Hello, Could somebody tell us which tutorial /wiki can we follow in order to properly configure freeradius 3.0.16? Thanks in advance BR Javier Escalante Business Development Manager <mailto:Javier.escalante@bwireless.eu> Javier.escalante@bwireless.eu <tel:00%2034%20626%2078%2056%2075> 00 34 626 785 675 <tel:00%2034%2093%20172%2006%2074> 00 34 93 141 56 36 <tel:00%2041%2078%20689%2085%2069> 00 41 78 689 85 69 Skype: fruiz002 Do you know our IoT solutions? Have a look here: <http://www.bsmart.global/> www.bsmart.global <http://www.bwireless.eu/> http://www.bwireless.eu Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de BW & TAKACS TELECOM, S.L. para las finalidades de su e-mail. Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a BW & TAKACS TELECOM, S.L. con domicilio en <https://maps.google.com/?q=Camil+Oliveras,+26,+08032+Barcelona+(Espa%C3%B1a &entry=gmail&source=g> Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico <mailto:info@bwireless.eu> info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique.
On Jun 22, 2018, at 7:21 AM, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
Could somebody tell us which tutorial /wiki can we follow in order to properly configure freeradius 3.0.16?
No.
For everyone else: people here have spent a LOT of time helping in this situation. It's been clear that our help has largely been ignored. There's only so much time you can spend before realizing that it's a lost cause. There is *extensive* documentation for pretty much everything related to the server. If someone reads the documentation and asks specific questions, we're happy to help. If someone can't be bothered to click on the "documentation" link on the web site, then there is no reason for *us* to do so, either. Alan DeKok.
On 22/06/18 08:33, Javier Escalante wrote:
Could somebody tell us which tutorial /wiki can we follow in order to properly configure freeradius 3.0.16?
There's this: https://wiki.freeradius.org/Home This is out of date but may help explain some of the concepts: http://yustanto.com/freeradius.pdf This I believe explains the changes since that book was produced: https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/README.rst
On Jun 22, 2018, at 7:48 AM, Dom Latter <freeradius-users@latter.org> wrote:
On 22/06/18 08:33, Javier Escalante wrote:
Could somebody tell us which tutorial /wiki can we follow in order to properly configure freeradius 3.0.16?
There's this:
https://wiki.freeradius.org/Home
This is out of date but may help explain some of the concepts:
http://yustanto.com/freeradius.pdf
This I believe explains the changes since that book was produced:
https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/README.rst
Oh there are a whole bunch, the first two links in the wiki do a pretty good job of explaining the basics. But when you don't state anything about your intended use case, and expect other list users to elicit requirements from you, it comes across as pretty lazy and entitled. The mailing list serves as a resource for people wanting advice for different deployment scenarios, or who need answers at a greater level of technical detail than the inline comments and other contributed/official documentation provides. The idea is that as it's indexed, it forms part of the documentation of the server, which benefits everyone. By asking non-specific and impossibly general questions, the OP provides no benefit to the community. -Arran
Is it not specific the error I get? I have radius 2.2 working since ages... the documentation is not accurate and does not give answer to my questions. Javier Escalante Business Development Manager Javier.escalante@bwireless.eu 00 34 626 785 675 00 34 93 141 56 36 00 41 78 689 85 69 Skype: fruiz002 Do you know our IoT solutions? Have a look here: www.bsmart.global http://www.bwireless.eu Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de BW & TAKACS TELECOM, S.L. para las finalidades de su e-mail. Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a BW & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique. -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=bwireless.eu@lists.freerad ius.org] On Behalf Of Arran Cudbard-Bell Sent: viernes, 22 de junio de 2018 14:07 To: FreeRadius users mailing list Subject: Re: right tutorial
On Jun 22, 2018, at 7:48 AM, Dom Latter <freeradius-users@latter.org> wrote:
On 22/06/18 08:33, Javier Escalante wrote:
Could somebody tell us which tutorial /wiki can we follow in order to properly configure freeradius 3.0.16?
There's this:
https://wiki.freeradius.org/Home
This is out of date but may help explain some of the concepts:
http://yustanto.com/freeradius.pdf
This I believe explains the changes since that book was produced:
https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/READ ME.rst
Oh there are a whole bunch, the first two links in the wiki do a pretty good job of explaining the basics. But when you don't state anything about your intended use case, and expect other list users to elicit requirements from you, it comes across as pretty lazy and entitled. The mailing list serves as a resource for people wanting advice for different deployment scenarios, or who need answers at a greater level of technical detail than the inline comments and other contributed/official documentation provides. The idea is that as it's indexed, it forms part of the documentation of the server, which benefits everyone. By asking non-specific and impossibly general questions, the OP provides no benefit to the community. -Arran
On Jun 22, 2018, at 8:44 AM, Javier Escalante <Javier.Escalante@bwireless.eu> wrote:
Is it not specific the error I get? I have radius 2.2 working since ages... the documentation is not accurate and does not give answer to my questions.
