ppp+pptpd+FreeRADIUS+MySQL

решил завести с мускулом(чай не первый год с ним работаю)
радиус к мускулу
/etc/ppp/options.pptpd

lock

name pptpd

nodeflate
nobsdcomp

auth
+chap
+mschap-v2
+mschap

-pap
nomppe
silent

ms-dns 10.10.10.10
plugin /usr/lib/pppd/2.4.4/radius.so

/etc/raddb/radiusd.conf

prefix = /usr
exec_prefix = ${prefix}
sysconfdir = /etc
localstatedir = /var
sbindir = ${exec_prefix}/sbin
logdir = ${localstatedir}/log/radius
raddbdir = ${sysconfdir}/raddb
radacctdir = ${logdir}/radacct
confdir = ${raddbdir}
run_dir = ${localstatedir}/run/radiusd
log_file = ${logdir}/radius.log
libdir = /usr/lib
pidfile = ${run_dir}/radiusd.pid
user = radiusd
group = radiusd
max_request_time = 30
delete_blocked_requests = no
cleanup_delay = 5
max_requests = 5120
bind_address = *
port = 0
hostname_lookups = no
allow_core_dumps = no
regular_expressions     = yes
extended_expressions    = yes
log_stripped_names = no
log_auth = yes
log_auth_badpass = yes
log_auth_goodpass = no
usercollide = no
lower_user = no
lower_pass = no
nospace_user = no
nospace_pass = no
checkrad = ${sbindir}/checkrad
security {
	max_attributes = 200
	reject_delay = 1
	status_server = no
}
 $INCLUDE  ${confdir}/clients.conf
snmp=no
$INCLUDE  ${confdir}/snmp.conf
thread pool {
	start_servers = 5
	max_servers = 32
	min_spare_servers = 3
	max_spare_servers = 10

	max_requests_per_server = 0
}
modules {

	pap {
                encryption_scheme = clear
	}

	chap {
		authtype = CHAP
	}

	pam {

		pam_auth = radiusd
	}
        preprocess {
                huntgroups = ${confdir}/huntgroups
                hints = ${confdir}/hints
                with_cisco_vsa_hack = no
        }

        mschap {
                authtype = MS-CHAP
                use_mppe = no
        }

        detail {
                detailfile = ${radacctdir}/%{Client-IP-Address}/detail-%Y%m%d
                detailperm = 0600
        }

        detail auth_log {
                detailfile = ${radacctdir}/%{Client-IP-Address}/auth-detail-%Y%m%d
                detailperm = 0600
        }

        detail reply_log {
                detailfile = ${radacctdir}/%{Client-IP-Address}/reply-detail-%Y%m%d
                detailperm = 0600
        }

        acct_unique {
                key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port-Id"
        }

        $INCLUDE  ${confdir}/pssbiling.conf

}

authorize {
        preprocess
        chap
        mschap
        auth_log
	pssbiling
}

authenticate {
            
	Auth-Type PAP {
		pap
	}
	Auth-Type CHAP {
		chap
	}
	Auth-Type MS-CHAP {
		mschap
	}
}

preacct {
	preprocess
}

accounting {
        acct_unique
        detail
	pssbiling
}

post-auth {
        reply_log
}

/etc/pptpd.conf

option /etc/ppp/options.pptpd
localip 192.168.0.1
remoteip 192.168.9.2-254

/etc/raddb/pssbiling.conf

sql pssbiling{
        driver = "rlm_sql_mysql"
        server = "localhost"
        login = "login"
        password = "pass"
        sqltrace = yes
        sqltracefile = /var/log/radius/sqltrace.sql
        num_sql_socks = 5
        sql_user_name = "%{User-Name}"

        authorize_check_query = "call authUser('%{SQL-User-Name}')"

        authorize_reply_query = ""
}

поигрался... но хотелось бы полностью с базой работать, в этом билинге мне кажется файл с паролями генерируется... что не оч хорошо...

чую приддется в постгрес писать все...