On Sep 28, 2018, at 2:12 PM, James Ngo <james.ngobui@gmail.com> wrote:
Hi Alan, You are absolutely right about the log file and I am sorry to be
bothering
you again. I copy the content of my system log file of the issue below for your reference (My other test user which use the "user" file works OK).
...
(7) eap_peap: Got tunneled request (7) eap_peap: EAP-Message =
0x022300411a0223003c31cc0432c71245051a187bd13655a9e34a0000000000000000721615e15d5ae620467f9822441958a6f7be55128b39b716006a616d65736e
(7) eap_peap: Setting User-Name to jamesn (7) eap_peap: Sending tunneled request to inner-tunnel
That's the MS-CHAP stuff from PEAP, inside of the TLS tunnel.
(7) sql: EXPAND %{User-Name} (7) sql: --> testuser1 (7) sql: SQL-User-Name set to 'testuser1' rlm_sql (sql): Reserved connection (1) (7) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id (7) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'testuser1' ORDER BY id (7) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'testuser1' ORDER BY id (7) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority (7) sql: --> SELECT groupname FROM radusergroup WHERE username = 'testuser1' ORDER BY priority (7) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'testuser1' ORDER BY priority (7) sql: User not found in any groups rlm_sql (sql): Released connection (1) Need 4 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots used (7) [sql] = notfound
That's definitive.
The "testuser1" isn't in SQL.
Run the queries manually to see what they return.
Alan DeKok.
- List info/subscribe/unsubscribe? See https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=02%7C01%7C%7C5b23721b7dda479accab08d62573f1d4%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636737577233171781&sdata=4TeBgHVZopEcoq1ulBsSd7qqakK90DSZHEoRbYat5pQ%3D&reserved=0
Hello, Maybe if the MySQL is configured to be case sensitive the correct atribute is ClearText-Password unstead Cleartext-Password. It is just a guess. (note CT in ClearText) Rafael Enviado do Email<https://go.microsoft.com/fwlink/?LinkId=550986> para Windows 10 ________________________________ De: Freeradius-Users <freeradius-users-bounces+rolivastro=hotmail.com@lists.freeradius.org> em nome de James Ngo <james.ngobui@gmail.com> Enviado: Friday, September 28, 2018 2:54:48 PM Para: freeradius-users@lists.freeradius.org Assunto: Re: Config FreeRadius (3.0.16) to work with SQL: The Guide is outdated - please helps This is very strange then... when I query manually using mysql, it shows per below What could have gone wrong? mysql> select * from radcheck; +----+-----------+--------------------+----+-----------+ | id | username | attribute | op | value | +----+-----------+--------------------+----+-----------+ | 2 | testuser1 | Cleartext-Password | := | testuser1 | +----+-----------+--------------------+----+-----------+ 1 row in set (0.01 sec) mysql> On Fri, Sep 28, 2018 at 11:27 AM Alan DeKok <aland@deployingradius.com> wrote: - List info/subscribe/unsubscribe? See https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=02%7C01%7C%7C5b23721b7dda479accab08d62573f1d4%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636737577233171781&sdata=4TeBgHVZopEcoq1ulBsSd7qqakK90DSZHEoRbYat5pQ%3D&reserved=0