Hi, I'm getting desperate here. I've been trying for a week now to make freeradius work with mysql. Can someone please help me out here? Tnx! some info: debian compiled freeradius 1.1.1 with mysql Radius is working fine, i get an Acces-accept packet when i radtest a user from the users file radius:/var/log/radius# radtest yves test localhost 1812 testing123 Sending Access-Request of id 213 to 127.0.0.1 port 1812 User-Name = "yves" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=213, length=20 radius:/var/log/radius# I've created some testusers in de mysql database as well (sorry for layout, pasting from the shell) mysql> connect radius Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Connection id: 61 Current database: radius mysql> select * from usergroup; +----------+-----------+----------+ | UserName | GroupName | priority | +----------+-----------+----------+ | | general | 1 | | steve | general | 1 | | maureen | general | 1 | | john | general | 1 | +----------+-----------+----------+ 4 rows in set (0.00 sec) mysql> select * from radcheck; +----+----------+---------------+----+------------------------------------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+------------------------------------+ | 1 | steve | User-Password | := | $1$nyiGAEuR$5wcFr5bT7SfkVjIChnbZo0 | | 2 | maureen | User-Password | := | $1$LTvKoOtc$X2fVg8uDqyP4.mU.iLNKm0 | | 3 | john | User-Password | := | $1$bkW9WNor$tq5sRRiUcwOV4/fwk3CYM/ | +----+----------+---------------+----+------------------------------------+ 3 rows in set (0.00 sec) Though when i try to authenticate john (or other from de db), i get a reject packet and i don't know why! radius:/var/log/radius# radtest john test localhost 1812 testing123 Sending Access-Request of id 240 to 127.0.0.1 port 1812 User-Name = "john" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 Re-sending Access-Request of id 240 to 127.0.0.1 port 1812 User-Name = "john" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=240, length=20 radius:/var/log/radius# Debug output: radius:/usr/local/dialup_admin/conf# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms Using deprecated realms file. Support for this will go away soon. radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/usr/local/etc/raddb/users" files: acctusersfile = "/usr/local/etc/raddb/acct_users" files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded SQL sql: driver = "rlm_sql_mysql" sql: server = "localhost" sql: port = "" sql: login = "root" sql: password = "XXXXXXXX" sql: radius_db = "radius" sql: acct_table = "radacct" sql: acct_table2 = "radacct" sql: authcheck_table = "radcheck" sql: authreply_table = "radreply" sql: groupcheck_table = "radgroupcheck" sql: groupreply_table = "radgroupreply" sql: usergroup_table = "usergroup" sql: nas_table = "nas" sql: dict_table = "dictionary" sql: sqltrace = no sql: sqltracefile = "/usr/local/var/log/radius/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{Stripped-User-Name:-%{User-Name:-DEFAULT}}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id, radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value, radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id, radgroupreply.GroupName ,radgroupreply.Attribute,radgroupreply.Value, radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" sql: accounting_update_query = "UPDATE radacct SET FramedIPAddress = '%{Framed-IP-Address}', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Address}'" sql: accounting_update_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S',INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0')" sql: accounting_start_query = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0')" sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query = "UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" sql: postauth_table = "radpostauth" sql: postauth_query = "INSERT into radpostauth (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to root@localhost:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 Module: Instantiated sql (sql) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests.
YvesDM <ydmlog@gmail.com> wrote:
mysql> select * from radcheck; +----+----------+---------------+----+------------------------------------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+------------------------------------+ | 1 | steve | User-Password | :=3D | $1$nyiGAEuR$5wcFr5bT7SfkVjIChnbZo0= |
These are *not* clear-text passwords. They're encrypted passwords. Change the attribute name to Crypt-Password, and it should work. Alan DeKok.
On 4/12/06, Alan DeKok <aland@nitros9.org> wrote:
YvesDM <ydmlog@gmail.com> wrote:
mysql> select * from radcheck;
+----+----------+---------------+----+------------------------------------+
| id | UserName | Attribute | op | Value |
+----+----------+---------------+----+------------------------------------+
| 1 | steve | User-Password | :=3D | $1$nyiGAEuR$5wcFr5bT7SfkVjIChnbZo0= |
These are *not* clear-text passwords. They're encrypted passwords. Change the attribute name to Crypt-Password, and it should work.
Alan DeKok.
