<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16643" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I am struggling to get freeradius-2.0.3 to work
with mysql-5.1.24 on a FreeBSD-7.0 machine.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Basic PAP auth is working so radiusd is running
fine.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Below is the 'radiusd -X' output when I did a
'radtest joy happy localhost 1812 testing123'</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>
<DIV><FONT face=Arial size=2>I notice when running 'radiusd -X' that no module
rlm_sql_mysql was loaded. Is that a problem?</FONT></DIV>
<DIV><FONT face=Arial size=2>How do I resolve it?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>Thanks,</FONT></DIV>
<DIV><FONT face=Arial size=2>-Marcus</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>-------------------------------------</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>FreeRADIUS Version 2.0.3, for host
amd64-portbld-freebsd7.0, built on May 13 2008 at 14:48:48<BR>Copyright (C)
1999-2008 The FreeRADIUS server project and contributors. <BR>There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A <BR>PARTICULAR PURPOSE.
<BR>You may redistribute copies of FreeRADIUS under the terms of the <BR>GNU
General Public License. <BR>Starting - reading configuration files
...<BR>including configuration file
/usr/local/etc/raddb/radiusd.conf<BR>including configuration file
/usr/local/etc/raddb/proxy.conf<BR>including configuration file
/usr/local/etc/raddb/clients.conf<BR>including configuration file
/usr/local/etc/raddb/snmp.conf<BR>including configuration file
/usr/local/etc/raddb/eap.conf<BR>including configuration file
/usr/local/etc/raddb/sql.conf<BR>including configuration file
/usr/local/etc/raddb/sql/mysql/dialup.conf<BR>including configuration file
/usr/local/etc/raddb/sql/mysql/counter.conf<BR>including configuration file
/usr/local/etc/raddb/policy.conf<BR>including files in directory
/usr/local/etc/raddb/sites-enabled/<BR>including configuration file
/usr/local/etc/raddb/sites-enabled/default<BR>including configuration file
/usr/local/etc/raddb/sites-enabled/inner-tunnel<BR>including dictionary file
/usr/local/etc/raddb/dictionary<BR>main {<BR> prefix =
"/usr/local"<BR> localstatedir = "/var"<BR> logdir =
"/var/log"<BR> libdir = "/usr/local/lib"<BR> radacctdir =
"/var/log/radacct"<BR> hostname_lookups = no<BR> max_request_time =
30<BR> cleanup_delay = 5<BR> max_requests =
1024<BR> allow_core_dumps = no<BR> pidfile =
"/var/run/radiusd/radiusd.pid"<BR> user = "freeradius"<BR> group =
"freeradius"<BR> checkrad = "/usr/local/sbin/checkrad"<BR> debug_level
= 0<BR> proxy_requests = yes<BR> security {<BR> max_attributes =
200<BR> reject_delay = 1<BR> status_server =
yes<BR> }<BR>}<BR> client localhost {<BR> ipaddr =
127.0.0.1<BR> require_message_authenticator = no<BR> secret =
"testing123"<BR> nastype = "other"<BR> }<BR>radiusd: #### Loading
Realms and Home Servers ####<BR> proxy server {<BR> retry_delay =
5<BR> retry_count = 3<BR> default_fallback = no<BR> dead_time =
120<BR> wake_all_if_all_dead = no<BR> }<BR> home_server localhost
{<BR> ipaddr = 127.0.0.1<BR> port = 1812<BR> type =
"auth"<BR> secret = "testing123"<BR> response_window =
20<BR> max_outstanding = 65536<BR> zombie_period =
40<BR> status_check = "status-server"<BR> ping_check =
"none"<BR> ping_interval = 30<BR> check_interval =
30<BR> num_answers_to_alive = 3<BR> num_pings_to_alive =
3<BR> revive_interval = 120<BR> status_check_timeout =
4<BR> }<BR> home_server_pool my_auth_failover {<BR> type =
fail-over<BR> home_server = localhost<BR> }<BR> realm example.com
{<BR> auth_pool = my_auth_failover<BR> }<BR> realm LOCAL
