Hello, Thanks for your answer. However I don't want to use Mysql database to authenticate the user. That's why Mysql database was not turned on with Freeradius. I just want to use Microsoft Active Directory to authenticate the user. However from the log, I don't see the radius server ever tried querying AD server. That is the issue which I want to figure out. Regards, Edward Xie -----Original Message----- From: freeradius-users-bounces+edward.xie=guest-tek.com@lists.freeradius.org [mailto:freeradius-users-bounces+edward.xie=guest-tek.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: February-25-14 4:31 PM To: FreeRadius users mailing list Subject: Re: freeradius failed to authenticate the users against windos active directory Edward Xie wrote:
Could you kindly to help me figure out why the freeradius server can’t work with windows AD? Thanks so much in advance.
It has nothing to do with AD. Read the debug log. Honestly, this isn't hard: [sql] expand: %{User-Name} -> host/NetEng-D410.NE.LOCAL [sql] sql_set_user escaped user --> 'host/NetEng-D410.NE.LOCAL' rlm_sql (sql): Ignoring unconnected handle 4.. rlm_sql (sql): Ignoring unconnected handle 3.. rlm_sql (sql): Ignoring unconnected handle 2.. rlm_sql (sql): Ignoring unconnected handle 1.. rlm_sql (sql): Ignoring unconnected handle 0.. rlm_sql (sql): There are no DB handles to use! skipped 5, tried to connect 0 ++[sql] returns fail Invalid user: [host/NetEng-D410.NE.LOCAL/<via Auth-Type = EAP>] (from client 0.0.0.0/0 port 3 cli 00-14-22-fd-dd-98) Your SQL server is down. Fix it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html