Hi to all, I have completed reinstalled all suite on a new Linux box (Centos) for VPN Server. I have installed: - freeradius v.1.1.3 - pptpd v.1.3.4 - radiusclient-ng v.0.5.6.3 freeradius configured with sql backend; with radtest all is ok. pptpd and radiusclient configured as in your guide: http://wiki.freeradius.org/PopTop I try to create tunnel VPN from PC with XP Pro and I see this on pptpd log: Dec 23 16:03:01 ns pptpd[24224]: CTRL: Starting call (launching pppd, opening GR E) Dec 23 16:03:01 ns pppd[24225]: Plugin radius.so loaded. Dec 23 16:03:01 ns pppd[24225]: RADIUS plugin initialized. Dec 23 16:03:01 ns pppd[24225]: Plugin radattr.so loaded. Dec 23 16:03:01 ns pppd[24225]: RADATTR plugin initialized. Dec 23 16:03:01 ns pppd[24225]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded. Dec 23 16:03:01 ns pppd[24225]: pptpd-logwtmp: $Version$ Dec 23 16:03:01 ns pppd[24225]: pppd 2.4.4 started by root, uid 0 Dec 23 16:03:01 ns pppd[24225]: Using interface ppp0 Dec 23 16:03:01 ns pppd[24225]: Connect: ppp0 <--> /dev/pts/3 Dec 23 16:03:04 ns pptpd[24224]: CTRL: Ignored a SET LINK INFO packet with real ACCMs! Dec 23 16:03:04 ns pppd[24225]: rc_avpair_new: unknown attribute 11 Dec 23 16:03:04 ns pppd[24225]: rc_avpair_new: unknown attribute 25 Dec 23 16:03:14 ns pppd[24225]: Peer agostini failed CHAP authentication Dec 23 16:03:14 ns pppd[24225]: Connection terminated. Dec 23 16:03:14 ns pppd[24225]: Exit. Dec 23 16:03:14 ns pptpd[24224]: CTRL: Client 149.xxx.xxx.xxx control connection finished and this in radiusd -X log: rad_recv: Access-Request packet from host 127.0.0.1:59350, id=41, length=70 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "agostini" Calling-Station-Id = "149.xxx.xxx.xxx" NAS-IP-Address = 149.xxx.yyy.yyy NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "agostini", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 171 users: Matched entry DEFAULT at line 183 modcall[authorize]: module "files" returns ok for request 0 radius_xlat: 'agostini' rlm_sql (sql): sql_set_user escaped user --> 'agostini' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'agostini' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 3 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'agostini' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'agostini' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'agostini' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 3 modcall[authorize]: module "sql" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 41 to 127.0.0.1 port 59350 Waking up in 4 seconds... The dictionary.microsoft is generated from schema in your site http://wiki.freeradius.org/PopTop I see onluy User-Name attribute but no the other MS-CHAP.... Can you help me? Have you any idea if there are tools to deep diagnostic for this problem? Thank you in advance and Merry Christmas! Alessandro -- Servizio informatica e comunicazioni CNR - Istituto Fisica Applicata "N.Carrara" Via Madonna del Piano,10 Sesto Fiorentino (FI) --------------------------------------------- http://www.ifac.cnr.it - tel. 055 5226406
Ok... take this query for example.. (as found in the dialup.conf sql page) group_membership_query = "SELECT groupname \ FROM ${usergroup_table} \ WHERE username = BINARY '%{SQL-User-Name}' \ ORDER BY priority" Before I go ahead and try it, I am just curious, would changing the ' ' to " " make any difference? group_membership_query = 'SELECT groupname \ FROM ${usergroup_table} \ WHERE username = BINARY "%{SQL-User-Name}" \ ORDER BY priority' So rather than have it wrapped in " ", it is now wrapped in ' ' and the variables are in ' ' rather than " "? I know in PHP that the "" and '' have 2 different meanings, but I am not sure in here, if they have special meanings or not. This isn't the query I have in question, but it's a much smaller query, and easy to see what I am referring too :) Thanks in advance! Steve Staples.
Ok... take this query for example.. (as found in the dialup.conf sql page)
group_membership_query = "SELECT groupname \ FROM ${usergroup_table} \ WHERE username = BINARY '%{SQL-User-Name}' \ ORDER BY priority"
Before I go ahead and try it, I am just curious, would changing the ' ' to " " make any difference?
group_membership_query = 'SELECT groupname \ FROM ${usergroup_table} \ WHERE username = BINARY "%{SQL-User-Name}" \ ORDER BY priority'
So rather than have it wrapped in " ", it is now wrapped in ' ' and the variables are in ' ' rather than " "?
I know in PHP that the "" and '' have 2 different meanings, but I am not sure in here, if they have special meanings or not.
This isn't the query I have in question, but it's a much smaller query, and easy to see what I am referring too :)
Read man unlang and see what do quotes do. It's not the same. Ivan Kalik
On 12/23/2009 10:15 AM, Alessandro Agostini wrote:
Hi to all, I have completed reinstalled all suite on a new Linux box (Centos) for VPN Server. I have installed: - freeradius v.1.1.3 - pptpd v.1.3.4 - radiusclient-ng v.0.5.6.3
FYI, the most current version of FreeRADIUS is 2.1.7 and is available for RHEL5/CentOS see this: http://wiki.freeradius.org/Red_Hat_FAQ version 1.1.3 is pretty old, you'll do better to use a current version. -- John Dennis <jdennis@redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/
participants (5)
-
Alessandro Agostini -
EasyHorpak.com -
John Dennis -
Steven Staples -
tnt＠kalik.net