There may be occasional typos, but the documentation is largely correct. Your issues are similar to many I've seen over the years. You're trying (as you say) 1000's of things, and none of them work. This means that you're trying the *wrong* things. And not trying the *right* things. You're also *not* answering questions people have for you. i.e. they ask you questions, and you ignore them, This means that people are trying to help you, and you're refusing their help. Everyone else manages to get things configured without too much trouble. So you can believe either that everyone else is lying and they don't get it configured, *or* you can believe you're doing something wrong. Follow the documentation. It *will* work. If it doesn't work, then you did something wrong. Post a message saying what documentation you read, *exactly* what you did, and then the debug output. Alan DeKok.
Which documentation exactly, there are 1000 webs with freeradius docs. Javier Escalante Business Development Manager Javier.escalante@bwireless.eu 00 34 626 785 675 00 34 93 141 56 36 00 41 78 689 85 69 Skype: fruiz002 Do you know our IoT solutions? Have a look here: www.bsmart.global http://www.bwireless.eu Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail. Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique. -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=bwireless.eu@lists.freeradius.org] On Behalf Of Alan DeKok Sent: viernes, 22 de junio de 2018 14:50 To: FreeRadius users mailing list Subject: Re: right tutorial On Jun 22, 2018, at 8:44 AM, Javier Escalante <Javier.Escalante@bwireless.eu> wrote:
Is it not specific the error I get? I have radius 2.2 working since ages... the documentation is not accurate and does not give answer to my questions.
There may be occasional typos, but the documentation is largely correct. Your issues are similar to many I've seen over the years. You're trying (as you say) 1000's of things, and none of them work. This means that you're trying the *wrong* things. And not trying the *right* things. You're also *not* answering questions people have for you. i.e. they ask you questions, and you ignore them, This means that people are trying to help you, and you're refusing their help. Everyone else manages to get things configured without too much trouble. So you can believe either that everyone else is lying and they don't get it configured, *or* you can believe you're doing something wrong. Follow the documentation. It *will* work. If it doesn't work, then you did something wrong. Post a message saying what documentation you read, *exactly* what you did, and then the debug output. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Jun 22, 2018, at 9:21 AM, Javier Escalante <Javier.Escalante@bwireless.eu> wrote:
Which documentation exactly, there are 1000 webs with freeradius docs.
The Wiki is searchable. Type in keywords for what you want to do, and read the docs. If you're going to read random documentation you find via "google", then ask THOSE people why their documentation is wrong. You do realize that we don't control what other people write in their blog posts, right? You do realize that the documentation on the *FREERADIUS.ORG* web site and Wiki is the official documentation, right? Or, are you doing to insist on reading shitty documentation written by random people on the net, and then complain to US that it's wrong? You do realize why that's wrong, ignorant, and unhelpful? You're doing everything you can to avoid learning, and to avoid following instructions. If you don't want to solve the problem, then you should stop posting to this list. If you do want to solve the problem, then stop being lazy. Alan DeKok.
hi, Could somebody tell us which tutorial /wiki can we follow in order to
properly configure freeradius 3.0.16?
properly configure? you need to define what it is you are trying to do. based on other replies there is history here that I havent seen (or deleted amongst deluge of other posts) one persons requirement/use-case rarely matches with another. take FreeRADIUS 3.0.16 - either built form source or via package. then follow the guides (or read the docs in the config files themselves) as required. DONT hack a load of the config around , start with basics (as per docs) alan
Hello, Sorry guys, based on the answers of Alan, I might be stupid...I'll explain another time and I hope this time I get some help: 1. I installed a fresh server (I have my all server already configured and working since 4 years) 2. I installed freeradius 3.0.16 and mysql. No errors during installation 3. I tested with user and password in file, and it worked perfectly 4. I tested by putting the user test with password test in radcheck and the authentication failed as it is shown further down. 5. I have searched in all kind of forums and obviously also in www.freeradius.org. No solution yet. 6. The sql seems to be working despite the include line is not uncommented in radiusd.conf. Can somebody confirm? Can anybody give me a clue of how to solve this problem? Request: radtest test test localhost 10 1107 Freeradius debug output: Ready to process requests (0) Received Access-Request Id 195 from 127.0.0.1:37474 to 127.0.0.1:1812 length 74 (0) User-Name = "test" (0) User-Password = "test" (0) NAS-IP-Address = 5.135.246.127 (0) NAS-Port = 10 (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27 (0) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/de fault (0) authorize { (0) [preprocess] = ok (0) [chap] = noop (0) [mschap] = noop (0) [digest] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "test", looking up realm NULL (0) suffix: No such realm "NULL" (0) [suffix] = noop (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) [files] = noop (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' rlm_sql (sql): Reserved connection (0) (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE us ername = '%{SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE us ername = 'test' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User- Name}' ORDER BY priority (0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE userna me = 'test' ORDER BY priority (0) sql: User not found in any groups rlm_sql (sql): Released connection (0) Need 5 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots used (0) [sql] = notfound (0) [expiration] = noop (0) [logintime] = noop (0) pap: WARNING: No "known good" password found for the user. Not setting Auth -Type (0) pap: WARNING: Authentication will fail unless a "known good" password is ava ilable (0) [pap] = noop (0) } # authorize = ok (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user (0) Using Post-Auth-Type Reject (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) Post-Auth-Type REJECT { (0) sql: EXPAND .query (0) sql: --> .query (0) sql: Using query template 'query' rlm_sql (sql): Reserved connection (1) (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet- Type}', '%S') (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', 'test', 'Access-Reject', '2018-06-24 13:55:21') (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authda te) VALUES ( 'test', 'test', 'Access-Reject', '2018-06-24 13:55:21') (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (1) (0) [sql] = ok (0) attr_filter.access_reject: EXPAND %{User-Name} (0) attr_filter.access_reject: --> test (0) attr_filter.access_reject: Matched entry DEFAULT at line 11 (0) [attr_filter.access_reject] = updated (0) [eap] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # Post-Auth-Type REJECT = updated (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474 length 20 Waking up in 3.9 seconds. (0) Cleaning up request packet ID 195 with timestamp +2 Ready to process requests Thanks in advance BR Javier Escalante Business Development Manager Javier.escalante@bwireless.eu 00 34 626 785 675 00 34 93 141 56 36 00 41 78 689 85 69 Skype: fruiz002 Do you know our IoT solutions? Have a look here: www.bsmart.global http://www.bwireless.eu Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail. Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique. -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey Sent: viernes, 22 de junio de 2018 20:06 To: FreeRadius users mailing list Subject: Re: right tutorial hi, Could somebody tell us which tutorial /wiki can we follow in order to
properly configure freeradius 3.0.16?
