Hello, I am trying to configure freeradius with EAP/MD5+SQL support. I already followed all the SQL configuration procedures suggested in the SQL HOW TO, and the steps suggested in the EAP/MD5 HOW TO. However, for some reason when I try to authenticate from the NAS i get the following output in the server rlm_sql (sql): Released sql socket id: 3 modcall[authorize]: module "sql" returns ok for request 5 modcall[authorize]: module "eap" returns noop for request 5 modcall: leaving group authorize (returns ok) for request 5 auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying request 5 for 1 seconds Finished request 5 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 13 to w.x.y.z port 21645 Waking up in 4 seconds... It appears that it finds the user in SQL but then it does not do anything in the EAP module. The log from the NAS says *Jun 1 00:04:25: %RADIUS-4-RADIUS_DEAD: RADIUS server a.b.c.d:16214,16215 is not responding. *Jun 1 00:04:37: %RADIUS-3-ALLDEADSERVER: Group radius: No active radius servers found. Id 12. I don't understand why it says it is dead if the server IS receiving the request. What I find weird is that when I do a radtest from the server it seems to find the user and password and sends an access-accept. I guess this would make sense since there is no EAP involved in this case, but still, I do not understand what is wrong in the rest of the configuration, as i have followed all steps in the HOW TOs. If anyone has an idea on what could be the problem i would appreciate the help. Thank you. Oskar -- View this message in context: http://www.nabble.com/EAP%2BMD5%2BSQL-trouble-tf4571786.html#a13049739 Sent from the FreeRadius - User mailing list archive at Nabble.com.
auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user.
What I find weird is that when I do a radtest from the server it seems to find the user and password and sends an access-accept. I guess this would make sense since there is no EAP involved in this case, but still, I do not understand what is wrong in the rest of the configuration, as i have followed all steps in the HOW TOs.
HOW TO should be updated. Instead of: Auth-Type := Local, User-Password = "Hello" put: Cleartext-Password := "Hello" Ivan Kalik Kalik Informatika ISP
My radcheck table already looks like +----+--------------+--------------------+----------+------+ | id | UserName | Attribute | Value | op | +----+--------------+--------------------+----------+------+ | 1 | tortuganinja | Cleartext-Password | splinter | := | +----+--------------+--------------------+----------+------+ shouldn't that cover the problem? Thank you tnt wrote:
HOW TO should be updated. Instead of:
Auth-Type := Local, User-Password = "Hello"
put:
Cleartext-Password := "Hello"
-- View this message in context: http://www.nabble.com/EAP%2BMD5%2BSQL-trouble-tf4571786.html#a13067630 Sent from the FreeRadius - User mailing list archive at Nabble.com.
Post the whole debug (radiusd -X) then. Ivan Kalik Kalik Informatika ISP Dana 5/10/2007, "inl2goal" <syaoran.sakura@gmail.com> piše:
My radcheck table already looks like
+----+--------------+--------------------+----------+------+ | id | UserName | Attribute | Value | op | +----+--------------+--------------------+----------+------+ | 1 | tortuganinja | Cleartext-Password | splinter | := | +----+--------------+--------------------+----------+------+
shouldn't that cover the problem?
