- Freeradius-Users - lists.freeradius.org

Newbie question - number of radius requests per session?
by Nathan Hay 15 Nov '07

15 Nov '07

I have FreeRadius 1.1.7 installed and talking to our eDirectory servers via LDAP to authenticate users to our wireless network. It works great, but our eDirectory servers get hit with 11 requests each time a single client authenticates. Running FreeRadius in debug mode, I see 10 requests of the format "Access-Request packet from host 10.0.0.1" and then "Sending Access-Challenge of id 0 to 10.0.0.1 port 1082". Then I see a single final request of the format "Access-Request packet from host 10.0.0.1" and then "Sending Access-Accept of id 0 to 10.0.0.1 port 1082". Each one of these 11 requests performs a check of the user on our eDirectory servers, hence the 11 hits each time a single client authenticates. Is this normal or do I need to fix something? I'd be glad to send the entire debug capture and my config if this is not normal. Thanks for your help, Nathan Nathan P. Hay Network Engineer Computer Services Cedarville University www.cedarville.edu ( http://www.cedarville.edu/ )

4 6

Does free radius support diameter? And If not is it easy to make it support diameter via modified the source code?
by Liangliang Guo 15 Nov '07

15 Nov '07

Hi: I have a node in my target system that has two interfaces of which one is diameter and the other is radius.So only radius protocol is supported does not meet the requirement.So does anybody know whether free radius support diameter or not(as far as I know it does not).If not supported, is there a way to make it support the diameter via modifying the souce codes or what else? Is it a tough job or an easy one,how much efforts shall be made? Br /Leon

2 1

Change pam_auth NAS-IP Address in radius reuest.
by Bryan 15 Nov '07

15 Nov '07

I'm using the latest freeradius on Centos 4.5. I have several Centos 4.5 clients all using pam_auth_radius and LDAP. Everything is working but I wanted to know if there is a way to change the NAS-IP-Address that is sent by the clients. They all send back 127.0.0.1. I want to them to send the real IP addess of the machine as the NAS-IP-Address. The only way I was able to make them work was to change the NAS-IP-Address in the huntgroups file to 127.0.0.1 instead of the real address. I have cisco, netscreen and packeteer devices that work just fine with the real IP's because they inject them into the request. Any help would be appreciated. Thanks, BE

2 1

MD5 authentication
by manIP 15 Nov '07

15 Nov '07

Hi all, The user passwords are stored in my SQL database and encrypted in MD5...Could anyone tell me how to authenticate them (CHAP, PAP....) ? I know that I have to change the "authentication" request but I really don't know where it is located... Many Thanks! Khalid

4 6

poptop - received RADIUS server response with invalid length
by Ben Thompson 15 Nov '07

15 Nov '07

Hi We are running a poptop vpn server which authenticates via radiusclient and freeradius. Some people have reported problems logging in so I decided to investigate. Here is a log from the vpn server :- Nov 14 11:26:12 nassrv3 pppd[15621]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xa7836037> <pcomp> <accomp>] Nov 14 11:26:12 nassrv3 pppd[15621]: rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xa7836037> <pcomp> <accomp>] Nov 14 11:26:12 nassrv3 pppd[15621]: sent [LCP EchoReq id=0x0 magic=0xa7836037] Nov 14 11:26:12 nassrv3 pppd[15621]: sent [CHAP Challenge id=0x9 <f426157bf1a8cd0fbc8d2276a48e731a>, name = "pptpd"] Nov 14 11:26:12 nassrv3 pptpd[15620]: CTRL: Ignored a SET LINK INFO packet with real ACCMs! Nov 14 11:26:12 nassrv3 pppd[15621]: rcvd [LCP Ident id=0x2 magic=0x76cf2fdd "MSRASV5.10"] Nov 14 11:26:12 nassrv3 pppd[15621]: rcvd [LCP Ident id=0x3 magic=0x76cf2fdd "MSRAS-0-ANNA"] Nov 14 11:26:12 nassrv3 pppd[15621]: rcvd [LCP EchoRep id=0x0 magic=0x76cf2fdd] Nov 14 11:26:12 nassrv3 pppd[15621]: rcvd [CHAP Response id=0x9 <4166d4713ef8cec048e88644889a7fbc0000000000000000adcaef9a0709f7576bad0ce28f82ed7e5fb6e8c193a192bb00>, name = "ozw1"] Nov 14 11:26:12 nassrv3 pppd[15621]: rc_check_reply: received RADIUS server response with invalid length Nov 14 11:26:12 nassrv3 pppd[15621]: rc_avpair_gen: received attribute with invalid length Nov 14 11:26:12 nassrv3 pppd[15621]: Peer ozw1 failed CHAP authentication Nov 14 11:26:12 nassrv3 pppd[15621]: sent [CHAP Failure id=0x9 ""] Nov 14 11:26:12 nassrv3 pppd[15621]: sent [LCP TermReq id=0x2 "Authentication failed"] Nov 14 11:26:12 nassrv3 pppd[15621]: rcvd [LCP TermAck id=0x2 "Authentication failed"] Nov 14 11:26:12 nassrv3 pppd[15621]: Connection terminated. Nov 14 11:26:12 nassrv3 pppd[15621]: Exit. Nov 14 11:26:12 nassrv3 pptpd[15620]: GRE: read(fd=6,buffer=5109c0,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs Nov 14 11:26:12 nassrv3 pptpd[15620]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7) Nov 14 11:26:12 nassrv3 pptpd[15620]: CTRL: Reaping child PPP[15621] Nov 14 11:26:12 nassrv3 pptpd[15620]: CTRL: Client 81.132.112.97 control connection finished Here is the relevent part of radius.log :- Wed Nov 14 11:26:12 2007 : Auth: Login OK: [ozw1] (from client vpnvirtualip port 0 cli 1.18) Here is a packet capture showing the radius conversation :- 11:26:12.567346 IP vpn.york.ac.uk.33286 > nasaaa2.york.ac.uk.radius: RADIUS, Access Request (1), id: 0xc1 length: 140 11:26:12.568107 IP nasaaa2.york.ac.uk.radius > vpn.york.ac.uk.33286: RADIUS, Access Accept (2), id: 0xc1 length: 179 11:26:12.568122 IP vpn.york.ac.uk > nasaaa2.york.ac.uk: ICMP vpn.york.ac.uk udp port 33286 unreachable, length 215 Can anyone suggest what might be the problem here? I don't understand the "upd port unreachable" or the "received RADIUS server response with invalid length" messages. Thanks Ben Thompson