properly configure? you need to define what it is you are trying to do. based on other replies there is history here that I havent seen (or deleted amongst deluge of other posts) one persons requirement/use-case rarely matches with another. take FreeRADIUS 3.0.16 - either built form source or via package. then follow the guides (or read the docs in the config files themselves) as required. DONT hack a load of the config around , start with basics (as per docs) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Javier, I'm a new user but from your debug output i think this is the problem : WARNING: No "known good" password found for the user. Not setting Auth -Type (0) pap: WARNING: Authentication will fail unless a "known good" password is ava ilable How did you insert the user into radcheck. To insert password the sql statement is Insert into radcheck (username, attribute, value, op) values('test', 'Cleartext-Password', 'test', ':='); something of the sort. hope it helps. On Sun, Jun 24, 2018, 14:57 Javier Escalante <Javier.Escalante@bwireless.eu> wrote:
Hello,
Sorry guys, based on the answers of Alan, I might be stupid...I'll explain another time and I hope this time I get some help:
1. I installed a fresh server (I have my all server already configured and working since 4 years) 2. I installed freeradius 3.0.16 and mysql. No errors during installation 3. I tested with user and password in file, and it worked perfectly 4. I tested by putting the user test with password test in radcheck and the authentication failed as it is shown further down. 5. I have searched in all kind of forums and obviously also in www.freeradius.org. No solution yet. 6. The sql seems to be working despite the include line is not uncommented in radiusd.conf. Can somebody confirm?
Can anybody give me a clue of how to solve this problem?
Request:
radtest test test localhost 10 1107
Freeradius debug output:
Ready to process requests (0) Received Access-Request Id 195 from 127.0.0.1:37474 to 127.0.0.1:1812 length 74 (0) User-Name = "test" (0) User-Password = "test" (0) NAS-IP-Address = 5.135.246.127 (0) NAS-Port = 10 (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27 (0) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/de fault (0) authorize { (0) [preprocess] = ok (0) [chap] = noop (0) [mschap] = noop (0) [digest] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "test", looking up realm NULL (0) suffix: No such realm "NULL" (0) [suffix] = noop (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) [files] = noop (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' rlm_sql (sql): Reserved connection (0) (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE us ername = '%{SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE us ername = 'test' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User- Name}' ORDER BY priority (0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE userna me = 'test' ORDER BY priority (0) sql: User not found in any groups rlm_sql (sql): Released connection (0) Need 5 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots used (0) [sql] = notfound (0) [expiration] = noop (0) [logintime] = noop (0) pap: WARNING: No "known good" password found for the user. Not setting Auth -Type (0) pap: WARNING: Authentication will fail unless a "known good" password is ava ilable (0) [pap] = noop (0) } # authorize = ok (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user (0) Using Post-Auth-Type Reject (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) Post-Auth-Type REJECT { (0) sql: EXPAND .query (0) sql: --> .query (0) sql: Using query template 'query' rlm_sql (sql): Reserved connection (1) (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-
Type}', '%S') (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', 'test', 'Access-Reject', '2018-06-24 13:55:21') (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authda te) VALUES ( 'test', 'test', 'Access-Reject', '2018-06-24 13:55:21') (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (1) (0) [sql] = ok (0) attr_filter.access_reject: EXPAND %{User-Name} (0) attr_filter.access_reject: --> test (0) attr_filter.access_reject: Matched entry DEFAULT at line 11 (0) [attr_filter.access_reject] = updated (0) [eap] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # Post-Auth-Type REJECT = updated (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474 length 20 Waking up in 3.9 seconds. (0) Cleaning up request packet ID 195 with timestamp +2 Ready to process requests
Thanks in advance
BR
Javier Escalante Business Development Manager Javier.escalante@bwireless.eu 00 34 626 785 675 00 34 93 141 56 36 00 41 78 689 85 69 Skype: fruiz002 Do you know our IoT solutions? Have a look here: www.bsmart.global http://www.bwireless.eu Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail. Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique.
