Multiple Authentication REALMS - I hope in Plain Text

[Shepherd, Dave]

Alan,

   Thanks for the advice;

	"As always, start with the default configuration: it works"

   As I've now got it working for my standard config. 

   However, I still seem to be getting the request marked as complete
after the authorize section:-

Thread 1 handling request 0, (1 handled so far)
Waking up in 5 seconds...
        User-Name = "unextest20"
        User-Password = "*****"
        Called-Station-Id = "**********"
rad_lowerpair:  User-Name now 'unextest20'
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok for request 0
    users: Matched DEFAULT at 21
  modcall[authorize]: module "files" returns ok for request 0
radius_xlat:  'unextest20'
rlm_sql (sql): sql_set_user escaped user --> 'unextest20'
radius_xlat:  'SELECT id, UserName, Attribute, Value, Op ??FROM radcheck
??WHERE Username = 'unextest20' ??ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 9
rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op
??FROM radcheck ??WHERE Username = 'unextest20' ??ORDER BY id
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: affected rows =
radius_xlat:  'SELECT radgroupcheck.id, radgroupcheck.GroupName,
??radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.Op ??FROM
radgroupcheck, usergroup ??WHERE usergroup.Username = 'unextest20' AND
usergroup.GroupName = radgroupcheck.GroupName ??ORDER BY
radgroupcheck.id'
rlm_sql_postgresql: query: SELECT radgroupcheck.id,
radgroupcheck.GroupName, ??radgroupcheck.Attribute,
radgroupcheck.Value,radgroupcheck.Op ??FROM radgroupcheck, usergroup
??WHERE usergroup.Username = 'unextest20' AND usergroup.GroupName =
radgroupcheck.GroupName ??ORDER BY radgroupcheck.id
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: affected rows =
radius_xlat:  'SELECT id, UserName, Attribute, Value, Op ??FROM radreply
??WHERE Username = 'unextest20' ??ORDER BY id'
rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op
??FROM radreply ??WHERE Username = 'unextest20' ??ORDER BY id
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: affected rows =
radius_xlat:  'SELECT radgroupreply.id, radgroupreply.GroupName,
radgroupreply.Attribute, ??radgroupreply.Value, radgroupreply.Op ??FROM
radgroupreply,usergroup ??WHERE usergroup.Username = 'unextest20' AND
usergroup.GroupName = radgroupreply.GroupName ??ORDER BY
radgroupreply.id'
rlm_sql_postgresql: query: SELECT radgroupreply.id,
radgroupreply.GroupName, radgroupreply.Attribute, ??radgroupreply.Value,
radgroupreply.Op ??FROM radgroupreply,usergroup ??WHERE
usergroup.Username = 'unextest20' AND usergroup.GroupName =
radgroupreply.GroupName ??ORDER BY radgroupreply.id
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: affected rows =
rlm_sql (sql): Released sql socket id: 9
  modcall[authorize]: module "sql" returns ok for request 0
modcall: group authorize returns ok for request 0
Finished request 0

This only occurs when I match the following in my users file:

# NexUS RAS
DEFAULT Called-Station-Id == "********", Proxy-To-Realm := "sloxldap"
        Fall-Through = No

If I match on my other statements, the user authenticates as expected.

Any thoughts as to why this might be happening.

I'm on version 0.9.3.

TIA

Dave Shepherd

> -----Original Message-----
> From: freeradius-users-bounces at lists.freeradius.org
[mailto:freeradius-
> users-bounces at lists.freeradius.org] On Behalf Of Alan DeKok
> Sent: 14 June 2005 18:33
> To: FreeRadius users mailing list
> Subject: Re: Multiple Authentication REALMS - I hope in Plain Text
> 
> "Shepherd, Dave" <Dave.Shepherd at compass-group.co.uk> wrote:
> >     realm SPECIAL {
> >         type    = radius
> >         authhost        = LOCAL
> >         accthost        = LOCAL
> >     }
> 
>   In the latest versions, this is realm "LOCAL", but that doesn't make
> too much difference.
> 
> >         Auth-Type {
> >                 mschap
> >         }
> 
>   Are you sure?  How about "Auth-Type mschap {" ...
> 
> > modcall: group authorize returns updated for request 14
> > Finished request 14
> 
>   Hmm... something is marking the request as done, without calling the
> "authenticate" section.  I have no idea why, and I don't recall ever
> seeing anything like that.
> 
> > If one of you guys has had to do something similar, or can see any
> > glaring omissions in my config (which I seem to think there is)
could
> > you please point me in the right direction.
> 
>   As always, start with the default configuration: it works.
> 
>   Then, gradually add your edits, testing after every edit, to be sure
> that it still works.  Once you're done, you should have your local
> configuration , and it should still work.
> 
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html