Thank you
tnt wrote:
HOW TO should be updated. Instead of:
Auth-Type := Local, User-Password = "Hello"
put:
Cleartext-Password := "Hello"
-- View this message in context: http://www.nabble.com/EAP%2BMD5%2BSQL-trouble-tf4571786.html#a13067630 Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Here is the debug output When I run the server I get: # ./radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 16214 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = yes preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded SQL sql: driver = "rlm_sql_mysql" sql: server = "localhost" sql: port = "" sql: login = "root" sql: password = "watchdog" sql: radius_db = "radius" sql: nas_table = "nas" sql: sqltrace = yes sql: sqltracefile = "/usr/local/var/log/radius/sqltrace.sql" sql: readclients = yes sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" sql: accounting_update_query = " UPDATE radacct SET FramedIPAddress = '%{Framed-IP-Address}', AcctSessionTime = '%{Acct-Session-Time}', + AcctInputOctets = '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', AcctOutputOctets = '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_update_query_alt = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, XAscendSessionSvrKey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay, XAscendSessionSvrKey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time:-0}', '0', '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query = " UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', AcctOutputOctets = '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time:-0}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query_alt = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time:-0}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" sql: postauth_query = "INSERT into radpostauth (user, pass, reply, date) values ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to root@localhost:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 rlm_sql (sql): - generate_sql_clients rlm_sql (sql): Query: SELECT * FROM nas rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_mysql: query: SELECT * FROM nas rlm_sql (sql): Read entry nasname=w.x.y.z,shortname=radius1,secret=holygrail rlm_sql (sql): Adding client w.x.y.z (radius1) to clients list rlm_sql (sql): Released sql socket id: 4 Module: Instantiated sql (sql) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:16214 Listening on accounting *:16215 Ready to process requests. And when I send the request after connecting to the switch I get: rad_recv: Access-Request packet from host w.x.y.z:1645, id=3, length=125 User-Name = "power" Service-Type = Framed-User Framed-MTU = 1500 Called-Station-Id = "00-1A-A2-5B-43-83" Calling-Station-Id = "00-0B-CD-AA-ED-6D" EAP-Message = 0x0202000a01706f776572 Message-Authenticator = 0x58fa7799b0cf8b82e6216ce8048220d7 NAS-Port = 50003 NAS-Port-Type = Ethernet NAS-IP-Address = w.x.y.z Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 rlm_realm: No '@' in User-Name = "power", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 radius_xlat: 'power' rlm_sql (sql): sql_set_user escaped user --> 'power' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'power' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 3 rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'power' ORDER BY id radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'power' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'power' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'power' ORDER BY id' rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'power' ORDER BY id radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'power' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'power' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): Released sql socket id: 3 modcall[authorize]: module "sql" returns ok for request 0 modcall[authorize]: module "eap" returns noop for request 0 modcall: leaving group authorize (returns ok) for request 0 auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 3 to w.x.y.z port 1645 Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 3 with timestamp 470bb882 Nothing to do. Sleeping until we see a request. Thank you tnt wrote:
Post the whole debug (radiusd -X) then.
Ivan Kalik Kalik Informatika ISP
-- View this message in context: http://www.nabble.com/EAP%2BMD5%2BSQL-trouble-tf4571786.html#a13120808 Sent from the FreeRadius - User mailing list archive at Nabble.com.
Actually, all the way from the beginning, "CleartextPassword" has been set (without an Auth-Type anywhere in the files) but for some reason the program chooses Local automatically. It is probably a default setting of FreeRadius to go Local when it doesn't find an Auth method. However, what I don't understand is why it doesn't find an authentication method if I have already configured the EAP.conf file with MD5 and have it in the Authorize and Authenticate sections of radiusd.conf -- View this message in context: http://www.nabble.com/EAP%2BMD5%2BSQL-trouble-tf4571786.html#a13125214 Sent from the FreeRadius - User mailing list archive at Nabble.com.
Now read my first reply again. It looks like you have replaced the password attribute, but left the Auth-Type. Ivan Kalik Kalik Informatika ISP Dana 9/10/2007, "inl2goal" <syaoran.sakura@gmail.com> piše:
Here is the debug output
When I run the server I get:
# ./radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 16214 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = yes preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded SQL sql: driver = "rlm_sql_mysql" sql: server = "localhost" sql: port = "" sql: login = "root" sql: password = "watchdog" sql: radius_db = "radius" sql: nas_table = "nas" sql: sqltrace = yes sql: sqltracefile = "/usr/local/var/log/radius/sqltrace.sql" sql: readclients = yes sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" sql: accounting_update_query = " UPDATE radacct SET FramedIPAddress = '%{Framed-IP-Address}', AcctSessionTime = '%{Acct-Session-Time}', + AcctInputOctets = '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', AcctOutputOctets = '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_update_query_alt = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, XAscendSessionSvrKey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay, XAscendSessionSvrKey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time:-0}', '0', '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query = " UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', AcctOutputOctets = '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time:-0}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query_alt = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time:-0}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" sql: postauth_query = "INSERT into radpostauth (user, pass, reply, date) values ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to root@localhost:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 rlm_sql (sql): - generate_sql_clients rlm_sql (sql): Query: SELECT * FROM nas rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_mysql: query: SELECT * FROM nas rlm_sql (sql): Read entry nasname=w.x.y.z,shortname=radius1,secret=holygrail rlm_sql (sql): Adding client w.x.y.z (radius1) to clients list rlm_sql (sql): Released sql socket id: 4 Module: Instantiated sql (sql) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:16214 Listening on accounting *:16215 Ready to process requests.
