Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation  Back up to About Overview 
  
[+] Expand All
[-] Collapse All

SQL Accessors

You can use an external SQL database to authorize subscribers. The sqlaccessor.gen file stores the settings needed by the SQLAccessor plug-in to authorize subscribers. SQLAccessor requires three items of information from the database:

  • IMSI
  • MSISDN
  • Authorization String

This section describes the configuration choices that you need to make to configure sqlaccessor.gen or sqlaccessor_jdbc.gen.

The sqlaccessor.gen file stores the settings used by the SQL data accessor plug-in. It is composed of several sections. Section names are enclosed in square brackets.

Note: For information about the configuration items that are common across all SQL plug-ins, see Common Configuration Items.

Note: The databases used must support stored procedures.

Note: Oracle front-end applications are not supported on a Linux platform. The sqlaccessor.so and sqlaccessor.gen files are specific to Oracle plug-ins and must not be installed on a Linux platform. You must instead use the sqlaccessor_jdbc.gen file.

[Settings] Section

The [Settings] section of the sqlaccessor.gen file defines parameters that control the database connection.

Table 159: [Settings] Section

Field

Description

MethodName

Identifies the name under which the data accessor registers itself with Steel-Belted Radius Carrier.

Default value is SQL Accessor.

Driver

(JDBC only) Specifies the third-party JDBC driver to load for authentication.

For example: Driver=com/mysql/jdbc/Driver

Note: Third-party JDBC drivers must be installed in the <JRE-path>/lib/ext directory. Where, <JRE-path> indicates the path where the JRE (that is integrated with SBR Carrier) is installed in your system. Refer to the JDBC driver documentation for information about how to install the JDBC driver and supporting files.

ConnectDelimiter

Specifies the character used to separate fields (DSN, UID, PWD) in the connect string.

Default value is ; (semicolon). If the connect string requires use of semicolons as part of a field value, you can use this parameter to specify a different delimiter, such as ^ (caret).

[Results] Section

The [Results] section maps the position of a column name in the SELECT SQL statement with the data needed.

[Failure] Section

The [Failure] section of the sqlaccessor.gen file can be used to determine the result of the authentication process (accept or reject) when connectivity to all of the configured SQL databases has failed.

Table 160: [Failure] Section

Setting

Description

Accept

  • If set to 1, Steel-Belted Radius Carrier returns an Access-Accept packet with the Profile and any combination of the FullName and Alias attributes specified in the corresponding [Failure] section parameters.
  • If set to 0, the user is rejected.

Profile

Specifies the name of a Steel-Belted Radius Carrier profile whose check list and return list attributes are applied to the user's connection.

Fullname

By indicating a FullName, Steel-Belted Radius Carrier returns a value in the class attribute, allowing for all [Failure] connections to be accounted.

Example: SQL Accessor Configuration File

This section provides an example of an Oracle sqlaccessor.gen configuration file.

[Bootstrap]
LibraryName=radsql_accessor_ora.so
Enable=0

[Settings]
MethodName=SQLAccessor
MethodName=SQL Accessor
Connect=username/password@servicename
SQL=SELECT user, msisdn, authstring FROM my_database WHERE user=@KeyToRecord
ParameterMarker=?
MaxConcurrent=1
ConcurrentTimeout=30
WaitReconnect=2
MaxWaitReconnect=360
MaxHardErrorRetries=0

[Server]
s1=2
s2=2

[Server/s1]
Connect=admin1/passwd1@mydb1

[Server/s2]
Connect=admin2/passwd2@mydb2

[Server/s3]
Connect=admin3/passwd3@mydb3
LastResort = 1

[Results]
ResultIMSI = 1/16
ResultMSISDN = 2/16
ResultAuthString = 3/16 

[Failure]
Accept=0
Profile=xyz
FullName=Remote User

Modified: 2018-01-11