/etc/freeradius/sql/postgresql/ippool.conf is in freeradius-postgresql 2.1.10+dfsg-3build2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 | # -*- text -*-
##
## ippool.conf -- PostgreSQL queries for rlm_sqlippool
##
## $Id$
## This query allocates an IP address from the Pool
## The ORDER BY clause of this query tries to allocate the same IP-address
## to the user that they had last session...
allocate-find = "SELECT framedipaddress FROM ${ippool_table} \
WHERE pool_name = '%{control:Pool-Name}' AND expiry_time < 'now'::timestamp(0) \
ORDER BY (username <> '%{SQL-User-Name}'), \
(callingstationid <> '%{Calling-Station-Id}'), expiry_time \
LIMIT 1 \
FOR UPDATE"
## If you prefer to allocate a random IP address every time, use this query instead
#allocate-find = "SELECT framedipaddress FROM ${ippool_table} \
# WHERE pool_name = '%{control:Pool-Name}' AND expiry_time < 'now'::timestamp(0) \
# ORDER BY RANDOM() \
# LIMIT 1 \
# FOR UPDATE"
## If an IP could not be allocated, check to see whether the pool exists or not
## This allows the module to differentiate between a full pool and no pool
## Note: If you are not running redundant pool modules this query may be commented
## out to save running this query every time an ip is not allocated.
pool-check = "SELECT id FROM ${ippool_table} \
WHERE pool_name='%{control:Pool-Name}' LIMIT 1"
## This query marks the IP address handed out by "allocate-find" as used
## for the period of "lease-duration" after which time it may be reused.
allocate-update = "UPDATE ${ippool_table} \
SET nasipaddress = '%{NAS-IP-Address}', pool_key = '${pool-key}', \
callingstationid = '%{Calling-Station-Id}', username = '%{SQL-User-Name}', \
expiry_time = 'now'::timestamp(0) + '${lease-duration} second'::interval \
WHERE framedipaddress = '%I'"
## This query frees the IP address assigned to "pool-key" when a new request
## comes in for the same "pool-key". This means that either you are losing
## accounting Stop records or you use Calling-Station-Id instead of NAS-Port
## as your "pool-key" and your users are able to reconnect before your NAS
## has timed out their previous session. (Generally on wireless networks)
## (Note: If your pool-key is set to Calling-Station-Id and not NAS-Port
## then you may wish to delete the "AND nasipaddress = '%{Nas-IP-Address}'
## from the WHERE clause)
allocate-clear = "UPDATE ${ippool_table} \
SET nasipaddress = '', pool_key = 0, callingstationid = '', \
expiry_time = 'now'::timestamp(0) - '1 second'::interval \
WHERE nasipaddress = '%{NAS-IP-Address}' \
AND pool_key = '${pool-key}'"
## This query extends an IP address lease by "lease-duration" when an accounting
## START record arrives
start-update = "UPDATE ${ippool_table} \
SET expiry_time = 'now'::timestamp(0) + '${lease-duration} second'::interval \
WHERE nasipaddress = '%{NAS-IP-Address}' \
AND pool_key = '${pool-key}'"
## This query frees an IP address when an accounting
## STOP record arrives
stop-clear = "UPDATE ${ippool_table} \
SET nasipaddress = '', pool_key = 0, callingstationid = '', \
expiry_time = 'now'::timestamp(0) - '1 second'::interval \
WHERE nasipaddress = '%{Nas-IP-Address}' \
AND pool_key = '${pool-key}' \
AND username = '%{SQL-User-Name}' \
AND callingstationid = '%{Calling-Station-Id}' \
AND framedipaddress = '%{Framed-IP-Address}'"
## This query extends an IP address lease by "lease-duration" when an accounting
## ALIVE record arrives
alive-update = "UPDATE ${ippool_table} \
SET expiry_time = 'now'::timestamp(0) + '${lease-duration} seconds'::interval \
WHERE nasipaddress = '%{Nas-IP-Address}' \
AND pool_key = '${pool-key}' \
AND framedipaddress = '%{Framed-IP-Address}' \
AND username = '%{SQL-User-Name}' \
AND callingstationid = '%{Calling-Station-Id}'"
## This query frees all IP addresses allocated to a NAS when an
## accounting ON record arrives from that NAS
on-clear = "UPDATE ${ippool_table} \
SET nasipaddress = '', pool_key = 0, callingstationid = '', \
expiry_time = 'now'::timestamp(0) - '1 second'::interval \
WHERE nasipaddress = '%{Nas-IP-Address}'"
## This query frees all IP addresses allocated to a NAS when an
## accounting OFF record arrives from that NAS
off-clear = "UPDATE ${ippool_table} \
SET nasipaddress = '', pool_key = 0, callingstationid = '', \
expiry_time = 'now'::timestamp(0) - '1 second'::interval \
WHERE nasipaddress = '%{Nas-IP-Address}'"
|