And when I send the request after connecting to the switch I get:
rad_recv: Access-Request packet from host w.x.y.z:1645, id=3, length=125 User-Name = "power" Service-Type = Framed-User Framed-MTU = 1500 Called-Station-Id = "00-1A-A2-5B-43-83" Calling-Station-Id = "00-0B-CD-AA-ED-6D" EAP-Message = 0x0202000a01706f776572 Message-Authenticator = 0x58fa7799b0cf8b82e6216ce8048220d7 NAS-Port = 50003 NAS-Port-Type = Ethernet NAS-IP-Address = w.x.y.z Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 rlm_realm: No '@' in User-Name = "power", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 radius_xlat: 'power' rlm_sql (sql): sql_set_user escaped user --> 'power' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'power' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 3 rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'power' ORDER BY id radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'power' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'power' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'power' ORDER BY id' rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'power' ORDER BY id radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'power' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'power' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): Released sql socket id: 3 modcall[authorize]: module "sql" returns ok for request 0 modcall[authorize]: module "eap" returns noop for request 0 modcall: leaving group authorize (returns ok) for request 0 auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 3 to w.x.y.z port 1645 Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 3 with timestamp 470bb882 Nothing to do. Sleeping until we see a request.
Thank you
tnt wrote:
Post the whole debug (radiusd -X) then.
Ivan Kalik Kalik Informatika ISP
-- View this message in context: http://www.nabble.com/EAP%2BMD5%2BSQL-trouble-tf4571786.html#a13120808 Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Actually, all the way from the beginning, "CleartextPassword" has been set (without an Auth-Type) but for some reason the program chooses Local automatically. It is probably a default setting of FreeRadius to go Local when it doesn't find an Auth method. However, what I don't understand is why it doesn't find an authentication method if I have already configured the EAP.conf file with MD5 and have it in the Authorize and Authenticate sections of radiusd.conf O.n 10/9/07, tnt@kalik.co.yu <tnt@kalik.co.yu> wrote:
Now read my first reply again. It looks like you have replaced the password attribute, but left the Auth-Type.
Ivan Kalik Kalik Informatika ISP
Dana 9/10/2007, "inl2goal" <syaoran.sakura@gmail.com> piše:
Here is the debug output
When I run the server I get:
# ./radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 16214 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = yes preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded SQL sql: driver = "rlm_sql_mysql" sql: server = "localhost" sql: port = "" sql: login = "root" sql: password = "watchdog" sql: radius_db = "radius" sql: nas_table = "nas" sql: sqltrace = yes sql: sqltracefile = "/usr/local/var/log/radius/sqltrace.sql" sql: readclients = yes sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '%{SQL-User-Name}'
ORDER
BY id" sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute, radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" sql: accounting_update_query = " UPDATE radacct SET FramedIPAddress = '%{Framed-IP-Address}', AcctSessionTime = '%{Acct-Session-Time}', + AcctInputOctets = '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', AcctOutputOctets = '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_update_query_alt = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm,
NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, XAscendSessionSvrKey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}',
'%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}',
'%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay, XAscendSessionSvrKey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time:-0}', '0', '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query = " UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', AcctOutputOctets = '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time:-0}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query_alt = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time:-0}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" sql: postauth_query = "INSERT into radpostauth (user, pass, reply, date) values ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to root@localhost:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 rlm_sql (sql): - generate_sql_clients rlm_sql (sql): Query: SELECT * FROM nas rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_mysql: query: SELECT * FROM nas rlm_sql (sql): Read entry nasname=w.x.y.z ,shortname=radius1,secret=holygrail rlm_sql (sql): Adding client w.x.y.z (radius1) to clients list rlm_sql (sql): Released sql socket id: 4 Module: Instantiated sql (sql) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:16214 Listening on accounting *:16215 Ready to process requests.