{<BR> }<BR>radiusd: #### Instantiating modules ####<BR> instantiate
{<BR> Module: Linked to module rlm_exec<BR> Module: Instantiating
exec<BR> exec {<BR> wait = yes<BR> input_pairs =
"request"<BR> shell_escape = yes<BR> }<BR> Module: Linked to
module rlm_expr<BR> Module: Instantiating expr<BR> Module: Linked to
module rlm_expiration<BR> Module: Instantiating expiration<BR>
expiration {<BR> reply-message = "Password Has Expired "<BR>
}<BR> Module: Linked to module rlm_logintime<BR> Module: Instantiating
logintime<BR> logintime {<BR> reply-message = "You are calling
outside your allowed timespan "<BR> minimum-timeout = 60<BR>
}<BR> }<BR>radiusd: #### Loading Virtual Servers ####<BR>server
inner-tunnel {<BR> modules {<BR> Module: Checking authenticate {...}
for more modules to load<BR> Module: Linked to module
rlm_pap<BR> Module: Instantiating pap<BR> pap
{<BR> encryption_scheme = "auto"<BR> auto_header = no<BR>
}<BR> Module: Linked to module rlm_chap<BR> Module: Instantiating
chap<BR> Module: Linked to module rlm_mschap<BR> Module: Instantiating
mschap<BR> mschap {<BR> use_mppe = yes<BR> require_encryption =
no<BR> require_strong = no<BR> with_ntdomain_hack = no<BR>
}<BR> Module: Linked to module rlm_unix<BR> Module: Instantiating
unix<BR> unix {<BR> radwtmp = "/var/log/radwtmp"<BR>
}<BR> Module: Linked to module rlm_eap<BR> Module: Instantiating
eap<BR> eap {<BR> default_eap_type = "md5"<BR> timer_expire =
60<BR> ignore_unknown_eap_types = no<BR> cisco_accounting_username_bug
= no<BR> }<BR> Module: Linked to sub-module
rlm_eap_md5<BR> Module: Instantiating eap-md5<BR> Module: Linked to
sub-module rlm_eap_leap<BR> Module: Instantiating eap-leap<BR> Module:
Linked to sub-module rlm_eap_gtc<BR> Module: Instantiating
eap-gtc<BR> gtc {<BR> challenge = "Password:
"<BR> auth_type = "PAP"<BR> }<BR> Module: Linked to
sub-module rlm_eap_tls<BR> Module: Instantiating eap-tls<BR>
tls {<BR> rsa_key_exchange = no<BR> dh_key_exchange =
yes<BR> rsa_key_length = 512<BR> dh_key_length =
512<BR> verify_depth = 0<BR> pem_file_type =
yes<BR> private_key_file =
"/usr/local/etc/raddb/certs/server.pem"<BR> certificate_file =
"/usr/local/etc/raddb/certs/server.pem"<BR> CA_file =
"/usr/local/etc/raddb/certs/ca.pem"<BR> private_key_password =
"whatever"<BR> dh_file =
"/usr/local/etc/raddb/certs/dh"<BR> random_file =
"/usr/local/etc/raddb/certs/random"<BR> fragment_size =
1024<BR> include_length = yes<BR> check_crl = no<BR> cipher_list
= "DEFAULT"<BR> make_cert_command =
"/usr/local/etc/raddb/certs/bootstrap"<BR> }<BR> Module: Linked
to sub-module rlm_eap_ttls<BR> Module: Instantiating
eap-ttls<BR> ttls {<BR> default_eap_type =
"md5"<BR> copy_request_to_tunnel = no<BR> use_tunneled_reply =
no<BR> virtual_server = "inner-tunnel"<BR> }<BR> Module:
Linked to sub-module rlm_eap_peap<BR> Module: Instantiating
eap-peap<BR> peap {<BR> default_eap_type =
"mschapv2"<BR> copy_request_to_tunnel = no<BR> use_tunneled_reply =
no<BR> proxy_tunneled_request_as_eap = yes<BR> virtual_server =
"inner-tunnel"<BR> }<BR> Module: Linked to sub-module
rlm_eap_mschapv2<BR> Module: Instantiating eap-mschapv2<BR>
mschapv2 {<BR> with_ntdomain_hack = no<BR> }<BR> Module:
Checking authorize {...} for more modules to load<BR> Module: Linked to
module rlm_realm<BR> Module: Instantiating suffix<BR> realm suffix
{<BR> format = "suffix"<BR> delimiter = "@"<BR> ignore_default =
no<BR> ignore_null = no<BR> }<BR> Module: Linked to module
rlm_files<BR> Module: Instantiating files<BR> files
{<BR> usersfile = "/usr/local/etc/raddb/users"<BR> acctusersfile =
"/usr/local/etc/raddb/acct_users"<BR> preproxy_usersfile =
"/usr/local/etc/raddb/preproxy_users"<BR> compat = "no"<BR>
}<BR> Module: Checking session {...} for more modules to
load<BR> Module: Linked to module rlm_radutmp<BR> Module:
