<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=big5">
<META content="MSHTML 6.00.2900.2722" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Seeing your output, it says that it's failing
because "post-auth" module is failing due to the fail of the "sql" module
invoked. Lookup your radiusd.conf file, and see why you are using sql in
post-auth, and see if this setup is correct.</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=wilson.lie@ithlgroup.com
href="mailto:wilson.lie@ithlgroup.com">Wilson Lie</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=freeradius-users@lists.freeradius.org
href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Wednesday, September 21, 2005 5:58
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> cannot return access accept from
proxy to client</DIV>
<DIV><BR></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana size=2>Hi
all,</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana size=2>I encountered a
problem during authentication request. Would you give me a hand
?</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana size=2>Many
thanks!</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana
size=2>Configuration:</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana size=2>Host
A ( Radius server)</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana size=2>Host
B ( proxy all requests to host A )</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana
size=2>Problem:</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana size=2>1)
Access-Request is sent to Host B from client</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana size=2>2) Host B proxy
request to Host A</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana size=2>3) Host A sends
Access-Accept to Host B</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana size=2>4) Host B
receive Access-Accept from Host A</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana size=2>5)
Host B sends Access-Reject to client ( log
message comes below)</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><SPAN class=421134708-21092005><FONT
face=Verdana size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN class=421134708-21092005><SPAN class=421134708-21092005><FONT
face=Verdana size=2>*My question is how can I set radius such that it can send
the access-accept to client ?</FONT></SPAN></DIV></SPAN>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana
size=2>================================================================</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana size=2>rad_recv:
Access-Accept packet from host xxx.xxx.xxx.xxx:1812, id=3,
length=156<BR></FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana size=2>Processing the
authorize section of radiusd.conf<BR>modcall: entering group authorize for
request 3<BR> hints: Matched DEFAULT at 81<BR> modcall[authorize]:
module "preprocess" returns ok for request 3<BR>radius_xlat:
'/usr/local/var/log/radius/radacct/xxx.xxx.xxx.xxx/auth-detail-20050921'<BR>rlm_detail:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d
expands to
/usr/local/var/log/radius/radacct/xxx.xxx.xxx.xxx/auth-detail-20050921<BR>
modcall[authorize]: module "auth_log" returns ok for request
3<BR> rlm_realm: Proxy reply, or no User-Name.
Ignoring.<BR> modcall[authorize]: module "suffix" returns noop for
request 3<BR> users: Matched entry DEFAULT at line
168<BR> modcall[authorize]: module "files" returns ok for request
3<BR>modcall: group authorize returns ok for request 3<BR>
rad_check_password: Found Auth-Type SQL<BR> rad_check_password:
Auth-Type = Accept, accepting the user<BR>Login OK: [99009900@realm/8F4Lf0T]
(from client ivrs port 0 cli 00-0C-41-2F-00-71)<BR> Processing the
post-auth section of radiusd.conf<BR>modcall: entering group post-auth for
request 3<BR>radius_xlat:
'/usr/local/var/log/radius/radacct/xxx.xxx.xxx.xxx/reply-detail-20050921'<BR>rlm_detail:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d
expands to
/usr/local/var/log/radius/radacct/xxx.xxx.xxx.xxx/reply-detail-20050921<BR>
modcall[post-auth]: module "reply_log" returns ok for request 3<BR>rlm_sql
(sql): Processing sql_postauth<BR>radius_xlat: ''<BR>
modcall[post-auth]: module "sql" returns fail for request 3<BR>modcall: group
post-auth returns fail for request 3<BR>Delaying request 3 for 1
seconds<BR>Finished request
3<BR>=======================================================================</FONT></SPAN></DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=421134708-21092005><FONT face=Verdana
size=2></FONT></SPAN> </DIV><FONT face=arial
size=1><BR> <BR> <BR>___________________________________________________<BR>(c)
2005 Interactive Technology Holdings Limited Group.<BR>All rights
reserved.<BR><BR>CONFIDENTIALITY: This communication and any
attachment(s)<BR>is intended solely for the person or organisation to
which<BR>it is addressed and it may be confidential. This<BR>communication may
contain confidential or legally privileged<BR>material and may not be copied,
redistributed or published<BR>(in whole or in part) without our prior written
consent.<BR>This communication may have been intercepted,
partially<BR>destroyed, arrive late, incomplete or contain viruses and
no<BR>liability is accepted by any member of the Interactive<BR>Technology
Holdings Limited Group as a result. If you are<BR>not the intended recipient,
employee or agent responsible<BR>for delivering the message to the intended
recipient you<BR>must not copy, disclose, distribute or take any action
in<BR>reliance on it. If you have received this communication in<BR>error,
please immediately reply and highlight the error to<BR>the sender immediately
and destroy the original from your<BR>computer.</FONT><BR>
<P>
<HR>
<P></P>- <BR>List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html</BLOCKQUOTE></BODY></HTML>