And when I send the request after connecting to the switch I get:
rad_recv: Access-Request packet from host w.x.y.z:1645, id=3, length=125 User-Name = "power" Service-Type = Framed-User Framed-MTU = 1500 Called-Station-Id = "00-1A-A2-5B-43-83" Calling-Station-Id = "00-0B-CD-AA-ED-6D" EAP-Message = 0x0202000a01706f776572 Message-Authenticator = 0x58fa7799b0cf8b82e6216ce8048220d7 NAS-Port = 50003 NAS-Port-Type = Ethernet NAS-IP-Address = w.x.y.z Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 rlm_realm: No '@' in User-Name = "power", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 radius_xlat: 'power' rlm_sql (sql): sql_set_user escaped user --> 'power' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'power' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 3 rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'power' ORDER BY id radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'power' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'power' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'power' ORDER BY id' rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'power' ORDER BY id radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute, radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'power' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute, radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'power' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): Released sql socket id: 3 modcall[authorize]: module "sql" returns ok for request 0 modcall[authorize]: module "eap" returns noop for request 0 modcall: leaving group authorize (returns ok) for request 0 auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 3 to w.x.y.z port 1645 Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 3 with timestamp 470bb882 Nothing to do. Sleeping until we see a request.
Thank you
tnt wrote:
Post the whole debug (radiusd -X) then.
Ivan Kalik Kalik Informatika ISP
-- View this message in context: http://www.nabble.com/EAP%2BMD5%2BSQL-trouble-tf4571786.html#a13120808 Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Tue, 2007-10-09 at 16:33 -0500, Syaoran Li wrote:
Actually, all the way from the beginning, "CleartextPassword" has been set (without an Auth-Type) but for some reason the program chooses Local automatically. It is probably a default setting of FreeRadius to
No
go Local when it doesn't find an Auth method.
Something is setting Auth-Type to Local. From the debug you listed, the only modules which execute in "authorize" are: * preprocess * suffix (realm module) * sql * eap Since "suffix" and "eap" return noop, one of the following must be the case * Auth-Type is being set in preprocess (virtually impossible, and not a server default) * Auth-Type is being set in SQL * You edited the debug * You mangled the debug * There is some amazing bug in FreeRadius which no-one else has seen. I suggest you look in SQL again, carefully.
However, what I don't understand is why it doesn't find an authentication method if I have already configured the EAP.conf file with MD5 and have it in the Authorize and Authenticate sections of radiusd.conf
It doesn't find an authentication method because you have overridden it, by setting Auth-Type to Local. This is the fourth time you've been told this.
Phil Mayers wrote:
* Auth-Type is being set in preprocess (virtually impossible, and not a server default) * Auth-Type is being set in SQL * You edited the debug * You mangled the debug * There is some amazing bug in FreeRadius which no-one else has seen.
I didn't edit anything in the preprocess so it should be okay My SQL tables: mysql> select * from radcheck; +----+----------+--------------------+----+---------+ | id | UserName | Attribute | op | Value | +----+----------+--------------------+----+---------+ | 1 | tortuga | Cleartext-Password | := | ninja | | 2 | bob | Cleartext-Password | := | esponja | | 3 | power | Cleartext-Password | := | ranger | +----+----------+--------------------+----+---------+ mysql> select * from radgroupcheck; Empty set (0.00 sec) That covers the SQL There is no Auth-Type = local anywhere... I ran a search for those too in all radiusd, eap, sql configuration files and there are none. I'll run more tests later but I really don't think the problem is with me setting the Auth-Type anywhere. -- View this message in context: http://www.nabble.com/EAP%2BMD5%2BSQL-trouble-tf4571786.html#a13157094 Sent from the FreeRadius - User mailing list archive at Nabble.com.