-----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante= bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey Sent: viernes, 22 de junio de 2018 20:06 To: FreeRadius users mailing list Subject: Re: right tutorial
hi,
Could somebody tell us which tutorial /wiki can we follow in order to
properly configure freeradius 3.0.16?
properly configure? you need to define what it is you are trying to do. based on other replies there is history here that I havent seen (or deleted amongst deluge of other posts) one persons requirement/use-case rarely matches with another.
take FreeRADIUS 3.0.16 - either built form source or via package. then follow the guides (or read the docs in the config files themselves) as required.
DONT hack a load of the config around , start with basics (as per docs)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello, The way you described is the way I did, exactly like the wiki. And I know what is the problem, what I cannot find is the way to solve it. BR Sent from my Huawei Mobile -------- Original Message -------- Subject: Re: right tutorial From: Uchenna Nebedum To: FreeRadius users mailing list CC: Hi Javier, I'm a new user but from your debug output i think this is the problem : WARNING: No "known good" password found for the user. Not setting Auth -Type (0) pap: WARNING: Authentication will fail unless a "known good" password is ava ilable How did you insert the user into radcheck. To insert password the sql statement is Insert into radcheck (username, attribute, value, op) values('test', 'Cleartext-Password', 'test', ':='); something of the sort. hope it helps. On Sun, Jun 24, 2018, 14:57 Javier Escalante wrote: > Hello, > > Sorry guys, based on the answers of Alan, I might be stupid...I'll explain > another time and I hope this time I get some help: > > 1. I installed a fresh server (I have my all server already configured and > working since 4 years) > 2. I installed freeradius 3.0.16 and mysql. No errors during installation > 3. I tested with user and password in file, and it worked perfectly > 4. I tested by putting the user test with password test in radcheck and > the authentication failed as it is shown further down. > 5. I have searched in all kind of forums and obviously also in > www.freeradius.org. No solution yet. > 6. The sql seems to be working despite the include line is not uncommented > in radiusd.conf. Can somebody confirm? > > Can anybody give me a clue of how to solve this problem? > > Request: > > radtest test test localhost 10 1107 > > Freeradius debug output: > > Ready to process requests > (0) Received Access-Request Id 195 from 127.0.0.1:37474 to 127.0.0.1:1812 > length > 74 > (0) User-Name = "test" > (0) User-Password = "test" > (0) NAS-IP-Address = 5.135.246.127 > (0) NAS-Port = 10 > (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27 > (0) # Executing section authorize from file > /etc/freeradius/3.0/sites-enabled/de > fault > (0) authorize { > (0) [preprocess] = ok > (0) [chap] = noop > (0) [mschap] = noop > (0) [digest] = noop > (0) suffix: Checking for suffix after "@" > (0) suffix: No '@' in User-Name = "test", looking up realm NULL > (0) suffix: No such realm "NULL" > (0) [suffix] = noop > (0) eap: No EAP-Message, not doing EAP > (0) [eap] = noop > (0) [files] = noop > (0) sql: EXPAND %{User-Name} > (0) sql: --> test > (0) sql: SQL-User-Name set to 'test' > rlm_sql (sql): Reserved connection (0) > (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck > WHERE us > ername = '%{SQL-User-Name}' ORDER BY id > (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck > WHERE us > ername = 'test' ORDER BY id > (0) sql: Executing select query: SELECT id, username, attribute, value, op > FROM > radcheck WHERE username = 'test' ORDER BY id > (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = > '%{SQL-User- > Name}' ORDER BY priority > (0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'test' > ORDER > BY priority > (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE > userna > me = 'test' ORDER BY priority > (0) sql: User not found in any groups > rlm_sql (sql): Released connection (0) > Need 5 more connections to reach 10 spares > rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots > used > (0) [sql] = notfound > (0) [expiration] = noop > (0) [logintime] = noop > (0) pap: WARNING: No "known good" password found for the user. Not > setting Auth > -Type > (0) pap: WARNING: Authentication will fail unless a "known good" password > is ava > ilable > (0) [pap] = noop > (0) } # authorize = ok > (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = > Reject > (0) Failed to authenticate the user > (0) Using Post-Auth-Type Reject > (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default > (0) Post-Auth-Type REJECT { > (0) sql: EXPAND .query > (0) sql: --> .query > (0) sql: Using query template 'query' > rlm_sql (sql): Reserved connection (1) > (0) sql: EXPAND %{User-Name} > (0) sql: --> test > (0) sql: SQL-User-Name set to 'test' > (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) > VALUES > ( '%{SQL-User-Name}', > '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet- > > Type}', '%S') > (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) > VALUES > ( 'test', 'test', 'Access-Reject', '2018-06-24 13:55:21') > (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, > authda > te) VALUES ( 'test', 'test', 'Access-Reject', '2018-06-24 > 13:55:21') > (0) sql: SQL query returned: success > (0) sql: 1 record(s) updated > rlm_sql (sql): Released connection (1) > (0) [sql] = ok > (0) attr_filter.access_reject: EXPAND %{User-Name} > (0) attr_filter.access_reject: --> test > (0) attr_filter.access_reject: Matched entry DEFAULT at line 11 > (0) [attr_filter.access_reject] = updated > (0) [eap] = noop > (0) policy remove_reply_message_if_eap { > (0) if (&reply:EAP-Message && &reply:Reply-Message) { > (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE > (0) else { > (0) [noop] = noop > (0) } # else = noop > (0) } # policy remove_reply_message_if_eap = noop > (0) } # Post-Auth-Type REJECT = updated > (0) Delaying response for 1.000000 seconds > Waking up in 0.3 seconds. > Waking up in 0.6 seconds. > (0) Sending delayed response > (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474 > length 20 > Waking up in 3.9 seconds. > (0) Cleaning up request packet ID 195 with timestamp +2 > Ready to process requests > > Thanks in advance > > > BR > > > > > Javier Escalante > Business Development