On Feb 14, 2018, at 11:17 AM, Marcin <marcin@nicram.net> wrote:
Hello, I'm trying to make redundant authentication if database fails to get users from files.
OK...
if (Framed-Protocol == PPP){ redundant { lms files }
That should work.
With this, when I try to connect and database is well everything goes well and user is authentificated. But when I simulate problems with database (shutdown db) user cannot connect.
Because it's not matching the entry in the "users" file.
in users file: serwis Cleartext-Password := "password" Framed-IP-Address = 1.1.1.1, Framed-IP-Netmask = 255.255.255.255, MS-Primary-DNS-Server = 8.8.4.4, MS-Secondary-DNS-Server = 8.8.8.8, Port-Limit = 1, Acct-Interim-Interval = 300, Filter-ID = "105192k/11196k", Mikrotik-Rate-Limit = "11196k/105192k"
now the log: ... (0) Received Access-Request Id 11 from 10.5.5.10:40267 to 10.5.5.1:1812 length 153 (0) Service-Type = Framed-User (0) Framed-Protocol = PPP (0) NAS-Port = 15728920 (0) NAS-Port-Type = Ethernet (0) User-Name = "serwis"
Which should be fine.
... (0) lms: EXPAND %{User-Name} (0) lms: --> serwis (0) lms: SQL-User-Name set to 'serwis' rlm_sql (lms): 0 of 0 connections in use. You may need to increase "spare" rlm_sql (lms): Opening additional connection (0), 1 of 32 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Couldn't connect to MySQL server radius@localhost:lms rlm_sql_mysql: MySQL error: Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2 "No such file or directory") rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (lms): Opening connection failed (0) *(0) [lms] = fail* *(0) files: users: Matched entry DEFAULT at line 186*
Which means it didn't match the entry you added. So... where did you add the entry? At the top of the file? Or at the bottom? What's on line 186? Did you edit the correct "users" file? Alan DeKok.