Thanks, but after fixing the sql module, it is the same: Auth-Type not fournd (0) authorize { (0) policy filter_username { (0) if (&User-Name) { (0) if (&User-Name) -> TRUE (0) if (&User-Name) { (0) if (&User-Name =~ / /) { (0) if (&User-Name =~ / /) -> FALSE (0) if (&User-Name =~ /@[^@]*@/ ) { (0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (0) if (&User-Name =~ /\.\./ ) { (0) if (&User-Name =~ /\.\./ ) -> FALSE (0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { (0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE (0) if (&User-Name =~ /\.$/) { (0) if (&User-Name =~ /\.$/) -> FALSE (0) if (&User-Name =~ /@\./) { (0) if (&User-Name =~ /@\./) -> FALSE (0) } # if (&User-Name) = notfound (0) } # policy filter_username = notfound (0) [preprocess] = ok (0) [chap] = noop (0) [mschap] = noop (0) [digest] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "3c15c2e840fe", looking up realm NULL (0) suffix: No such realm "NULL" (0) [suffix] = noop (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) sql: EXPAND %{User-Name} (0) sql: --> 3c15c2e840fe (0) sql: SQL-User-Name set to '3c15c2e840fe' rlm_sql (sql): Reserved connection (0) (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = '3c15c2e840fe' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '3c15c2e840fe' ORDER BY id (0) sql: User found in radcheck table rlm_sql (sql): Reserved connection (1) rlm_sql (sql): Released connection (1) Need 6 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.5.5-10.1.41-MariaDB-0ubuntu0.18.04.1, protocol version 10 (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority (0) sql: --> SELECT groupname FROM radusergroup WHERE username = '3c15c2e840fe' ORDER BY priority (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = '3c15c2e840fe' ORDER BY priority (0) sql: User not found in any groups rlm_sql (sql): Released connection (0) (0) [sql] = noop (0) [expiration] = noop (0) [logintime] = noop (0) pap: WARNING: No "known good" password found for the user. Not setting Auth-Type (0) pap: WARNING: Authentication will fail unless a "known good" password is available (0) [pap] = noop (0) } # authorize = ok (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user -----Ursprüngliche Nachricht----- Von: Freeradius-Users <freeradius-users-bounces+hans.bornemann=tu-dortmund.de@lists.freeradius.org> Im Auftrag von Alan DeKok Gesendet: Donnerstag, 12. September 2019 13:08 An: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Betreff: Re: how to transfer from "users file to sql" On Sep 12, 2019, at 4:43 AM, Bornemann, Hans <hans.bornemann@tu-dortmund.de> wrote
we are testing a wlan with "private preshared keys". In the cisco wlancontroller world
it works with the AAA override feature and some entries in the radius database.
If I transfer this entries to the mysql database, the aut-type was not set.
What is missing?
Read the debug output. And use "radiusd -X", not "radiusd -Xx". And don't post the debug output double-spaced.
I tested it with the default configuration, the sql module was enabled.
You didn't configure the SQL module correctly. I've edited the debug output below to look like it was done with "radiusd -X":
(9) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '3c15c2e840fe' ORDER BY id The 'rlm_sql_null' driver CANNOT be used for SELECTS. Please update the 'sql' module configuration to use a real database. Set 'driver = ...' to the database you want to use.
This is why we tell everyone to READ the debug output. It tells you EXACTLY what is going wrong, and how to fix it. Please READ the documentation, and follow the instructions. It's MUCH more efficient than doing random things, and wondering why the server doesn't work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html