Thank you both for your answers.
I had forgotten to specify in my first mail that I've restarted the radiusd numerous times and that my sql.conf file contains
readclients = yes
nas_table = "nas"
I've put a # in front of files because I wanted the radiusd to check the user's password only in MySQL
Alan, sorry but I didn't understand what you wrote in your last sentence, about that.
And how to enable MySQL only without clients.conf ?
So I still have the problem and I don't understand what's
wrong
mysql> select * from nas;
+----+----------------+-----------+-------+-------+-----------+--------+-----------+-------------------+
| id | nasname | shortname | type | ports | secret | server | community | description |
+----+----------------+-----------+-------+-------+-----------+--------+-----------+-------------------+
| 1 | 192.168.0.1 | myNAS | other | NULL | mysecret | NULL | NULL | RADIUS Client |
When I start the server with the -X option
rlm_sql_mysql: query: SELECT id, nasname, shortname, type, secret, server FROM nas
rlm_sql (sql): Read entry nasname=192.168.0.1,shortname=myNAS,secret=mysecret
rlm_sql (sql): Adding client 192.168.0.1 (myNAS, server=<none>) to
clients list
Le Samedi 9 novembre 2013 13h02, "A.L.M.Buxey@lboro.ac.uk" <A.L.M.Buxey@lboro.ac.uk> a écrit :
Hi,
> I know that by default you configure your radius clients in the file
> /etc/raddb/clients.conf
correct
> However I would like them to be entered in MySQL
thats easy. add them to the NAS table in your MySQL DB and then simply read the
sql.conf file near the bottom and uncomment the readclients = yes line.
> I have modified the file /etc/raddb/sites-enabled/default and I expect the
> Freeradius server to check the clients in MySQL instead of clients.conf
> authorize {
> sql
> #files
> }
???? no. what you've done there is enable SQL in the authorise stage...so a
device attempting to use RADIUS will be checked against SQL. except that it wont
because the NAS trying to talk wont be allowed to talk (and commenting out
'files' means
that the users file wont work anymore....thats what that option does!)
alan