Config FreeRadius (3.0.16) to work with SQL: The Guide is outdated - please helps

Alan DeKok aland at deployingradius.com
Fri Sep 28 20:27:41 CEST 2018


On Sep 28, 2018, at 2:12 PM, James Ngo <james.ngobui at gmail.com> wrote:
> 
> Hi Alan,
> You are absolutely right about the log file and I am sorry to be bothering
> you again. I copy the content of my system log file of the issue below  for
> your reference (My other test user which use the "user" file works OK).


...

> (7) eap_peap: Got tunneled request
> (7) eap_peap:   EAP-Message =
> 0x022300411a0223003c31cc0432c71245051a187bd13655a9e34a0000000000000000721615e15d5ae620467f9822441958a6f7be55128b39b716006a616d65736e
> (7) eap_peap: Setting User-Name to jamesn
> (7) eap_peap: Sending tunneled request to inner-tunnel

  That's the MS-CHAP stuff from PEAP, inside of the TLS tunnel.

> (7) sql: EXPAND %{User-Name}
> (7) sql:    --> testuser1
> (7) sql: SQL-User-Name set to 'testuser1'
> rlm_sql (sql): Reserved connection (1)
> (7) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck
> WHERE username = '%{SQL-User-Name}' ORDER BY id
> (7) sql:    --> SELECT id, username, attribute, value, op FROM radcheck
> WHERE username = 'testuser1' ORDER BY id
> (7) sql: Executing select query: SELECT id, username, attribute, value, op
> FROM radcheck WHERE username = 'testuser1' ORDER BY id
> (7) sql: EXPAND SELECT groupname FROM radusergroup WHERE username =
> '%{SQL-User-Name}' ORDER BY priority
> (7) sql:    --> SELECT groupname FROM radusergroup WHERE username =
> 'testuser1' ORDER BY priority
> (7) sql: Executing select query: SELECT groupname FROM radusergroup WHERE
> username = 'testuser1' ORDER BY priority
> (7) sql: User not found in any groups
> rlm_sql (sql): Released connection (1)
> Need 4 more connections to reach 10 spares
> rlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots used
> (7)       [sql] = notfound

  That's definitive.

  The "testuser1" isn't in SQL.

  Run the queries manually to see what they return.

  Alan DeKok.




More information about the Freeradius-Users mailing list