<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<small>working(user from database):<br>
</small><small><br>
rad_recv: Access-Request packet from host 192.168.0.2 port 45023, id=7,
length=188<br>
Service-Type = Framed-User<br>
Framed-Protocol = PPP<br>
NAS-Port = 362<br>
NAS-Port-Type = Ethernet<br>
User-Name = "neptun"<br>
Calling-Station-Id = "00:21:00:11:90:58"<br>
Called-Station-Id = "service1"<br>
NAS-Port-Id = "bridge1"<br>
MS-CHAP-Challenge = 0x789a686362d46451ad1b12d6d1fecfb4<br>
MS-CHAP2-Response =
0x0100efef25766b55d6f212d5332ed21e16d70000000000000000ae2174f15545d09d57abb1befd659c8255b254db8f45bfc9<br>
NAS-Identifier = "MikroTik"<br>
NAS-IP-Address = 192.168.0.2<br>
+- entering group authorize {...}<br>
++[preprocess] returns ok<br>
[auth_log] expand:
/usr/local/radius/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d
-> /usr/local/radius/var/log/radius/rad<br>
[auth_log]
/usr/local/radius/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d
expands to /usr/local/radius/var/log/radius/radacct/<br>
[auth_log] expand: %t -> Wed Feb 10 17:45:13 2010<br>
++[auth_log] returns ok<br>
[mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap'<br>
++[mschap] returns ok<br>
[sql] expand: %{User-Name} -> neptun<br>
[sql] sql_set_user escaped user --> 'neptun'<br>
rlm_sql (sql): Reserving sql socket id: 12<br>
[sql] expand: call rad1('%{User-Name}'); -> call rad1('neptun');<br>
[sql] User found in radcheck table<br>
[sql] expand: call rad2('%{User-Name}'); -> call rad2('neptun');<br>
rlm_sql (sql): Released sql socket id: 12<br>
++[sql] returns ok<br>
Found Auth-Type = MSCHAP<br>
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br>
!!! Replacing User-Password in config items with
Cleartext-Password. !!!<br>
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br>
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br>
!!! Please update your configuration so that the "known
good" !!!<br>
!!! clear text password is in Cleartext-Password, and not in
User-Password. !!!<br>
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br>
+- entering group authenticate {...}<br>
[mschap] Told to do MS-CHAPv2 for neptun with NT-Password<br>
++[mschap] returns ok<br>
+- entering group session {...}<br>
++[sql] returns noop<br>
Login OK: [neptun/<via Auth-Type = mschap>] (from client router
port 362 cli 00:21:00:11:90:58)<br>
+- entering group post-auth {...}<br>
[sql] expand: %{User-Name} -> neptun<br>
[sql] sql_set_user escaped user --> 'neptun'<br>
[sql] expand: UPDATE nodes SET lastonline = unix_timestamp() WHERE
name='%{User-Name}' or mac='%{User-Name}'; -> UPDATE nodes SET
lastonline =<br>
rlm_sql (sql) in sql_postauth: query is UPDATE nodes SET lastonline =
unix_timestamp() WHERE name='neptun' or mac='neptun';<br>
rlm_sql (sql): Reserving sql socket id: 11<br>
rlm_sql (sql): Released sql socket id: 11<br>
++[sql] returns ok<br>
Sending Access-Accept of id 7 to 192.168.0.2 port 45023<br>
Framed-IP-Address == 192.168.4.201<br>
Framed-IP-Netmask == 255.255.255.255<br>
Mikrotik-Rate-Limit := "386k/3072k 0/3584k 0/1536k 0/25 8"<br>
MS-CHAP2-Success =
0x01533d45344637363346393230313246374145374641363036434630314632334336324230363831333338<br>
Finished request 1.<br>
Going to the next request<br>
Waking up in 4.9 seconds.<br>
rad_recv: Accounting-Request packet from host 192.168.0.2 port 59326,
id=8, length=146<br>
Service-Type = Framed-User<br>
Framed-Protocol = PPP<br>
NAS-Port = 362<br>
NAS-Port-Type = Ethernet<br>
User-Name = "neptun"<br>
Calling-Station-Id = "00:21:00:11:90:58"<br>