2 1

TTLS authentication slow
by Allan Riordan Boll 14 Nov '07

14 Nov '07

Hi, I'm new to Freeradius, and the concepts behind Radius and network security in general also, so I'm not sure if this is normal or not. I've configured Freeradius so that I can authenticate Windows XP clients on our wireless network through a Linux server's /etc/passwd file. The problem is that authenticating takes around 20 seconds. While running the server in a terminal with the -X flag, I see that my Windows XP client first makes one TLS request, then waits ~20 seconds, then makes two more TLS requests and four TTLS requests all together taking less than one second. After these last six requests the client is immediately online. Can anyone hint me on why the client waits for so long before doing the requests it needs? Is my Freeradius server erroneously defaulting the client to use TLS instead of TTLS, and confusing the client? I've written a radiusd.conf from scratch, so that the server only runs the modules I actually use, hoping this is safer and easier to administrate. Please feedback if anyone have any comments on this approach. Note that the problem described above is also a there with the huge bundled stock configuration file. The configuration is as follows: ##################################################################### prefix = /usr localstatedir = /var logdir = /var/log/radius checkrad = "/usr/sbin/checkrad" pidfile = "/var/run/radiusd/radiusd.pid" max_requests = 2048 bind_address = * cleanup_delay = 2 user = radiusd group = radiusd security { max_attributes = 200 reject_delay = 1 status_server = no } thread pool { start_servers = 5 max_servers = 32 min_spare_servers = 3 max_spare_servers = 10 max_requests_per_server = 0 } modules { unix { } pap { } eap { default_eap_type = ttls tls { private_key_file = /etc/raddb/server.tld.pem certificate_file = /etc/raddb/server.tld.pem CA_file = /etc/raddb/server.tld.pem dh_file = /etc/raddb/dh random_file = /etc/raddb/random fragment_size = 1024 include_length = yes } ttls { } } files { usersfile = /etc/raddb/users acctusersfile = /etc/raddb/acct_users preproxy_usersfile = /etc/raddb/preproxy_users compat = no } } authorize { eap files } authenticate { Auth-Type PAP { pap } unix eap } client x.x.x.x { secret = xxxx shortname = accesspoint01 nastype = other } ##################################################################### Any hints greatly appreciated! Thank you very much :-) Regards, Allan Boll - student and network administrator at a dorm ;-)