Manager > Javier.escalante@bwireless.eu > 00 34 626 785 675 > 00 34 93 141 56 36 > 00 41 78 689 85 69 > Skype: fruiz002 > Do you know our IoT solutions? Have a look here: www.bsmart.global > http://www.bwireless.eu > Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de > diciembre, de Protección de Datos de Carácter Personal, se informa que > todos los datos personales que nos ha facilitado serán incorporados y > tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades > de su e-mail. > Puede ejercer sus derechos de acceso, rectificación, cancelación y > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con > domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante > una comunicación a la dirección de correo electrónico info@bwireless.eu. > En ambos casos, deberá acompañar una copia de su documento nacional de > identidad o documento válido que lo identifique. > > > -----Original Message----- > From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante= > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey > Sent: viernes, 22 de junio de 2018 20:06 > To: FreeRadius users mailing list > Subject: Re: right tutorial > > hi, > > Could somebody tell us which tutorial /wiki can we follow in order to > > properly configure freeradius 3.0.16? > > > > properly configure? you need to define what it is you are trying to do. > based on other replies there is history here that I havent seen (or > deleted amongst deluge of other posts) one persons requirement/use-case > rarely matches with another. > > take FreeRADIUS 3.0.16 - either built form source or via package. then > follow the guides (or read the docs in the config files themselves) as > required. > > DONT hack a load of the config around , start with basics (as per docs) > > > alan > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
hi, check your config (sql config) to ensure you are not using the group check stuff if you dont want groups and havent defined groups # Tables containing 'check' items authcheck_table = "radcheck" groupcheck_table = "radgroupcheck" # Tables containing 'reply' items authreply_table = "radreply" groupreply_table = "radgroupreply" # Table to keep group info usergroup_table = "radusergroup" # If set to 'yes' (default) we read the group tables unless Fall-Through = no in the reply table. # If set to 'no' we do not read the group tables unless Fall-Through = yes in the reply table. # read_groups = yes see? its a check item by default...and if you dont have a response, its a fail. you might want to put relevant things int he radreply table. alan On 24 June 2018 at 14:57, Javier Escalante <Javier.Escalante@bwireless.eu> wrote:
Hello,
Sorry guys, based on the answers of Alan, I might be stupid...I'll explain another time and I hope this time I get some help:
1. I installed a fresh server (I have my all server already configured and working since 4 years) 2. I installed freeradius 3.0.16 and mysql. No errors during installation 3. I tested with user and password in file, and it worked perfectly 4. I tested by putting the user test with password test in radcheck and the authentication failed as it is shown further down. 5. I have searched in all kind of forums and obviously also in www.freeradius.org. No solution yet. 6. The sql seems to be working despite the include line is not uncommented in radiusd.conf. Can somebody confirm?
Can anybody give me a clue of how to solve this problem?
Request:
radtest test test localhost 10 1107
Freeradius debug output:
Ready to process requests (0) Received Access-Request Id 195 from 127.0.0.1:37474 to 127.0.0.1:1812 length 74 (0) User-Name = "test" (0) User-Password = "test" (0) NAS-IP-Address = 5.135.246.127 (0) NAS-Port = 10 (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27 (0) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/de
fault (0) authorize { (0) [preprocess] = ok (0) [chap] = noop (0) [mschap] = noop (0) [digest] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "test", looking up realm NULL (0) suffix: No such realm "NULL" (0) [suffix] = noop (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) [files] = noop (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' rlm_sql (sql): Reserved connection (0) (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE us ername = '%{SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE us ername = 'test' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User- Name}' ORDER BY priority (0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE userna me = 'test' ORDER BY priority (0) sql: User not found in any groups rlm_sql (sql): Released connection (0) Need 5 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots used (0) [sql] = notfound (0) [expiration] = noop (0) [logintime] = noop (0) pap: WARNING: No "known good" password found for the user. Not setting Auth -Type (0) pap: WARNING: Authentication will fail unless a "known good" password is ava ilable (0) [pap] = noop (0) } # authorize = ok (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user (0) Using Post-Auth-Type Reject (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) Post-Auth-Type REJECT { (0) sql: EXPAND .query (0) sql: --> .query (0) sql: Using query template 'query' rlm_sql (sql): Reserved connection (1) (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet- Type}', '%S') (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', 'test', 'Access-Reject', '2018-06-24 13:55:21') (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authda te) VALUES ( 'test', 'test', 'Access-Reject', '2018-06-24 13:55:21') (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (1) (0) [sql] = ok (0) attr_filter.access_reject: EXPAND %{User-Name} (0) attr_filter.access_reject: --> test (0) attr_filter.access_reject: Matched entry DEFAULT at line 11 (0) [attr_filter.access_reject] = updated (0) [eap] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # Post-Auth-Type REJECT = updated (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474 length 20 Waking up in 3.9 seconds. (0) Cleaning up request packet ID 195 with timestamp +2 Ready to process requests
Thanks in advance
BR
Javier Escalante Business Development Manager Javier.escalante@bwireless.eu 00 34 626 785 675 00 34 93 141 56 36 00 41 78 689 85 69 Skype: fruiz002 Do you know our IoT solutions? Have a look here: www.bsmart.global http://www.bwireless.eu Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail. Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique.
