Rejected: Realm does not have at least one dot separator
Hello, I'm struggling with Freeradius since a few days and cannot get forward. This is the message I get when I execute Freeradius in debug mode: 'Rejected: Realm does not have at least one dot separator' Ignoring "ldap" (see raddb/mods-available/README.rst) And this is what I get when I restart the computer, but when I restart Freeradius I don't get it. Sun May 10 11:22:30 2015 : Info: rlm_sql (sql): Couldn't find configuration for accounting, will return NOOP for calls from this section Sun May 10 11:22:30 2015 : Info: rlm_sql (sql): Couldn't find configuration for post-auth, will return NOOP for calls from this section Sun May 10 11:22:30 2015 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Sun May 10 11:22:30 2015 : Info: rlm_sql (sql): Attempting to connect to database "radius" Sun May 10 11:22:30 2015 : Info: rlm_sql (sql): Opening additional connection (0) Sun May 10 11:22:30 2015 : Error: rlm_sql_mysql: Couldn't connect socket to MySQL server root@localhost:radius Sun May 10 11:22:30 2015 : Error: rlm_sql_mysql: Mysql error 'Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2)' Sun May 10 11:22:30 2015 : Error: rlm_sql (sql): Opening connection failed (0) Sun May 10 11:22:30 2015 : Error: /etc/freeradius/sql.conf[22]: Instantiation failed for module "sql" The socket exists in the right place, and the credentials for access to the DB are right. Could you please give me a clue? Thanks in advance.
Hi,
'Rejected: Realm does not have at least one dot separator'
you are calling the policy module which has the rule enabled checking that the 'realm' component has at least one dot in it.... if you are using federated access such as eduroam, then having realms with eg @site.org or @site.class.tld etc is mandatory..... if you only need user@realm (internal stuff or with just a few special partners) then this policy is not relevant so comment it out or dont call the polcy
And this is what I get when I restart the computer, but when I restart Freeradius I don't get it.
looks to me like your mysql isnt started by default when the machine starts up. use the tools of your distro to ensure its enabled to run at boot time... alan
I'm struggling with Freeradius since a few days and cannot get forward. This is the message I get when I execute Freeradius in debug mode:
'Rejected: Realm does not have at least one dot separator'
For this... Are you using a local username, or something like 'bob@localhost'? Look in /etc/raddb|freeradius/sites-enabled. Open the default or the inner-tunnel file. By default, there's a policy in the authorize section of either called 'filter_username'. It checks that your username is in proper network access identifier (NAI) format, and usually that includes at least one dot (like 'bob@blah.com'). A username like 'bob@localrealm' doesn't, so it doesn't comply with the filter and it rejects your request. Use a proper realm, or disable the filter_username policy in the authorize section. As for the rest (ldap and sql issues), see Rui's post :-) Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
escalanterj＠gmail.com -
Stefan Paetow