Dear All, I have a big problem with my freeRadius server the log file each less than a minute logs that the server can't allocate memory Error: FATAL: Thread create failed: Cannot allocate memory I have this configuration start_servers = 20 max_servers = 400 min_spare_servers = 30 max_spare_servers = 60 max_requests_per_server = 0 i have 4G memory , this is the Top result Mem: 4090068k av, 420312k used, 3669756k free, 0k shrd, 15408k buff i got about 3G free memory , how comes that the radius can't allocate memory !!
Amr el-Saeed wrote:
the log file each less than a minute logs that the server can't allocate memory
Error: FATAL: Thread create failed: Cannot allocate memory
Odds are that the server is trying to start too many threads, and that there is some OS limitation on the number of threads per process. What version of the server are you running? What OS are you running? How many requests does the server receive normally? Alan DeKok.
Dear Alan, OS: Red Hat Enterprise Linux AS release 3 FreRadius : freeradius-1.1.0-1 Number of requests : i need about 10,000 request concurrent the server starts and after 1 or 2 mins it crashes does any thing of my configuration is wrong ? and how to fine tune my freeRadius server ?? thanks Alan DeKok wrote:
Amr el-Saeed wrote:
the log file each less than a minute logs that the server can't allocate memory
Error: FATAL: Thread create failed: Cannot allocate memory
Odds are that the server is trying to start too many threads, and that there is some OS limitation on the number of threads per process.
What version of the server are you running? What OS are you running? How many requests does the server receive normally?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Amr el-Saeed wrote:
OS: Red Hat Enterprise Linux AS release 3 FreRadius : freeradius-1.1.0-1
Why not 1.1.7? Let me guess... RedHat doesn't ship it.
Number of requests : i need about 10,000 request concurrent
I don't know what that means. 10,000 requests per second? Or 10,000 users in the database?
does any thing of my configuration is wrong ?
I have no idea. You haven't posted any of your configuration, so it's impossible for me to comment on it. Alan DeKok.
Sorry the config. was in the first email I have this configuration start_servers = 20 max_servers = 400 min_spare_servers = 30 max_spare_servers = 60 max_requests_per_server = 0 i have 4G memory , this is the Top result Mem: 4090068k av, 420312k used, 3669756k free, 0k shrd, 15408k buff i need 10,000 per second Alan DeKok wrote:
Amr el-Saeed wrote:
OS: Red Hat Enterprise Linux AS release 3 FreRadius : freeradius-1.1.0-1
Why not 1.1.7? Let me guess... RedHat doesn't ship it.
Number of requests : i need about 10,000 request concurrent
I don't know what that means. 10,000 requests per second? Or 10,000 users in the database?
does any thing of my configuration is wrong ?
I have no idea. You haven't posted any of your configuration, so it's impossible for me to comment on it.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Amr el-Saeed wrote:
Sorry the config. was in the first email
I have this configuration . ... thread stuff. There's usually a LOT more configuration than that.
start_servers = 20 max_servers = 400 min_spare_servers = 30 max_spare_servers = 60
I would suggest setting: start_servers = 400 max_servers = 400 min_spare_servers = 0 max_spare_servers = 400 If the server doesn't start with those parameters, it's because your OS doesn't let you start that many threads. In that case, go fix the OS.
i need 10,000 per second
I doubt that very much. That's a billion packets per day. Or, it's 500K users logged in all of the time, each of whom is online for only 10 minutes. There are large ISP's with 10+ million users who see only hundreds of requests per second. You're talking about 100 times that, which is very unusual. Please explain why you need such a HUGE number of requests. It may help solve the problem you're seeing. Do you have a billion users in your ISP? Or do you have fewer users than that? How many users do you expect to see online at once? How many minutes are they online for at a time? Also, most databases can't handle 10k writes per second, (some can't handle 10k *reads* per second). So it's very doubtful that you'll be able to do anything with 10k packets/s, even if the RADIUS server itself can handle them. I'm not aware of a single RADIUS installation on the planet that needs 10K packets per second. And even the ones that handle hundreds to thousands of packets per second split those packets among multiple machines. i.e. If you have a 10M users in your ISP, you can't afford to have everyone go offline because your ONLY RADIUS server died. You will need 4-5 RADIUS servers for service stability, at least. The result is that any one RADIUS machine will normally NEVER handle more than a few hundred packets per second. If you need more than that, your network is designed wrong. Alan DeKok.
