dynamic_clients // Required attribute "FreeRADIUS-Client-Secret" is missing
Why is not he finding the "secret"? ============================== Freeradius 3.0.18 Debian 9 amd64 ============================== Table nas: id | nasname | shortname | type | ports | secret | server | community ----+-------------+-----------+-------+-------+--------+--------+----------- 1 | 172.20.0.20 | ap-20 | other | | 123123 | | 2 | 172.20.0.21 | ap-21 | other | | 123123 | | (2 rows) ========================= fradius1:~$ psql -h localhost -d radius -U radius -W -c "select secret from nas where nasname = '172.20.0.21';" Password for user radius: secret -------- 123123 (1 row) ========================== freeradius -X: Ready to process requests (0) server dynamic_clients { (0) # Executing section authorize from file /etc/freeradius/sites-enabled/dynamic-clients (0) authorize { (0) if ("%{sql: SELECT nasname FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'}") { (0) EXPAND %{User-Name} (0) --> (0) SQL-User-Name set to '' rlm_sql (sql): Reserved connection (3) (0) Executing select query: SELECT nasname FROM nas WHERE nasname = '172.20.0.21' (0) SQL query returned no results rlm_sql (sql): Released connection (3) Need 2 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (8), 1 of 24 pending slots used (0) EXPAND %{sql: SELECT nasname FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'} (0) --> (0) if ("%{sql: SELECT nasname FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'}") -> FALSE (0) [ok] = ok (0) } # authorize = ok (0) } # server dynamic_clients (0) Converting control list to client fields *(0) ERROR: Cannot add client 172.20.0.21 <http://172.20.0.21>: Required attribute "FreeRADIUS-Client-Secret" is missing* Ignoring request to auth address * port 1812 bound to server default from unknown client 172.20.0.21 port 45122 proto udp Ready to process requests -- - Osvaldo T Crispim Filho -
On Sep 27, 2018, at 9:46 AM, Osvaldo T Crispim Filho <osvaldotcf@gmail.com> wrote:
Why is not he finding the "secret"?
Ask the database why it isn't returning results:
(0) Executing select query: SELECT nasname FROM nas WHERE nasname = '172.20.0.21' (0) SQL query returned no results
That seems clear. Maybe FreeRADIUS doesn't have permission to read that table? Alan DeKok.
Many thanks for the prompt return. The problem is yes with the connection to the database. Sorry. 2018-09-27 10:58 GMT-03:00 Alan DeKok <aland@deployingradius.com>:
On Sep 27, 2018, at 9:46 AM, Osvaldo T Crispim Filho <osvaldotcf@gmail.com> wrote:
Why is not he finding the "secret"?
Ask the database why it isn't returning results:
(0) Executing select query: SELECT nasname FROM nas WHERE nasname = '172.20.0.21' (0) SQL query returned no results
That seems clear.
Maybe FreeRADIUS doesn't have permission to read that table?
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
-- - Osvaldo T Crispim Filho -
participants (2)
-
Alan DeKok -
Osvaldo T Crispim Filho