Hi,<div><br></div><div>I'm trying to upgrade my setup from freeradius 1 to freeradius 2.</div><div><br></div><div>I've been making little changes to the config as suggested in the doc and I managed to get my setup connecting to my mssql backend. However, when I try and authorize with a user/pass, I get an error - actually more of a warning. I've Googled about but although others have had this error I haven't really seen a good explanation of why it occurs let alone how to solve.</div>
<div><br></div><div>The warning is...</div><div><br></div><div><div>rad_recv: Access-Request packet from host 10.152.0.7 port 20001, id=16, length=168</div><div> NAS-IP-Address = 10.152.0.7</div><div> User-Name = "999999999"</div>
<div> User-Password = "999999999"</div><div> Service-Type = Login-User</div><div> NAS-Port-Type = Async</div><div> Calling-Station-Id = "1002"</div><div> Quintum-h323-conf-id = "h323-conf-id=34616537 32353264 62350001 00080000"</div>
<div> Quintum-AVPair = "h323-ivr-out=ACCESSCODE:990006"</div><div>+- entering group authorize {...}</div><div>++[preprocess] returns ok</div><div>++[chap] returns noop</div><div>[suffix] No '@' in User-Name = "999999999", looking up realm NULL</div>
<div>[suffix] No such realm "NULL"</div><div>++[suffix] returns noop</div><div>[eap] No EAP-Message, not doing EAP</div><div>++[eap] returns noop</div><div>++[unix] returns notfound</div><div>++[files] returns noop</div>
<div>[sql] expand: %{User-Name} -> 999999999</div><div>[sql] sql_set_user escaped user --> '999999999'</div></div><div><div>rlm_sql (sql): Reserving sql socket id: 4</div><div>[sql] expand: SELECT [id], UserName, Attribute, [Value], op FROM dbo.Rad_Authorize_User_Check('%{SQL-User-Name}') -> SELECT [id], UserName, Attribute, [Value], op FROM dbo.Rad_Authorize_User_Check('999999999')</div>
<div>query: SELECT [id], UserName, Attribute, [Value], op FROM dbo.Rad_Authorize_User_Check('999999999')</div><div>WARNING: Found User-Password == "...".</div><div>WARNING: Are you sure you don't mean Cleartext-Password?</div>
<div>WARNING: See "man rlm_pap" for more information.</div><div>[sql] User found in radcheck table</div><div>rlm_sql (sql): Released sql socket id: 4</div><div>++[sql] returns ok</div><div>++[expiration] returns noop</div>
<div>++[logintime] returns noop</div><div>++[pap] returns updated</div><div>Found Auth-Type = PAP</div><div>!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!</div><div>!!! Replacing User-Password in config items with Cleartext-Password. !!!</div>
<div>!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!</div><div>!!! Please update your configuration so that the "known good" !!!</div><div>!!! clear text password is in Cleartext-Password, and not in User-Password. !!!</div>
<div>!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!</div><div>+- entering group PAP {...}</div><div>[pap] login attempt with password "999999999"</div><div>[pap] Using clear text password "999999999"</div>
<div>[pap] User authenticated successfully</div><div>++[pap] returns ok</div><div>Login OK: [999999999] (from client 10.152.0.7 port 0 cli 1002)</div><div>+- entering group post-auth {...}</div><div>++[exec] returns noop</div>
<div>Sending Access-Accept of id 16 to 10.152.0.7 port 20001</div><div>Finished request 0.</div><div><br></div><div><br></div><div>Although the last line there says 'Sending Access-Accept', I do not get authorized at the NAS end.</div>
<div><br></div><div>Here's how things play out on my old version 1 setup....</div><div><br></div><div><div>rad_recv: Access-Request packet from host <a href="http://10.152.0.7:20001">10.152.0.7:20001</a>, id=31, length=168</div>