Dear Alan, Thanks for your reply first, i have about 200,000 users but there is some thin g in the configuration that makes the users connects and disconnects in less than 15 minutes , and that makes that huge number of requests (it's a temp. situation ) of-course. second i tried the configuration you sent. the server didn't start, so i guess it OS problem as you said but how to fix it ?? can you help me with that ?? thanks again Amr Alan DeKok wrote:
Amr el-Saeed wrote:
Sorry the config. was in the first email
I have this configuration
. ... thread stuff. There's usually a LOT more configuration than that.
start_servers = 20 max_servers = 400 min_spare_servers = 30 max_spare_servers = 60
I would suggest setting:
start_servers = 400 max_servers = 400 min_spare_servers = 0 max_spare_servers = 400
If the server doesn't start with those parameters, it's because your OS doesn't let you start that many threads. In that case, go fix the OS.
i need 10,000 per second
I doubt that very much. That's a billion packets per day. Or, it's 500K users logged in all of the time, each of whom is online for only 10 minutes.
There are large ISP's with 10+ million users who see only hundreds of requests per second. You're talking about 100 times that, which is very unusual.
Please explain why you need such a HUGE number of requests. It may help solve the problem you're seeing. Do you have a billion users in your ISP? Or do you have fewer users than that? How many users do you expect to see online at once? How many minutes are they online for at a time?
Also, most databases can't handle 10k writes per second, (some can't handle 10k *reads* per second). So it's very doubtful that you'll be able to do anything with 10k packets/s, even if the RADIUS server itself can handle them.
I'm not aware of a single RADIUS installation on the planet that needs 10K packets per second. And even the ones that handle hundreds to thousands of packets per second split those packets among multiple machines. i.e. If you have a 10M users in your ISP, you can't afford to have everyone go offline because your ONLY RADIUS server died. You will need 4-5 RADIUS servers for service stability, at least.
The result is that any one RADIUS machine will normally NEVER handle more than a few hundred packets per second. If you need more than that, your network is designed wrong.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Amr el-Saeed wrote:
first, i have about 200,000 users but there is some thin g in the configuration that makes the users connects and disconnects in less than 15 minutes , and that makes that huge number of requests (it's a temp. situation ) of-course.
Well, that should be fixed.
second i tried the configuration you sent. the server didn't start, so i guess it OS problem as you said but how to fix it ?? can you help me with that ??
Would it be possible for you to say the error (if any) it produced? Or does the server silently not work? Alan DeKok.
i'm running Linux version 2.4.21-51.EL (brewbuilder@ls20-bc2-14.build.redhat.com) (gcc version 3.2.3 20030502 (Red Hat Linux 3.2.3-58)) Amr el-Saeed wrote:
Dear Alan,
Thanks for your reply
first, i have about 200,000 users but there is some thin g in the configuration that makes the users connects and disconnects in less than 15 minutes , and that makes that huge number of requests (it's a temp. situation ) of-course.
second i tried the configuration you sent. the server didn't start, so i guess it OS problem as you said but how to fix it ?? can you help me with that ??
thanks again Amr
Alan DeKok wrote:
Amr el-Saeed wrote:
Sorry the config. was in the first email
I have this configuration
. ... thread stuff. There's usually a LOT more configuration than that.
start_servers = 20 max_servers = 400 min_spare_servers = 30 max_spare_servers = 60
I would suggest setting:
start_servers = 400 max_servers = 400 min_spare_servers = 0 max_spare_servers = 400
If the server doesn't start with those parameters, it's because your OS doesn't let you start that many threads. In that case, go fix the OS.
i need 10,000 per second
I doubt that very much. That's a billion packets per day. Or, it's 500K users logged in all of the time, each of whom is online for only 10 minutes.
There are large ISP's with 10+ million users who see only hundreds of requests per second. You're talking about 100 times that, which is very unusual.