7 9

CVS on Mac OS 10.4.10
by Wolfgang Burger 14 Nov '07

14 Nov '07

Hello again, I´m trying my best to install the CVS head. OS: Mac OS X 10.4.10 (8R218) openSSL: 0.9.8g 19 Oct 2007 (via darwinports) Complier: Xcode 2.5 output of make: mac339:~/Desktop/radiusCVS/radiusd system$ make Making all in src... Making all in include... make[4]: Nothing to be done for `all'. Making all in lib... make[4]: Nothing to be done for `all'. Making all in modules... Making all in rlm_acctlog... Making all in rlm_acct_unique... Making all in rlm_always... Making all in rlm_attr_filter... Making all in rlm_attr_rewrite... Making all in rlm_chap... Making all in rlm_checkval... Making all in rlm_copy_packet... Making all in rlm_counter... make[6]: Nothing to be done for `all'. Making all in rlm_dbm... Making all in rlm_detail... Making all in rlm_digest... Making all in rlm_eap... Making all in libeap... /Users/system/Desktop/radiusCVS/radiusd/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DDARWIN -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -DEAPLIB -I. -I.. -I/Users/system/Desktop/radiusCVS/radiusd/src -DOPENSSL_NO_KRB5 -c cb.c gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DDARWIN -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -DEAPLIB -I. -I.. -I/Users/system/Desktop/radiusCVS/radiusd/src -DOPENSSL_NO_KRB5 -c cb.c -o cb.o In file included from /Users/system/Desktop/radiusCVS/radiusd/src/freeradius-devel/ libradius.h:54, from /Users/system/Desktop/radiusCVS/radiusd/src/freeradius-devel/radiusd.h: 14, from ../eap.h:30, from eap_tls.h:68, from cb.c:27: /Users/system/Desktop/radiusCVS/radiusd/src/freeradius-devel/md4.h:66: error: conflicting types for 'MD4_CTX' /usr/include/openssl/md4.h:105: error: previous declaration of 'MD4_CTX' was here make[7]: *** [cb.lo] Error 1 make[6]: *** [common] Error 2 make[5]: *** [common] Error 2 make[4]: *** [all] Error 2 make[3]: *** [common] Error 2 make[2]: *** [all] Error 2 make[1]: *** [common] Error 2 make: *** [all] Error 2 Any hints for me? Thank you very much. Best regards / Mit freundlichen Grüßen Wolfgang Burger <burgerw(a)immunbio.mpg.de> Max-Planck-Institut fuer Immunbiologie Scientific Data Processing Unit (+00 49) 761 / 5108 461 Stuebeweg 51 D-79108 Freiburg Germany

2 4

hints and non-DEFAULT entries
by Stefan Winter 14 Nov '07

14 Nov '07

Hi, today I tried to use hints, but obviously in an unsupported manner. I wanted to set a specific attribute for one user if he logs in from one specific NAS and thought that: theguy Client-IP-Address == 1.2.3.4 The-Attribute = x would do it. Instead, this line matched all incoming usernames, just as if there was DEFAULT instead of theguy at the beginning of the line. I.e. it attached the attribute to *everyone* coming in from that IP. I changed the entry to match with DEFAULT User-Name == "theguy", which worked. I suggest to add documentation to hints that the usual "users" way of adding entries with the user name at the beginning of the line doesn't work. Greetings, Stefan Winter -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter(a)restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473

2 1

unlang question
by Norbert Wegener 14 Nov '07

14 Nov '07

Something like if ("%{sqlnastype:SELECT Value from radcheck where UserName = '%{User-Name}' and otherconditions}" == 'bla' ) works, whereas I have problems with: if ("%{sqlnastype:SELECT Value from radcheck where UserName = '%{User-Name}' and other conditions.. " is not null ) Am I doing something wrong or is "is not null" not (yet) implemented? Norbert Wegener

2 1

Freeradius 1.1.7 no DB handles
by steven meyer 14 Nov '07

14 Nov '07

I have searched now for several weeks, but do not find a solution: Installed freeradius 1.1.7 on suse configured mysql on the same server I can start radiusd fine, I can login into nas, but I want accounting put into mysql and that just does not work. My DB-tables are empty, just accounting should be put into it. I do not need anything in usergroup for accounting etc, or do I? radiusd -X | grep sql : Config: including file: /usr/local/etc/raddb/sql.conf sql: driver = "rlm_sql_mysql" sql: server = "localhost" sql: port = "" sql: login = "root" sql: password = "" sql: radius_db = "radiusLOG" sql: nas_table = "nas" sql: sqltrace = no sql: sqltracefile = "/rzf/protokolle/radiusd/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" sql: accounting_update_query = " UPDATE radacct SET FramedIPAddress = '%{Framed-IP-Address}', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', AcctOutputOctets = '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_update_query_alt = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, XAscendSessionSvrKey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Acct-Input-Gigawords: -0}' << 32 | '%{Acct-Input-Octets:-0}', '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay, XAscendSessionSvrKey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '% {Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time:-0}', '0', '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query = " UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', AcctOutputOctets = '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time:-0}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query_alt = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Gigawo rds:-0}' << 32 | '%{Acct-Input-Octets:-0}', '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time:-0}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" sql: postauth_query = "INSERT into radpostauth (user, pass, reply, date) values ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to root@localhost:/radiusLOG rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql (sql): Connected new DB handle, #4 Module: Instantiated sql (sql) rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 1 rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 2 rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 3 rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 4 rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 5 rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 6 rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 7 .... I tried to create and put sqltrace into my db. That was no problem at all. But whats the Problem of radiusd? It connects to DB, but cannot insert when accounting-Data comes in!? I do not know where else to look at. Please help me! -- View this message in context: http://www.nabble.com/Freeradius-1.1.7-no-DB-handles-tf4757305.html#a136043… Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 8