
allowed phone numbers (mobile, ISDN, etc.). Moreover, there are other users
that don't require the Calling-Station-Id attribute.

When using the users file there is no problem because of the Fall-Through
attribute which allows the best match to be chosen.

This is a sample of the users file:

userX        Password = "pwdX", Calling-Station-Id= "983222222",
Service-Type = Framed-User
                Framed-IP-Address = 10.0.0.10,
                Framed-IP-Netmask = 255.255.255.255,
                Idle-Timeout = 3600,
                Fall-Through = Yes

userX        Password = "pwdX", Calling-Station-Id= "983333333",
Service-Type = Framed-User
                Framed-IP-Address = 10.0.0.10,
                Framed-IP-Netmask = 255.255.255.255,
                Idle-Timeout = 3600,
                Fall-Through = Yes

userY        Password = "pwdY", Service-Type = Framed-User
                Framed-IP-Address = 10.0.0.11,
                Framed-IP-Netmask = 255.255.255.255,
                Fall-Through = Yes

My question is the following: Providing that the auth_query must return just
ONE row, is it possible to use the Fall-Through attribute or is there any
other mechanism to allow this behavior?

Thanks in advance and best regards,

Luis Miguel Navas.