Instantiating radutmp<BR> radutmp {<BR> filename =
"/var/log/radutmp"<BR> username = "%{User-Name}"<BR> case_sensitive =
yes<BR> check_with_nas = yes<BR> perm = 384<BR> callerid =
yes<BR> }<BR> Module: Checking post-proxy {...} for more modules to
load<BR> Module: Checking post-auth {...} for more modules to
load<BR> Module: Linked to module rlm_attr_filter<BR> Module:
Instantiating attr_filter.access_reject<BR> attr_filter
attr_filter.access_reject {<BR> attrsfile =
"/usr/local/etc/raddb/attrs.access_reject"<BR> key =
"%{User-Name}"<BR> }<BR> }<BR>}<BR>server {<BR> modules
{<BR> Module: Checking authenticate {...} for more modules to
load<BR> Module: Checking authorize {...} for more modules to
load<BR> Module: Linked to module rlm_preprocess<BR> Module:
Instantiating preprocess<BR> preprocess {<BR> huntgroups =
"/usr/local/etc/raddb/huntgroups"<BR> hints =
"/usr/local/etc/raddb/hints"<BR> with_ascend_hack =
no<BR> ascend_channels_per_line = 23<BR> with_ntdomain_hack =
no<BR> with_specialix_jetstream_hack = no<BR> with_cisco_vsa_hack =
no<BR> with_alvarion_vsa_hack = no<BR> }<BR> Module: Checking
preacct {...} for more modules to load<BR> Module: Linked to module
rlm_acct_unique<BR> Module: Instantiating acct_unique<BR> acct_unique
{<BR> key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address,
NAS-Port"<BR> }<BR> Module: Checking accounting {...} for more
modules to load<BR> Module: Linked to module rlm_detail<BR> Module:
Instantiating detail<BR> detail {<BR> detailfile =
"/var/log/radacct/%{Client-IP-Address}/detail-%Y%m%d"<BR> header =
"%t"<BR> detailperm = 384<BR> dirperm = 493<BR> locking =
no<BR> log_packet_header = no<BR> }<BR> Module: Instantiating
attr_filter.accounting_response<BR> attr_filter
attr_filter.accounting_response {<BR> attrsfile =
"/usr/local/etc/raddb/attrs.accounting_response"<BR> key =
"%{User-Name}"<BR> }<BR> Module: Checking session {...} for more
modules to load<BR> Module: Checking post-proxy {...} for more modules to
load<BR> Module: Checking post-auth {...} for more modules to
load<BR> }<BR>}<BR>radiusd: #### Opening IP addresses and Ports
####<BR>listen {<BR> type = "auth"<BR> ipaddr = *<BR> port =
0<BR>}<BR>listen {<BR> type = "acct"<BR> ipaddr = *<BR> port =
0<BR>}<BR>Listening on authentication address * port 1812<BR>Listening on
accounting address * port 1813<BR>Listening on proxy address * port
1814<BR>Ready to process requests.<BR> User-Name =
"joy"<BR> User-Password = "happy"<BR> NAS-IP-Address =
123.242.231.112<BR> NAS-Port = 1812<BR>+- entering group
authorize<BR>++[preprocess] returns ok<BR>++[chap] returns noop<BR>++[mschap]
returns noop<BR> rlm_realm: No <A href="mailto:'@'">'@'</A> in
User-Name = "joy", looking up realm NULL<BR> rlm_realm: No
such realm "NULL"<BR>++[suffix] returns noop<BR> rlm_eap: No EAP-Message,
not doing EAP<BR>++[eap] returns noop<BR>++[unix] returns notfound<BR>++[files]
returns noop<BR>++[expiration] returns noop<BR>++[logintime] returns
noop<BR>rlm_pap: WARNING! No "known good" password found for the user.
Authentication may fail because of this.<BR>++[pap] returns noop<BR>auth: No
authenticate method (Auth-Type) configuration found for the request: Rejecting
the user<BR>auth: Failed to validate the user.<BR>Login incorrect: [joy/happy]
(from client localhost port 1812)<BR> Found Post-Auth-Type Reject<BR>+-
entering group REJECT<BR> expand: %{User-Name} ->
joy<BR> attr_filter: Matched entry DEFAULT at line
11<BR>++[attr_filter.access_reject] returns updated<BR>Delaying reject of
request 0 for 1 seconds<BR>Going to the next request<BR>Waking up in 0.9
seconds.<BR>Sending delayed reject for request 0<BR>Waking up in 4.9
seconds.<BR></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV></BODY></HTML>