Tnx for the reply, but it didn't solve my problem. mysql> select * from radcheck; +----+----------+----------------+----+------------------------------------+ | id | UserName | Attribute | op | Value | +----+----------+----------------+----+------------------------------------+ | 1 | steve | User-Password | := | $1$nyiGAEuR$5wcFr5bT7SfkVjIChnbZo0 | | 2 | maureen | Crypt-Password | := | $1$LTvKoOtc$X2fVg8uDqyP4.mU.iLNKm0 | | 3 | john | Crypt-Password | := | $1$bkW9WNor$tq5sRRiUcwOV4/fwk3CYM/ | +----+----------+----------------+----+------------------------------------+ 3 rows in set (0.00 sec) mysql> quit Bye radius:/usr/local/etc/raddb# radtest john test localhost 1812 testing123 Sending Access-Request of id 213 to 127.0.0.1 port 1812 User-Name = "john" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 Re-sending Access-Request of id 213 to 127.0.0.1 port 1812 User-Name = "john" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=213, length=20 radius:/usr/local/etc/raddb# radtest maureen test localhost 1812 testing123 Sending Access-Request of id 219 to 127.0.0.1 port 1812 User-Name = "maureen" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 Re-sending Access-Request of id 219 to 127.0.0.1 port 1812 User-Name = "maureen" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=219, length=20 radius:/usr/local/etc/raddb# Any other suggestions? Yves
--- YvesDM <ydmlog@gmail.com> wrote:
On 4/12/06, Alan DeKok <aland@nitros9.org> wrote:
YvesDM <ydmlog@gmail.com> wrote:
mysql> select * from radcheck;
+----+----------+---------------+----+------------------------------------+
| id | UserName | Attribute | op | Value |
+----+----------+---------------+----+------------------------------------+
| 1 | steve | User-Password | :=3D | $1$nyiGAEuR$5wcFr5bT7SfkVjIChnbZo0= |
These are *not* clear-text passwords. They're encrypted passwords. Change the attribute name to Crypt-Password, and it should work.
Alan DeKok.
Tnx for the reply, but it didn't solve my problem.
mysql> select * from radcheck;
+----+----------+----------------+----+------------------------------------+
| id | UserName | Attribute | op | Value |
+----+----------+----------------+----+------------------------------------+
| 1 | steve | User-Password | := | $1$nyiGAEuR$5wcFr5bT7SfkVjIChnbZo0 | | 2 | maureen | Crypt-Password | := | $1$LTvKoOtc$X2fVg8uDqyP4.mU.iLNKm0 | | 3 | john | Crypt-Password | := | $1$bkW9WNor$tq5sRRiUcwOV4/fwk3CYM/ |
+----+----------+----------------+----+------------------------------------+
3 rows in set (0.00 sec)
mysql> quit Bye radius:/usr/local/etc/raddb# radtest john test localhost 1812 testing123 Sending Access-Request of id 213 to 127.0.0.1 port 1812 User-Name = "john" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 Re-sending Access-Request of id 213 to 127.0.0.1 port 1812 User-Name = "john" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=213, length=20 radius:/usr/local/etc/raddb# radtest maureen test localhost 1812 testing123 Sending Access-Request of id 219 to 127.0.0.1 port 1812 User-Name = "maureen" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 Re-sending Access-Request of id 219 to 127.0.0.1 port 1812 User-Name = "maureen" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=219, length=20 radius:/usr/local/etc/raddb#
Any other suggestions?
Yves
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Try switching everything back to clear text, with User-Password attribute and *clear text passwords* and see if anybody can auth that way. Laker __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
On Wed, 2006-12-04 at 14:02 -0400, Alan DeKok wrote:
YvesDM <ydmlog@gmail.com> wrote:
mysql> select * from radcheck; +----+----------+---------------+----+------------------------------------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+------------------------------------+ | 1 | steve | User-Password | :=3D | $1$nyiGAEuR$5wcFr5bT7SfkVjIChnbZo0= |
These are *not* clear-text passwords. They're encrypted passwords. Change the attribute name to Crypt-Password, and it should work.
Alan DeKok.
You will also need to use Auth-Type := Crypt-Local This has been discussed, an enormous number of times. Please feel free to use Google to search for answers.
On 4/13/06, Guy Fraser <guy@incentre.net> wrote:
You will also need to use Auth-Type := Crypt-Local
This has been discussed, an enormous number of times.
Please feel free to use Google to search for answers.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I really did google for this, but didn't find it. I was messing with all this for one week before actually posting here! Anyway it's working now. Many tnx!
Hi,
I've created some testusers in de mysql database as well (sorry for layout, pasting from the shell) mysql> select * from radcheck; +----+----------+---------------+----+------------------------------------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+------------------------------------+ | 1 | steve | User-Password | := | $1$nyiGAEuR$5wcFr5bT7SfkVjIChnbZo0 | | 2 | maureen | User-Password | := | $1$LTvKoOtc$X2fVg8uDqyP4.mU.iLNKm0 | | 3 | john | User-Password | := | $1$bkW9WNor$tq5sRRiUcwOV4/fwk3CYM/ | +----+----------+---------------+----+------------------------------------+
Though when i try to authenticate john (or other from de db), i get a reject packet and i don't know why!
radius:/var/log/radius# radtest john test localhost 1812 testing123 Sending Access-Request of id 240 to 127.0.0.1 port 1812 User-Name = "john" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 Re-sending Access-Request of id 240 to 127.0.0.1 port 1812 User-Name = "john" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=240, length=20 radius:/var/log/radius#
ummm. I'm not too certain here but wasnt the password you defined in the mySQL database for john $1$bkW9WNor$tq5sRRiUcwOV4/fwk3CYM/ if this is a crypted password then surely the attribute is Crypt-Password rather than User-Password? alan
On 4/12/06, A.L.M.Buxey@lboro.ac.uk <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
ummm. I'm not too certain here but wasnt the password you defined in the mySQL database for john $1$bkW9WNor$tq5sRRiUcwOV4/fwk3CYM/ if this is a crypted password then surely the attribute is Crypt-Password rather than User-Password?
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Correct, alan DeKok told me too. I changed it, but it didn't solve the problem. tnx yves
participants (5)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Guy Fraser -
Laker Netman -
YvesDM