Please explain why you need such a HUGE number of requests. It may help solve the problem you're seeing. Do you have a billion users in your ISP? Or do you have fewer users than that? How many users do you expect to see online at once? How many minutes are they online for at a time?
Also, most databases can't handle 10k writes per second, (some can't handle 10k *reads* per second). So it's very doubtful that you'll be able to do anything with 10k packets/s, even if the RADIUS server itself can handle them.
I'm not aware of a single RADIUS installation on the planet that needs 10K packets per second. And even the ones that handle hundreds to thousands of packets per second split those packets among multiple machines. i.e. If you have a 10M users in your ISP, you can't afford to have everyone go offline because your ONLY RADIUS server died. You will need 4-5 RADIUS servers for service stability, at least.
The result is that any one RADIUS machine will normally NEVER handle more than a few hundred packets per second. If you need more than that, your network is designed wrong.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
after the server finishes starting the mysql connections, it prints that error Error: FATAL: Thread create failed: Cannot allocate memory , and starts to connect to mysql again and the error again and so on Amr el-Saeed wrote:
i'm running Linux version 2.4.21-51.EL (brewbuilder@ls20-bc2-14.build.redhat.com) (gcc version 3.2.3 20030502 (Red Hat Linux 3.2.3-58))
Dear Alan,
Thanks for your reply
first, i have about 200,000 users but there is some thin g in the configuration that makes the users connects and disconnects in less than 15 minutes , and that makes that huge number of requests (it's a temp. situation ) of-course.
second i tried the configuration you sent. the server didn't start, so i guess it OS problem as you said but how to fix it ?? can you help me with that ??
thanks again Amr
Alan DeKok wrote:
Amr el-Saeed wrote:
Sorry the config. was in the first email
I have this configuration
. ... thread stuff. There's usually a LOT more configuration than that.
start_servers = 20 max_servers = 400 min_spare_servers = 30 max_spare_servers = 60
I would suggest setting:
start_servers = 400 max_servers = 400 min_spare_servers = 0 max_spare_servers = 400
If the server doesn't start with those parameters, it's because your OS doesn't let you start that many threads. In that case, go fix the OS.
i need 10,000 per second
I doubt that very much. That's a billion packets per day. Or, it's 500K users logged in all of the time, each of whom is online for only 10 minutes.
There are large ISP's with 10+ million users who see only hundreds of requests per second. You're talking about 100 times that, which is very unusual.
Please explain why you need such a HUGE number of requests. It may help solve the problem you're seeing. Do you have a billion users in your ISP? Or do you have fewer users than that? How many users do you expect to see online at once? How many minutes are they online for at a time?
Also, most databases can't handle 10k writes per second, (some can't handle 10k *reads* per second). So it's very doubtful that you'll be able to do anything with 10k packets/s, even if the RADIUS server itself can handle them.
I'm not aware of a single RADIUS installation on the planet that needs 10K packets per second. And even the ones that handle hundreds to thousands of packets per second split those packets among multiple machines. i.e. If you have a 10M users in your ISP, you can't afford to have everyone go offline because your ONLY RADIUS server died. You will need 4-5 RADIUS servers for service stability, at least.
The result is that any one RADIUS machine will normally NEVER handle more than a few hundred packets per second. If you need more than that, your network is designed wrong.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Amr el-Saeed wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Amr el-Saeed wrote:
after the server finishes starting the mysql connections, it prints that error Error: FATAL: Thread create failed: Cannot allocate memory , and starts to connect to mysql again and the error again and so on
It sounds like your system doesn't support threads that well. If you really need 10k packets/s, your best bet is to temporarily use more than one machine to handle the RADIUS requests. Alan DeKok.
Amr, Please include some details. What Operating System What Version of Free Radius? How Long has the server been running? What changed before this started happening? Thanks On 10/11/07 9:01 AM, "Amr el-Saeed" <amr.elsaeed@tedata.net> wrote:
Dear All,
I have a big problem with my freeRadius server
the log file each less than a minute logs that the server can't allocate memory
Error: FATAL: Thread create failed: Cannot allocate memory
I have this configuration
start_servers = 20 max_servers = 400 min_spare_servers = 30 max_spare_servers = 60 max_requests_per_server = 0
i have 4G memory , this is the Top result
Mem: 4090068k av, 420312k used, 3669756k free, 0k shrd, 15408k buff
i got about 3G free memory , how comes that the radius can't allocate memory !!
