tnt@kalik.net escribió:
I'm coming back with this problem.
When I change "User-Password" for "Cleartext-Password", my NAS can't connect with the Radius because NAS is sendig in CHAP mode
That makes no sense. Cleartext-Password works with every authentication method. Encrypted ones don't.
I don't know why didn't work but in the next times yes. Now I have put Cleartext-Password.
[chap] login attempt by "belen@host.com" with CHAP password [chap] Using clear text password "pass" for user belen@host.com authentication. [chap] Password check failed
..
When I set "User-Password" in the data base, again, I can connect but with the "mistake":
Found Auth-Type = CHAP !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! Replacing User-Password in config items with Cleartext-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! Please update your configuration so that the "known good" !!! !!! clear text password is in Cleartext-Password, and not in User-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! +- entering group CHAP {...} [chap] login attempt by "belen@host.com" with CHAP password [chap] Using clear text password "pass" for user belen@hostcom authentication. [chap] chap user belen@seasuntel.com authenticated succesfully
You have doctored the username (at least) in second output so there is no way to see is it the same user and password. It is critical that you provide debug with usernames and passwords. Use temporary test users, not real ones. Also it woud help if both debugs were complete. If you don't trust the list ...
Yes, both usernames are the same and I guess I haven't show all the debug by space and long where important data is shown
It is really wrong????
Can't say when you have altered the debug.
Besides, this could be affecting to my SQL query in radgroupreply?
No. Have you made changes to sql.conf apart from connection details? Groups are read as default.
Yes, I've changed SQL queries in dialup.conf and now are like that: authorize_group_reply_query = "SELECT ${groupreply_table}.id, ${groupreply_table}.GroupName,${groupreply_table}.Attribute, ${groupreply_table}.Value,${groupreply_table}.op FROM ${groupreply_table},${usergroup_table} WHERE ${usergroup_table}.Username = '%{SQL-User-Name}' AND ${usergroup_table}.GroupName = ${groupreply_table}.GroupName ORDER BY ${groupreply_table}.id" authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id"