Group checking - Radius AVP retrieval

Lenir lenirsantiago at yahoo.com
Sat Oct 15 00:20:08 CEST 2005


Yup, that did it!!!

Thanks Alan!!

-----Original Message-----
From: freeradius-users-bounces at lists.freeradius.org
[mailto:freeradius-users-bounces at lists.freeradius.org] On Behalf Of Alan
DeKok
Sent: Friday, October 14, 2005 4:51 PM
To: lsantiago at globalgatewaycom.com; FreeRadius users mailing list
Subject: Re: Group checking - Radius AVP retrieval 

<lenirsantiago at yahoo.com> wrote:
> These are mysql tables:
> 
> +----+----------+-----------+----+----------+
> | id | UserName | Attribute | op | Value    |
> +----+----------+-----------+----+----------+
> |  1 | Jhassell | Password  | == | changeme |

  Use := rather than ==.  See the rlm_sql documentation.

> |  8 | 1000     | Auth-Type | := | Digest   |
> +----+----------+-----------+----+----------+

  This forces digest authentication, even if they don't use digest.

  Don't set Auth-Type unless you REALLY know what you're doing.

> rad_recv: Access-Request packet from host xx.xx.xx.xx:33025, id=15,
> length=67
>         User-Name = "1000 at xx.xx.xx.xx"
>         Sip-Group = "Dialin2"
>         Service-Type = Group-Check
>         NAS-IP-Address = 127.0.0.1
>         NAS-Port = 0

  There's no User-password *or* digest attributes in the packet, so
you can't do PAP or digest authentication.

  If you don't set Auth-type := Digest, it looks like it might work.

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html





More information about the Freeradius-Users mailing list