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
What freeradius version is this? If it is 1.1.7 leave radiusd.conf as default. Comment out the DEFAULT entry with Auth-Type System in users file (since you are using sql and not files). EAP-MD5 will work then. As Alan says: EAP-MD5 "just works". I have set it up on the test system and tested it in 5 minutes (Slackware10/Freeradius 1.17./MySQL 5). Ivan Kalik Kalik Informatika ISP Dana 11/10/2007, "inl2goal" <syaoran.sakura@gmail.com> piše:
Phil Mayers wrote:
* Auth-Type is being set in preprocess (virtually impossible, and not a server default) * Auth-Type is being set in SQL * You edited the debug * You mangled the debug * There is some amazing bug in FreeRadius which no-one else has seen.
I didn't edit anything in the preprocess so it should be okay
My SQL tables:
mysql> select * from radcheck; +----+----------+--------------------+----+---------+ | id | UserName | Attribute | op | Value | +----+----------+--------------------+----+---------+ | 1 | tortuga | Cleartext-Password | := | ninja | | 2 | bob | Cleartext-Password | := | esponja | | 3 | power | Cleartext-Password | := | ranger | +----+----------+--------------------+----+---------+
mysql> select * from radgroupcheck; Empty set (0.00 sec)
That covers the SQL
There is no Auth-Type = local anywhere...
I ran a search for those too in all radiusd, eap, sql configuration files and there are none. I'll run more tests later but I really don't think the problem is with me setting the Auth-Type anywhere. -- View this message in context: http://www.nabble.com/EAP%2BMD5%2BSQL-trouble-tf4571786.html#a13157094 Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thank you very much for your help. I reinstalled freeradius and it worked without me having to change anything. Thank you -O tnt wrote:
What freeradius version is this?
If it is 1.1.7 leave radiusd.conf as default. Comment out the DEFAULT entry with Auth-Type System in users file (since you are using sql and not files).
EAP-MD5 will work then. As Alan says: EAP-MD5 "just works". I have set it up on the test system and tested it in 5 minutes (Slackware10/Freeradius 1.17./MySQL 5).
Ivan Kalik Kalik Informatika ISP
Dana 11/10/2007, "inl2goal" <syaoran.sakura@gmail.com> piše:
Phil Mayers wrote:
* Auth-Type is being set in preprocess (virtually impossible, and not a server default) * Auth-Type is being set in SQL * You edited the debug * You mangled the debug * There is some amazing bug in FreeRadius which no-one else has seen.
I didn't edit anything in the preprocess so it should be okay
My SQL tables:
mysql> select * from radcheck; +----+----------+--------------------+----+---------+ | id | UserName | Attribute | op | Value | +----+----------+--------------------+----+---------+ | 1 | tortuga | Cleartext-Password | := | ninja | | 2 | bob | Cleartext-Password | := | esponja | | 3 | power | Cleartext-Password | := | ranger | +----+----------+--------------------+----+---------+
mysql> select * from radgroupcheck; Empty set (0.00 sec)
That covers the SQL
There is no Auth-Type = local anywhere...
I ran a search for those too in all radiusd, eap, sql configuration files and there are none. I'll run more tests later but I really don't think the problem is with me setting the Auth-Type anywhere. -- View this message in context:
http://www.nabble.com/EAP%2BMD5%2BSQL-trouble-tf4571786.html#a13157094
Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://www.nabble.com/EAP%2BMD5%2BSQL-trouble-tf4571786.html#a13243051 Sent from the FreeRadius - User mailing list archive at Nabble.com.
participants (7)
-
Alan DeKok -
Amr el-Saeed -
inl2goal -
Kent Thomas -
Phil Mayers -
Syaoran Li
-
tnt＠kalik.co.yu