<div class="gmail_quote">On Fri, Feb 20, 2009 at 9:12 AM, <span dir="ltr"><<a href="mailto:tnt@kalik.net">tnt@kalik.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">>i didn't force any authentication, I left the users file by default, when i<br>
>tried to login i got this:<br>
><br>
</div>..<br>
>++[files] returns noop<br>
<br>
OK. Files are empty now. But ...<br>
<div class="Ih2E3d"><br>
> expand: %{User-Name} -> juanpal<br>
>rlm_sql (sql): sql_set_user escaped user --> 'juanpal'<br>
>rlm_sql (sql): Reserving sql socket id: 1<br>
> expand: SELECT id, UserName, Attribute, Value, op FROM<br>
>radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id<br>
>-> SELECT id, UserName, Attribute, Value, op FROM<br>
>radcheck WHERE Username = 'juanpal' ORDER BY id<br>
>rlm_sql (sql): User found in radcheck table<br>
<br>
</div>.. this should be the password. And ...<br>
<br>
..<br>
<div class="Ih2E3d">>++[sql] returns ok<br>
>auth: No authenticate method (Auth-Type) configuration found for the<br>
>request: Rejecting the user<br>
>auth: Failed to validate the user.<br>
<br>
</div>.. no pap module. Why did you remove the pap from authorize? Put it back.</blockquote><div><br>I Put pap in authorize section in radius.conf.<br>I got this:<br><br>rad_recv: Access-Request packet from host 127.0.0.1 port 32770, id=32, length=212<br>
Vendor-14559-Attr-8 = 0x312e302e3132<br> User-Name = "juanpal"<br> User-Password = "juanpal"<br> NAS-IP-Address = 192.168.181.1<br> Service-Type = Login-User<br> Framed-IP-Address = 192.168.181.2<br>
Calling-Station-Id = "08-00-27-0A-F7-67"<br> Called-Station-Id = "08-00-27-C0-08-85"<br> NAS-Identifier = "nas01"<br> Acct-Session-Id = "499e742800000001"<br>
NAS-Port-Type = Wireless-802.11<br> NAS-Port = 1<br> WISPr-Logoff-URL = "<a href="http://192.168.181.1:3990/logoff">http://192.168.181.1:3990/logoff</a>"<br> Message-Authenticator = 0x0e0a63b0ee1fb9a95992d227586a9090<br>
+- entering group authorize<br>++[preprocess] returns ok<br> expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/<a href="http://127.0.0.1/auth-detail-20090220">127.0.0.1/auth-detail-20090220</a><br>
rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/<a href="http://127.0.0.1/auth-detail-20090220">127.0.0.1/auth-detail-20090220</a><br> expand: %t -> Fri Feb 20 04:24:43 2009<br>
++[auth_log] returns ok<br> expand: %{Realm} -><br>++[attr_filter] returns noop<br>++[chap] returns noop<br>++[mschap] returns noop<br> rlm_realm: No '@' in User-Name = "juanpal", looking up realm NULL<br>
rlm_realm: No such realm "NULL"<br>++[suffix] returns noop<br> rlm_eap: No EAP-Message, not doing EAP<br>++[eap] returns noop<br>++[files] returns noop<br> expand: %{User-Name} -> juanpal<br>rlm_sql (sql): sql_set_user escaped user --> 'juanpal'<br>
rlm_sql (sql): Reserving sql socket id: 3<br> expand: SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'juanpal' ORDER BY id<br>
rlm_sql (sql): User found in radcheck table<br> expand: SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'juanpal' ORDER BY id<br>
expand: SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}' -> SELECT GroupName FROM usergroup WHERE UserName='juanpal'<br>rlm_sql (sql): Released sql socket id: 3<br>++[sql] returns ok<br>
rlm_pap: Normalizing MD5-Password from hex encoding<br>++[pap] returns updated<br> rad_check_password: Found Auth-Type<br>auth: type "PAP"<br>+- entering group PAP<br>rlm_pap: login attempt with password "juanpal"<br>
rlm_pap: No password configured for the user. Cannot do authentication<br>++[pap] returns fail<br>auth: Failed to validate the user.<br>Login incorrect: [juanpal/juanpal] (from client localhost port 1 cli 08-00-27-0A-F7-67)<br>
Delaying reject of request 0 for 1 seconds<br>Going to the next request<br>Waking up in 0.9 seconds.<br>Sending delayed reject for request 0<br>Sending Access-Reject of id 32 to 127.0.0.1 port 32770<br> Session-Timeout := 2400<br>
<br> <br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><br>
<div><div></div><div class="Wj3C7c"><br>
Ivan Kalik<br>
Kalik Informatika ISP<br>
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Juan Pablo Botero<br>Administrador de Sistemas informáticos<br><a href="http://jpill.wordpress.com">http://jpill.wordpress.com</a><br>eSSuX: <a href="http://slcolombia.org/eSSuX">http://slcolombia.org/eSSuX</a><br>
Linux Registered user #435293<br>