<div dir="ltr">Thanks for your patience so far.<div><br></div><div>I did edit include sql.conf and only edited authorize to uncomment sql line.</div><div><br></div><div>Now I am getting the below. </div><div><br></div><div>
[chap] ERROR: You set 'Auth-Type = CHAP' for a request that does not contain a CHAP-Password attribute!
</div><div><br></div><div>I did try as LOCAL and it says set CHAP, I also tried mschap</div><div><br></div><div><br></div><div>##########</div><div><br></div><div><div>Listening on proxy address * port 1814</div><div>Ready to process requests.</div>
<div>rad_recv: Access-Request packet from host 127.0.0.1 port 36343, id=0, length=67</div><div> Service-Type = Framed-User</div><div> Framed-Protocol = PPP</div><div> User-Name = "test"</div>
<div> Calling-Station-Id = "xxxxxxxx"</div><div> NAS-IP-Address = 127.0.0.1</div><div> NAS-Port = 0</div><div># Executing section authorize from file /etc/raddb/sites-enabled/default</div><div>
+- entering group authorize {...}</div><div>++[preprocess] returns ok</div><div>++[chap] returns noop</div><div>++[mschap] returns noop</div><div>++[digest] returns noop</div><div>[suffix] No '@' in User-Name = "test", looking up realm NULL</div>
<div>[suffix] No such realm "NULL"</div><div>++[suffix] returns noop</div><div>[eap] No EAP-Message, not doing EAP</div><div>++[eap] returns noop</div><div>[files] users: Matched entry DEFAULT at line 172</div>
<div>
++[files] returns ok</div><div>[sql] expand: %{User-Name} -> test</div><div>[sql] sql_set_user escaped user --> 'test'</div><div>rlm_sql (sql): Reserving sql socket id: 4</div><div>[sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id</div>
<div>[sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority</div>
<div>[sql] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'normalusers' ORDER BY id</div>
<div>[sql] User found in group normalusers</div><div>[sql] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'normalusers' ORDER BY id</div>
<div>rlm_sql (sql): Released sql socket id: 4</div><div>++[sql] returns ok</div><div>++[expiration] returns noop</div><div>++[logintime] returns noop</div><div>[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.</div>
<div>++[pap] returns noop</div><div>Found Auth-Type = CHAP</div><div># Executing group from file /etc/raddb/sites-enabled/default</div><div>+- entering group CHAP {...}</div><div>[chap] ERROR: You set 'Auth-Type = CHAP' for a request that does not contain a CHAP-Password attribute!</div>
<div>++[chap] returns invalid</div><div>Failed to authenticate the user.</div><div>Using Post-Auth-Type Reject</div><div># Executing group from file /etc/raddb/sites-enabled/default</div><div>+- entering group REJECT {...}</div>
<div>[attr_filter.access_reject] expand: %{User-Name} -> test</div><div>attr_filter: Matched entry DEFAULT at line 11</div><div>++[attr_filter.access_reject] returns updated</div><div>Delaying reject of request 0 for 1 seconds</div>
<div>Going to the next request</div><div>Waking up in 0.9 seconds.</div><div>Sending delayed reject for request 0</div><div>Sending Access-Reject of id 0 to 127.0.0.1 port 36343</div><div>Waking up in 4.9 seconds.</div><div>
Cleaning up request 0 ID 0 with timestamp +8</div><div>Ready to process requests.</div><div><br></div><div><br></div><div>My DB entries are :</div><div><br></div><div><div>INSERT INTO `radcheck` (`id`, `username`, `attribute`, `op`, `value`) VALUES</div>
<div>(1, 'test', 'Cleartext-Password', '==', '123456'),</div></div><div><br></div><div><div>INSERT INTO `radgroupcheck` (`id`, `groupname`, `attribute`, `op`, `value`) VALUES</div><div>(1, 'normalusers', 'Auth-Type', '==', 'chap');</div>
</div><div><br></div><div><div>INSERT INTO `radgroupreply` (`id`, `groupname`, `attribute`, `op`, `value`) VALUES</div><div>(1, 'normalusers', 'Framed-Compression', '=', 'Van-Jacobson-TCP-IP'),</div>
<div>(2, 'normalusers', 'Framed-Protocol', '=', 'PPP'),</div><div>(3, 'normalusers', 'Service-Type', '=', 'Framed-User');</div></div><div><br></div><div><div>
INSERT INTO `radreply` (`id`, `username`, `attribute`, `op`, `value`) VALUES</div><div>(1, 'test', 'Framed-IP-Address', '=', '192.168.100.233');</div></div><div><br></div><div><div>INSERT INTO `radusergroup` (`username`, `groupname`, `priority`) VALUES</div>
<div>('test', 'normalusers', 1);</div></div><br><div class="gmail_quote">On Wed, May 23, 2012 at 12:17 PM, Fajar A. Nugraha <span dir="ltr"><<a href="mailto:list@fajar.net" target="_blank">list@fajar.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On Wed, May 23, 2012 at 4:16 PM, Fajar A. Nugraha <<a href="mailto:list@fajar.net">list@fajar.net</a>> wrote:<br>
> On Wed, May 23, 2012 at 4:11 PM, Ali Jawad <<a href="mailto:ali.jawad@splendor.net">ali.jawad@splendor.net</a>> wrote:<br>
><br>
>> is there something<br>
>> that needs to be done so FR checks in the database like adding sql entries<br>
>> to authorize{}<br>
><br>
> exactly. sites-available/default should be enough for pptpd since it<br>
> doesn't use EAP.<br>
> The comments on that file should be clear enough. Just uncomment "sql"<br>
> on authorize section.<br>
<br>
</div>... and don't forget to read radiusd.conf as well. Read the commetns<br>
there, and uncomment the line that includes sql.conf (since you didn't<br>
mention it, you probably didn't do that either).<br>
<div class="HOEnZb"><div class="h5"><br>
--<br>
Fajar<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><font><font color="#888888"><b>Ali Jawad<br></b></font></font><div><div><font><font color="#888888"><b>Information Systems Manager</b></font></font></div>
<div><font><font color="#888888"><b>Splendor Telecom <span style="background-color:rgb(255,255,255)">(</span><span style="background-color:rgb(51,51,255);color:rgb(51,102,255)"><a href="http://www.splendor.net/" target="_blank"><span style="background-color:rgb(255,255,255)"><font color="#3366ff">www.splendor.net</font></span></a></span><span style="background-color:rgb(255,255,255)">)</span><br>
Beirut, Lebanon<br>Phone: +9611373725/ext 116<br>FAX: +9611375554</b></font></font><div><div></div></div></div></div></div><br>
</div></div>