Called-Station-Id = "service1"<br>
NAS-Port-Id = "bridge1"<br>
Acct-Session-Id = "81400150"<br>
Framed-IP-Address = 192.168.4.201<br>
Acct-Authentic = RADIUS<br>
Event-Timestamp = "Feb 10 2010 17:45:14 CET"<br>
Acct-Status-Type = Start<br>
NAS-Identifier = "MikroTik"<br>
NAS-IP-Address = 192.168.0.2<br>
Acct-Delay-Time = 0<br>
+- entering group accounting {...}<br>
[sql] expand: %{User-Name} -> neptun<br>
[sql] sql_set_user escaped user --> 'neptun'<br>
[sql] expand: -><br>
rlm_sql (sql): Reserving sql socket id: 10<br>
rlm_sql (sql): Released sql socket id: 10<br>
++[sql] returns ok<br>
Sending Accounting-Response of id 8 to 192.168.0.2 port 59326<br>
Finished request 2.<br>
Cleaning up request 2 ID 8 with timestamp +2<br>
Going to the next request<br>
Waking up in 4.9 seconds.<br>
<br>
not working(alien user):<br>
rad_recv: Access-Request packet from host 192.168.0.2 port 57789,
id=234, length=189<br>
Service-Type = Framed-User<br>
Framed-Protocol = PPP<br>
NAS-Port = 353<br>
NAS-Port-Type = Ethernet<br>
User-Name = "someone"<br>
Calling-Station-Id = "00:21:00:11:90:58"<br>
Called-Station-Id = "service1"<br>
NAS-Port-Id = "bridge1"<br>
MS-CHAP-Challenge = 0xd74b24161391b697f91dee51eccb3898<br>
MS-CHAP2-Response =
0x010004148d0dcca8dba78110be592613bf9000000000000000008a03009aa6e54aaf8af8bdd6ca4e3f366fdeb668b11a8ce7<br>
NAS-Identifier = "MikroTik"<br>
NAS-IP-Address = 192.168.0.2<br>
+- entering group authorize {...}<br>
++[preprocess] returns ok<br>
[auth_log] expand:
/usr/local/radius/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d
-> /usr/local/radius/var/log/radius/radacct/192.168<br>
[auth_log]
/usr/local/radius/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d
expands to /usr/local/radius/var/log/radius/radacct/192.168.0.2/<br>
[auth_log] expand: %t -> Wed Feb 10 17:39:24 2010<br>
++[auth_log] returns ok<br>
[mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap'<br>
++[mschap] returns ok<br>
[sql] expand: %{User-Name} -> someone<br>
[sql] sql_set_user escaped user --> 'someone'<br>
rlm_sql (sql): Reserving sql socket id: 9<br>
[sql] expand: call rad1('%{User-Name}'); -> call rad1('someone');<br>
[sql] User found in radcheck table<br>
[sql] expand: call rad2('%{User-Name}'); -> call rad2('someone');<br>
rlm_sql (sql): Released sql socket id: 9<br>
++[sql] returns ok<br>
Found Auth-Type = MSCHAP<br>
Found Auth-Type = Accept<br>
Warning: Found 2 auth-types on request for user 'someone'<br>
Auth-Type = Accept, accepting the user<br>
Login OK: [someone/<via Auth-Type = mschap>] (from client router
port 353 cli 00:21:00:11:90:58)<br>
+- entering group post-auth {...}<br>
[sql] expand: %{User-Name} -> someone<br>
[sql] sql_set_user escaped user --> 'someone'<br>
[sql] expand: UPDATE nodes SET lastonline = unix_timestamp() WHERE
name='%{User-Name}' or mac='%{User-Name}'; -> UPDATE nodes SET
lastonline = unix_timest<br>
rlm_sql (sql) in sql_postauth: query is UPDATE nodes SET lastonline =
unix_timestamp() WHERE name='someone' or mac='someone';<br>
rlm_sql (sql): Reserving sql socket id: 8<br>
rlm_sql (sql): Released sql socket id: 8<br>
++[sql] returns ok<br>
Sending Access-Accept of id 234 to 192.168.0.2 port 57789<br>
Framed-IP-Address := 192.168.4.200<br>
Framed-IP-Netmask := 255.255.255.255<br>
Mikrotik-Rate-Limit := "128k/64k"<br>
Finished request 3.<br>
Going to the next request<br>
Waking up in 3.7 seconds.<br>
<br>
<br>
So what should I return to let in user without account in my database?<br>
<br>
<br>
POzdrawiam<br>
Marcin S.<br>
<br>
<br>
</small>
</body>
</html>