Fwd: free radius 3.0.2 not reading nas clients from daloradius db
Hello I have setup freeradius 3.0.2 with dalorad and coovachilli. I have searched a lot but couldnt find a solution to my issue. The issue is that it is not reading from the database. When i try to login, *Ignoring request to auth address * port 1812 as server default from unknown client (192.168.211.195) port 46623 proto udp* i have made entries in the nas table for the client. when reading from the radius conf file, it works but when trying to read from db this issue pops up. Please help. Attaching radiusd -X log Please advise
thanks for your reply earlier. On freeradius 3.0.4, i get teh error "no known good password found for the user" radiusd log is attached On Sat, Oct 11, 2014 at 9:16 PM, Alan DeKok <aland@deployingradius.com> wrote:
Abdullah wrote:
I have setup freeradius 3.0.2
Please use 3.0.4.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
apologies for not adding initial part of radiusd -X its attached now On Sun, Oct 12, 2014 at 11:34 AM, Abdullah <b.hawks123@gmail.com> wrote:
thanks for your reply earlier. On freeradius 3.0.4, i get teh error "no known good password found for the user" radiusd log is attached
On Sat, Oct 11, 2014 at 9:16 PM, Alan DeKok <aland@deployingradius.com> wrote:
Abdullah wrote:
I have setup freeradius 3.0.2
Please use 3.0.4.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
just noticed log files not attached correctly, reattaching On Sun, Oct 12, 2014 at 12:07 PM, Abdullah <b.hawks123@gmail.com> wrote:
apologies for not adding initial part of radiusd -X its attached now
On Sun, Oct 12, 2014 at 11:34 AM, Abdullah <b.hawks123@gmail.com> wrote:
thanks for your reply earlier. On freeradius 3.0.4, i get teh error "no known good password found for the user" radiusd log is attached
On Sat, Oct 11, 2014 at 9:16 PM, Alan DeKok <aland@deployingradius.com> wrote:
Abdullah wrote:
I have setup freeradius 3.0.2
Please use 3.0.4.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
err i am trying to authenticate from sql, not the users file On Sun, Oct 12, 2014 at 5:03 PM, Alan DeKok <aland@deployingradius.com> wrote:
Abdullah wrote:
just noticed log files not attached correctly, reattaching
Make sure you're editing the correct "users" file. In v3, it's moved to raddb/mods-config/files/authorize
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Abdullah wrote:
err i am trying to authenticate from sql, not the users file
Then read the debug log. The server doesn't use the SQL module when it receives an Access-Request. Go fix that. That's why we keep telling people to run in debugging mode. Because you're supposed to READ IT. When you want the server to get the user information from SQL, and the word "sql" doesn't appear in the debug output... the problem should be pretty obvious. Alan DeKok.
as far as i can tell from debug output, module sql has been loaded :/ *# Loaded module rlm_sql* * # Instantiating module "sql" from file /usr/local/etc/raddb/mods-enabled/sql* * sql {* * driver = "rlm_sql_null"* * server = "localhost"* * port = ""* * login = ""* * password = <<< secret >>>* * radius_db = "radius"* * read_groups = yes* * read_clients = yes* * delete_stale_sessions = yes* * sql_user_name = "%{User-Name}"* * default_user_profile = ""* * client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas"* * authorize_check_query = "# SELECT id, username, attribute, value, op # FROM radcheck # WHERE username = BINARY '%{SQL-User-Name}' # ORDER BY id"* * authorize_reply_query = "# SELECT id, username, attribute, value, op # FROM radreply # WHERE username = BINARY '%{SQL-User-Name}' # ORDER BY id"* * authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id"* * authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id"* * group_membership_query = "# SELECT groupname # FROM radusergroup # WHERE username = BINARY '%{SQL-User-Name}' # ORDER BY priority"* * simul_count_query = ""* * simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"* * safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"* * }* * accounting {* * reference = "%{tolower:type.