Hello, We are using Freeradius from 1.x version, after new release of Fedora 20, we reinstalled.all we connected well, but only group items is not checked /I am sending all my config in this mail/ and radiusd doesnt write log "raddact" We stop our old database for sure, for sure we install new blind original Freeradius 3.0.1 "schema.sql" without success /user in database works - we are accepted with user - only no log/ Can You help me ?? we solved this three weeks and we are unhappy from our work. List of debug : driver = "rlm_sql_mysql" Mon Mar 17 20:26:44 2014 : Debug: server = "localhost" Mon Mar 17 20:26:44 2014 : Debug: port = "3306" Mon Mar 17 20:26:44 2014 : Debug: login = "radius" Mon Mar 17 20:26:44 2014 : Debug: password = "radius" Mon Mar 17 20:26:44 2014 : Debug: radius_db = "radius_test" Mon Mar 17 20:26:44 2014 : Debug: read_groups = yes Mon Mar 17 20:26:44 2014 : Debug: read_clients = yes Mon Mar 17 20:26:44 2014 : Debug: delete_stale_sessions = yes Mon Mar 17 20:26:44 2014 : Debug: sql_user_name = "%{User-Name}" Mon Mar 17 20:26:44 2014 : Debug: default_user_profile = "" Mon Mar 17 20:26:44 2014 : Debug: client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas" Mon Mar 17 20:26:44 2014 : Debug: authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" Mon Mar 17 20:26:44 2014 : Debug: authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" Mon Mar 17 20:26:44 2014 : Debug: authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id " Mon Mar 17 20:26:44 2014 : Debug: authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id " Mon Mar 17 20:26:44 2014 : Debug: group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" Mon Mar 17 20:26:44 2014 : Debug: simul_count_query = "" Mon Mar 17 20:26:45 2014 : Debug: simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotoc ol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" Mon Mar 17 20:26:45 2014 : Debug: safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" And important part with authorinizg.looks like group is empty, but executing query on SSH will show DATA Mon Mar 17 20:26:50 2014 : Debug: (0) sql : expand: "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" -> 'SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'tester' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'tester' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : User found in radcheck table Mon Mar 17 20:26:50 2014 : Debug: (0) sql : Check items matched Mon Mar 17 20:26:50 2014 : Debug: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id Mon Mar 17 20:26:50 2014 : Debug: Parsed xlat tree: Mon Mar 17 20:26:50 2014 : Debug: literal: 'SELECT id, username, attribute, value, op FROM radreply WHERE username = '' Mon Mar 17 20:26:50 2014 : Debug: attribute: SQL-User-Name Mon Mar 17 20:26:50 2014 : Debug: { Mon Mar 17 20:26:50 2014 : Debug: ref 2 Mon Mar 17 20:26:50 2014 : Debug: list 1 Mon Mar 17 20:26:50 2014 : Debug: tag -128 Mon Mar 17 20:26:50 2014 : Debug: } Mon Mar 17 20:26:50 2014 : Debug: literal: '' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : expand: "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" -> 'SELECT id, username, attribute, value, op FROM radreply WHERE username = 'tester' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op FROM radreply WHERE username = 'tester' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : ... falling-through to group processing Mon Mar 17 20:26:50 2014 : Debug: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority Mon Mar 17 20:26:50 2014 : Debug: Parsed xlat tree: Mon Mar 17 20:26:50 2014 : Debug: literal: 'SELECT groupname FROM radusergroup WHERE username = '' Mon Mar 17 20:26:50 2014 : Debug: attribute: SQL-User-Name Mon Mar 17 20:26:50 2014 : Debug: { Mon Mar 17 20:26:50 2014 : Debug: ref 2 Mon Mar 17 20:26:50 2014 : Debug: list 1 Mon Mar 17 20:26:50 2014 : Debug: tag -128 Mon Mar 17 20:26:50 2014 : Debug: } Mon Mar 17 20:26:50 2014 : Debug: literal: '' ORDER BY priority' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : expand: "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" -> 'SELECT groupname FROM radu sergroup WHERE username = 'tester' ORDER BY priority' Mon Mar 17 20:26:50 2014 : Debug: rlm_sql (sql): Executing query: 'SELECT groupname FROM radusergroup WHERE username = 'tester' ORDER BY priority' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : ... falling-through to profile processing Mon Mar 17 20:26:50 2014 : Debug: rlm_sql (sql): Released connection (1) Mon Mar 17 20:26:50 2014 : Info: rlm_sql (sql): Closing connection (0): Too many free connections (2 > 0) Mon Mar 17 20:26:50 2014 : Debug: rlm_sql_mysql: Socket destructor called, closing socket Mon Mar 17 20:26:50 2014 : Debug: (0) modsingle[authorize]: returned from sql (rlm_sql) for request 0 Mon Mar 17 20:26:50 2014 : Debug: (0) [sql] = ok Mon Mar 17 20:26:50 2014 : Debug: (0) modsingle[authorize]: calling expiration (rlm_expiration) for request Regards, Kryštof Klíma **** poskytování poradenství v oblasti sítí Lan a Wan, servis a prodej výpočetní techniky Mobil: +420 774 331 774 E-mail: <mailto:klima@wifiprofi.cz> klima@wifiprofi.cz