<div> NAS-IP-Address = 10.152.0.7</div><div> User-Name = "999999999"</div><div> User-Password = "999999999"</div><div> Service-Type = Login-User</div><div> NAS-Port-Type = Async</div>
<div> Calling-Station-Id = "1002"</div><div> Quintum-h323-conf-id = "h323-conf-id=34616537 32383034 62640001 00080000"</div><div> Quintum-AVPair = "h323-ivr-out=ACCESSCODE:990006"</div>
<div> Processing the authorize section of radiusd.conf</div><div>modcall: entering group authorize for request 0</div><div> modcall[authorize]: module "preprocess" returns ok for request 0</div><div> modcall[authorize]: module "chap" returns noop for request 0</div>
<div> modcall[authorize]: module "mschap" returns noop for request 0</div><div> rlm_realm: No '@' in User-Name = "999999999", looking up realm NULL</div><div> rlm_realm: No such realm "NULL"</div>
<div> modcall[authorize]: module "suffix" returns noop for request 0</div><div> rlm_eap: No EAP-Message, not doing EAP</div><div> modcall[authorize]: module "eap" returns noop for request 0</div><div>
users: Matched entry DEFAULT at line 152</div><div> modcall[authorize]: module "files" returns ok for request 0</div><div>radius_xlat: '999999999'</div><div>rlm_sql (sql): sql_set_user escaped user --> '999999999'</div>
<div>radius_xlat: 'SELECT [id], UserName, Attribute, [Value], op FROM dbo.Rad_Authorize_User_Check('999999999')'</div><div>rlm_sql (sql): Reserving sql socket id: 49</div><div>query: SELECT [id], UserName, Attribute, [Value], op FROM dbo.Rad_Authorize_User_Check('999999999')</div>
<div>radius_xlat: 'SELECT * FROM dbo.Rad_Group_Check('999999999')'</div><div>query: SELECT * FROM dbo.Rad_Group_Check('999999999')</div><div>radius_xlat: ''</div><div>radius_xlat: 'EXEC Rad_Authenticate @username = '999999999', @dialstring_from = '1002', @dialstring_to = '', @gw_session_id = '34616537 32383034 62640001 00080000', @ivr_out = 'h323-ivr-out=ACCESSCODE:990006', @gw_ip = '10.152.0.7', @call_origin = '', @gw_name = '' '</div>
<div>query: EXEC Rad_Authenticate @username = '999999999', @dialstring_from = '1002', @dialstring_to = '', @gw_session_id = '34616537 32383034 62640001 00080000', @ivr_out = 'h323-ivr-out=ACCESSCODE:990006', @gw_ip = '10.152.0.7', @call_origin = '', @gw_name = ''</div>
<div>rlm_sql (sql): Released sql socket id: 49</div><div> modcall[authorize]: module "sql" returns ok for request 0</div><div>modcall: leaving group authorize (returns ok) for request 0</div><div> rad_check_password: Found Auth-Type Local</div>
<div>auth: type Local</div><div>auth: user supplied User-Password matches local User-Password</div><div>Login OK: [999999999] (from client cms port 0 cli 1002)</div><div> Processing the post-auth section of radiusd.conf</div>
<div>modcall: entering group post-auth for request 0</div><div>rlm_sql (sql): Processing sql_postauth</div><div>radius_xlat: '999999999'</div><div>rlm_sql (sql): sql_set_user escaped user --> '999999999'</div>
<div> modcall[post-auth]: module "sql" returns noop for request 0</div><div>modcall: leaving group post-auth (returns noop) for request 0</div><div>Sending Access-Accept of id 31 to 10.152.0.7 port 20001</div><div>
h323-return-code = "h323-return-code=0"</div><div> h323-billing-model = "h323-billing-model=0"</div><div> h323-credit-amount = "h323-credit-amount=76.15"</div><div> h323-currency = "h323-currency=AUD"</div>
<div>Finished request 0</div><div><br></div></div><div><br></div><div>Thanks for any assistance,</div><div><br></div><div>Rob</div><div><br></div>
</div>