Freeradius denies auth when "Framed-IP-Address" set

Nicolas Baradakis nbk at sitadelle.com
Wed Aug 24 18:46:17 CEST 2005


Gerret Apelt wrote:

> I am now trying to have FreeRadius also assign IP Address and Netmask to a
> subset of the user accounts, and that's where I'm getting stuck.

[...]

> This issue goes away as soon as I delete rows with id 1343 and 1344 below:
>
> mysql> select id, username, attribute, value, op from login_accounts
> where username='gerret';
> +------+----------+-------------------+----+---------------+
> | id   | username | attribute         | op | value         |
> +------+----------+-------------------+----+---------------+
> |  414 | gerret   | User-Password     | == | testme        |
> | 1343 | gerret   | Framed-IP-Address | == | 65.166.58.202 |
> | 1344 | gerret   | Framed-IP-Netmask | == | 255.255.254.0 |
> +------+----------+-------------------+----+---------------+
> 
> When running in full debug mode, FreeRadius outputs the exact queries
> it fires at the database. I have run these queries manually: the
> 'authorize_check_query' returns the three rows listed above. All
> other queries return the empty set.

'Framed-IP-Address' is a reply item and should be in the authreply_table
table. (and not authcheck_table)

-- 
Nicolas Baradakis




More information about the Freeradius-Users mailing list