-----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante= bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey Sent: viernes, 22 de junio de 2018 20:06 To: FreeRadius users mailing list Subject: Re: right tutorial
hi,
Could somebody tell us which tutorial /wiki can we follow in order to
properly configure freeradius 3.0.16?
properly configure? you need to define what it is you are trying to do. based on other replies there is history here that I havent seen (or deleted amongst deluge of other posts) one persons requirement/use-case rarely matches with another.
take FreeRADIUS 3.0.16 - either built form source or via package. then follow the guides (or read the docs in the config files themselves) as required.
DONT hack a load of the config around , start with basics (as per docs)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
Hello,
Sorry guys, based on the answers of Alan, I might be stupid...I'll explain another time and I hope this time I get some help:
1. I installed a fresh server (I have my all server already configured and working since 4 years) 2. I installed freeradius 3.0.16 and mysql. No errors during installation 3. I tested with user and password in file, and it worked perfectly 4. I tested by putting the user test with password test in radcheck and the authentication failed as it is shown further down. 5. I have searched in all kind of forums and obviously also in www.freeradius.org. No solution yet. 6. The sql seems to be working despite the include line is not uncommented in radiusd.conf. Can somebody confirm?
Can anybody give me a clue of how to solve this problem?
Request:
radtest test test localhost 10 1107
Freeradius debug output:
Ready to process requests (0) Received Access-Request Id 195 from 127.0.0.1:37474 to 127.0.0.1:1812 length 74 (0) User-Name = "test" (0) User-Password = "test" (0) NAS-IP-Address = 5.135.246.127 (0) NAS-Port = 10 (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27 (0) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/de
fault (0) authorize { (0) [preprocess] = ok (0) [chap] = noop (0) [mschap] = noop (0) [digest] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "test", looking up realm NULL (0) suffix: No such realm "NULL" (0) [suffix] = noop (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) [files] = noop (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' rlm_sql (sql): Reserved connection (0) (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE us ername = '%{SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE us ername = 'test' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User- Name}' ORDER BY priority (0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE userna me = 'test' ORDER BY priority (0) sql: User not found in any groups rlm_sql (sql): Released connection (0) Need 5 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots used (0) [sql] = notfound (0) [expiration] = noop (0) [logintime] = noop (0) pap: WARNING: No "known good" password found for the user. Not setting Auth -Type (0) pap: WARNING: Authentication will fail unless a "known good" password is ava ilable (0) [pap] = noop (0) } # authorize = ok (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user (0) Using Post-Auth-Type Reject (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) Post-Auth-Type REJECT { (0) sql: EXPAND .query (0) sql: --> .query (0) sql: Using query template 'query' rlm_sql (sql): Reserved connection (1) (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet- Type}', '%S') (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', 'test', 'Access-Reject', '2018-06-24 13:55:21') (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authda te) VALUES ( 'test', 'test', 'Access-Reject', '2018-06-24 13:55:21') (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (1) (0) [sql] = ok (0) attr_filter.access_reject: EXPAND %{User-Name} (0) attr_filter.access_reject: --> test (0) attr_filter.access_reject: Matched entry DEFAULT at line 11 (0) [attr_filter.access_reject] = updated (0) [eap] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # Post-Auth-Type REJECT = updated (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474 length 20 Waking up in 3.9 seconds. (0) Cleaning up request packet ID 195 with timestamp +2 Ready to process requests
Thanks in advance
BR
Javier Escalante Business Development Manager Javier.escalante@bwireless.eu 00 34 626 785 675 00 34 93 141 56 36 00 41 78 689 85 69 Skype: fruiz002 Do you know our IoT solutions? Have a look here: www.bsmart.global http://www.bwireless.eu Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail. Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique.
-----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante= bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey Sent: viernes, 22 de junio de 2018 20:06 To: FreeRadius users mailing list Subject: Re: right tutorial
hi,
Could somebody tell us which tutorial /wiki can we follow in order to
properly configure freeradius 3.0.16?
properly configure? you need to define what it is you are trying to do. based on other replies there is history here that I havent seen (or deleted amongst deluge of other posts) one persons requirement/use-case rarely matches with another.
take FreeRADIUS 3.0.16 - either built form source or via package. then follow the guides (or read the docs in the config files themselves) as required.
