On Sep 28, 2018, at 2:12 PM, James Ngo <james.ngobui@gmail.com> wrote:
Hi Alan, You are absolutely right about the log file and I am sorry to be bothering you again. I copy the content of my system log file of the issue below for your reference (My other test user which use the "user" file works OK).
...
(7) eap_peap: Got tunneled request (7) eap_peap: EAP-Message = 0x022300411a0223003c31cc0432c71245051a187bd13655a9e34a0000000000000000721615e15d5ae620467f9822441958a6f7be55128b39b716006a616d65736e (7) eap_peap: Setting User-Name to jamesn (7) eap_peap: Sending tunneled request to inner-tunnel
That's the MS-CHAP stuff from PEAP, inside of the TLS tunnel.
(7) sql: EXPAND %{User-Name} (7) sql: --> testuser1 (7) sql: SQL-User-Name set to 'testuser1' rlm_sql (sql): Reserved connection (1) (7) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id (7) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'testuser1' ORDER BY id (7) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'testuser1' ORDER BY id (7) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority (7) sql: --> SELECT groupname FROM radusergroup WHERE username = 'testuser1' ORDER BY priority (7) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'testuser1' ORDER BY priority (7) sql: User not found in any groups rlm_sql (sql): Released connection (1) Need 4 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots used (7) [sql] = notfound
That's definitive. The "testuser1" isn't in SQL. Run the queries manually to see what they return. Alan DeKok.