%{Acct-Status-Type}.query}"* * }* * post-auth {* * reference = ".query"* * }* *rlm_sql (sql): Driver rlm_sql_null (module rlm_sql_null) loaded and linked* *rlm_sql (sql): Attempting to connect to database "radius"* *rlm_sql (sql): Initialising connection pool* * pool {* * start = 5* * min = 4* * max = 32* * spare = 3* * uses = 0* * lifetime = 0* * cleanup_interval = 30* * idle_timeout = 60* * retry_delay = 1* * spread = no* * }* *rlm_sql (sql): Opening additional connection (0)* *rlm_sql (sql): Opening additional connection (1)* *rlm_sql (sql): Opening additional connection (2)* *rlm_sql (sql): Opening additional connection (3)* *rlm_sql (sql): Opening additional connection (4)* *rlm_sql (sql): Processing generate_sql_clients* *rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret, server FROM nas* *rlm_sql (sql): Reserved connection (4)* *rlm_sql (sql): Executing query: 'SELECT id, nasname, shortname, type, secret, server FROM nas'* *rlm_sql (sql): Released connection (4)* * # Instantiating module "detail" from file /usr/local/etc/raddb/mods-enabled/detail* * detail {* * filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d"* * header = "%t"* * permissions = 384* * dir_permissions = 493* * locking = no* * log_packet_header = no* * }* what am i missing? On Sun, Oct 12, 2014 at 5:15 PM, Alan DeKok <aland@deployingradius.com> wrote:
Abdullah wrote:
err i am trying to authenticate from sql, not the users file
Then read the debug log. The server doesn't use the SQL module when it receives an Access-Request. Go fix that.
That's why we keep telling people to run in debugging mode. Because you're supposed to READ IT.
When you want the server to get the user information from SQL, and the word "sql" doesn't appear in the debug output... the problem should be pretty obvious.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 12.10.2014 14:37, Abdullah wrote:
The server doesn't use the SQL module when it receives an Access-Request.
As Alan already wrote - SQL module is loaded, but it is NOT USED when the server recieves Access-Request. You need to have "sql" in your "auth" section for authenticating users from a SQL database. E:S
i have already added/uncommented sql in authorization section is there any place else that it needs to be added?
Abdullah wrote:
i have already added/uncommented sql in authorization section
No. The debug output doesn't lie. The server isn't using SQL in the authorize section.
is there any place else that it needs to be added?
raddb/sites-enabled/default You're editing a file that the server isn't using. Alan DeKok.
found out i wasnt adding the line driver = "rlm_sql_mysql" to mods-enabled/sql but now i get the error *Could not link driver rlm_sql_mysql: rlm_sql_mysql.so: cannot open shared object file: No such file or directory* i have confirmed that mysql-dev is installed on my system. i compiled freeradiius from source, does it install freeradius-mysql by default when compiling from source? On Sun, Oct 12, 2014 at 6:08 PM, Alan DeKok <aland@deployingradius.com> wrote:
Abdullah wrote:
i have already added/uncommented sql in authorization section
No.
The debug output doesn't lie. The server isn't using SQL in the authorize section.
is there any place else that it needs to be added?
raddb/sites-enabled/default
You're editing a file that the server isn't using.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Was the dev package installed when you built FR? You may need to pipe the configure output through | grep WARNING to see whats occurring And don't use 3.0.2 is old and has many known bugs which is why 3.0.4 exists... alan
well i have made some progress i figured out that in sql.conf driver was set to null so i changed it to *driver = "rlm_sql_mysql"* and *dialect = "mysql"* so that sql = not found message form log is gone however that no known good password found is still persisting i am attaching the log Please guide me as to what mistake i am making On Sun, Oct 12, 2014 at 7:07 AM, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Was the dev package installed when you built FR? You may need to pipe the configure output through | grep WARNING to see whats occurring
And don't use 3.0.2 is old and has many known bugs which is why 3.0.4 exists...
alan
Read the debug output: # Loading authorize {...} Ignoring "sql" (see raddb/mods-available/README.rst) Ignoring "ldap" (see raddb/mods-available/README.rst) You are not all configured correctly. alan
The default null sql driver is loaded by default. You need to configure whatever sql you are using in the mods-enabled/sql and then it will spring into life as is a conditional module (-sql) unless you've been breaking the default config alan
participants (4)
-
"Edvin Seferovic | Kolpinghaus St. Pölten" -
Abdullah -
Alan Buxey -
Alan DeKok