DONT hack a load of the config around , start with basics (as per docs)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
Hello, What means "set to no", commented? What do you mean when you say: "you might want to put relevant things int he radreply table." Thanks BR Javier Escalante Business Development Manager Javier.escalante@bwireless.eu 00 34 626 785 675 00 34 93 141 56 36 00 41 78 689 85 69 Skype: fruiz002 Do you know our IoT solutions? Have a look here: www.bsmart.global http://www.bwireless.eu Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail. Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique. -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey Sent: lunes, 25 de junio de 2018 18:22 To: FreeRadius users mailing list Subject: Re: right tutorial hi, check your config (sql config) to ensure you are not using the group check stuff if you dont want groups and havent defined groups # Tables containing 'check' items authcheck_table = "radcheck" groupcheck_table = "radgroupcheck" # Tables containing 'reply' items authreply_table = "radreply" groupreply_table = "radgroupreply" # Table to keep group info usergroup_table = "radusergroup" # If set to 'yes' (default) we read the group tables unless Fall-Through = no in the reply table. # If set to 'no' we do not read the group tables unless Fall-Through = yes in the reply table. # read_groups = yes see? its a check item by default...and if you dont have a response, its a fail. you might want to put relevant things int he radreply table. alan On 24 June 2018 at 14:57, Javier Escalante <Javier.Escalante@bwireless.eu> wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
read SQL FR docs to see what the radreply table does - use of fall-through
etc.
your error is because it is trying to do a group check. you havent got any
group info - your choice how to fix
alan
On 25 June 2018 at 22:58, Javier Escalante <Javier.Escalante@bwireless.eu>
wrote:
> Hello,
>
> What means "set to no", commented? What do you mean when you say: "you
> might want to put relevant things int he radreply table."
>
>
> Thanks
>
> BR
> Javier Escalante
> Business Development Manager
> Javier.escalante@bwireless.eu
> 00 34 626 785 675
> 00 34 93 141 56 36
> 00 41 78 689 85 69
> Skype: fruiz002
> Do you know our IoT solutions? Have a look here: www.bsmart.global
> http://www.bwireless.eu
> Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de
> diciembre, de Protección de Datos de Carácter Personal, se informa que
> todos los datos personales que nos ha facilitado serán incorporados y
> tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades
> de su e-mail.
> Puede ejercer sus derechos de acceso, rectificación, cancelación y
> oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante
> una comunicación a la dirección de correo electrónico info@bwireless.eu.
> En ambos casos, deberá acompañar una copia de su documento nacional de
> identidad o documento válido que lo identifique.
>
>
> -----Original Message-----
> From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=
> bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> Sent: lunes, 25 de junio de 2018 18:22
> To: FreeRadius users mailing list
> Subject: Re: right tutorial
>
> hi,
>
> check your config (sql config) to ensure you are not using the group check
> stuff if you dont want groups and havent defined groups
>
> # Tables containing 'check' items
> authcheck_table = "radcheck"
> groupcheck_table = "radgroupcheck"
>
> # Tables containing 'reply' items
> authreply_table = "radreply"
> groupreply_table = "radgroupreply"
>
> # Table to keep group info
> usergroup_table = "radusergroup"
>
> # If set to 'yes' (default) we read the group tables unless Fall-Through =
> no in the reply table.
> # If set to 'no' we do not read the group tables unless Fall-Through = yes
> in the reply table.
> # read_groups = yes
>
> see? its a check item by default...and if you dont have a response, its a
> fail. you might want to put relevant things int he radreply table.
>
> alan
>
>
> On 24 June 2018 at 14:57, Javier Escalante <Javier.Escalante@bwireless.eu>
> wrote:
>
> > Hello,
> >
> > Sorry guys, based on the answers of Alan, I might be stupid...I'll
> > explain another time and I hope this time I get some help:
> >
> > 1. I installed a fresh server (I have my all server already configured
> > and working since 4 years) 2. I installed freeradius 3.0.16 and mysql.
> > No errors during installation 3. I tested with user and password in
> > file, and it worked perfectly 4. I tested by putting the user test
> > with password test in radcheck and the authentication failed as it is
> > shown further down.
> > 5. I have searched in all kind of forums and obviously also in
> > www.freeradius.org. No solution yet.
> > 6. The sql seems to be working despite the include line is not
> > uncommented in radiusd.conf. Can somebody confirm?
> >
> > Can anybody give me a clue of how to solve this problem?
> >
> > Request:
> >
> > radtest test test localhost 10 1107
> >
> > Freeradius debug output:
> >
> > Ready to process requests
> > (0) Received Access-Request Id 195 from 127.0.0.1:37474 to
> > 127.0.0.1:1812 length
> > 74
> > (0) User-Name = "test"
> > (0) User-Password = "test"
> > (0) NAS-IP-Address = 5.135.246.127
> > (0) NAS-Port = 10
> > (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27
> > (0) # Executing section authorize from file
> > /etc/freeradius/3.0/sites-enabled/de
> >
> > fault
> > (0) authorize {
> > (0) [preprocess] = ok
> > (0) [chap] = noop
> > (0) [mschap] = noop
> > (0) [digest] = noop
> > (0) suffix: Checking for suffix after "@"
> > (0) suffix: No '@' in User-Name = "test", looking up realm NULL
> > (0) suffix: No such realm "NULL"
> > (0) [suffix] = noop
> > (0) eap: No EAP-Message, not doing EAP
> > (0) [eap] = noop
> > (0) [files] = noop
> > (0) sql: EXPAND %{User-Name}
> > (0) sql: --> test
> > (0) sql: SQL-User-Name set to 'test'
> > rlm_sql (sql): Reserved connection (0)
> > (0) sql: EXPAND SELECT id, username, attribute, value, op FROM
> > radcheck WHERE us
> > ername = '%{SQL-User-Name}' ORDER BY id
> > (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck
> > WHERE us
> > ername = 'test' ORDER BY id
> > (0) sql: Executing select query: SELECT id, username, attribute,
> > value, op FROM
> > radcheck WHERE username = 'test' ORDER BY id
> > (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username =
> > '%{SQL-User-
> > Name}' ORDER BY priority
> > (0) sql: --> SELECT groupname FROM radusergroup WHERE username =
> 'test'
> > ORDER
> > BY priority
> > (0) sql: Executing select query: SELECT groupname FROM radusergroup
> > WHERE userna
> > me = 'test' ORDER BY priority
> > (0) sql: User not found in any groups
> > rlm_sql (sql): Released connection (0) Need 5 more connections to
> > reach 10 spares rlm_sql (sql): Opening additional connection (5), 1 of
> > 27 pending slots used
> > (0) [sql] = notfound
> > (0) [expiration] = noop
> > (0) [logintime] = noop
> > (0) pap: WARNING: No "known good" password found for the user. Not
> > setting Auth
> > -Type
> > (0) pap: WARNING: Authentication will fail unless a "known good"
> > password is ava
> > ilable
> > (0) [pap] = noop
> > (0) } # authorize = ok
> > (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type =
> > Reject
> > (0) Failed to authenticate the user
> > (0) Using Post-Auth-Type Reject
> > (0) # Executing group from file /etc/freeradius/3.0/sites-
> enabled/default
> > (0) Post-Auth-Type REJECT {
> > (0) sql: EXPAND .query
> > (0) sql: --> .query
> > (0) sql: Using query template 'query'
> > rlm_sql (sql): Reserved connection (1)
> > (0) sql: EXPAND %{User-Name}
> > (0) sql: --> test
> > (0) sql: SQL-User-Name set to 'test'
> > (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply,
> > authdate) VALUES
> > ( '%{SQL-User-Name}',
> > '%{%{User-Password}:-%{Chap-Password}}',
> > '%{reply:Packet-
> > Type}', '%S')
> > (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate)
> > VALUES
> > ( 'test', 'test', 'Access-Reject', '2018-06-24
> > 13:55:21')
> > (0) sql: Executing query: INSERT INTO radpostauth (username, pass,
> > reply, authda
> > te) VALUES ( 'test', 'test', 'Access-Reject',
> > '2018-06-24
> > 13:55:21')
> > (0) sql: SQL query returned: success
> > (0) sql: 1 record(s) updated
> > rlm_sql (sql): Released connection (1)
> > (0) [sql] = ok
> > (0) attr_filter.access_reject: EXPAND %{User-Name}
> > (0) attr_filter.access_reject: --> test
> > (0) attr_filter.access_reject: Matched entry DEFAULT at line 11
> > (0) [attr_filter.access_reject] = updated
> > (0) [eap] = noop
> > (0) policy remove_reply_message_if_eap {
> > (0) if (&reply:EAP-Message && &reply:Reply-Message) {
> > (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
> > (0) else {
> > (0) [noop] = noop
> > (0) } # else = noop
> > (0) } # policy remove_reply_message_if_eap = noop
> > (0) } # Post-Auth-Type REJECT = updated
> > (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds.
> > Waking up in 0.6 seconds.
> > (0) Sending delayed response
> > (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474
> > length 20 Waking up in 3.9 seconds.
> > (0) Cleaning up request packet ID 195 with timestamp +2 Ready to
> > process requests
> >
> > Thanks in advance
> >
> >
> > BR
> >
> >
> >
> >
> > Javier Escalante
> > Business Development Manager
> > Javier.escalante@bwireless.eu
> > 00 34 626 785 675
> > 00 34 93 141 56 36
> > 00 41 78 689 85 69
> > Skype: fruiz002
> > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> > Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> > Carácter Personal, se informa que todos los datos personales que nos
> > ha facilitado serán incorporados y tratados en los ficheros de B’W &
> > TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> > domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> > mediante una comunicación a la dirección de correo electrónico
> info@bwireless.eu.
> > En ambos casos, deberá acompañar una copia de su documento nacional
> > de identidad o documento válido que lo identifique.
> >
> >
> > -----Original Message-----
> > From: Freeradius-Users
> > [mailto:freeradius-users-bounces+javier.escalante=
> > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > Sent: viernes, 22 de junio de 2018 20:06
> > To: FreeRadius users mailing list
> > Subject: Re: right tutorial
> >
> > hi,
> >
> > Could somebody tell us which tutorial /wiki can we follow in order to
> > > properly configure freeradius 3.0.16?
> > >
> >
> > properly configure? you need to define what it is you are trying to do.
> > based on other replies there is history here that I havent seen (or
> > deleted amongst deluge of other posts) one persons
> > requirement/use-case rarely matches with another.
> >
> > take FreeRADIUS 3.0.16 - either built form source or via package. then
> > follow the guides (or read the docs in the config files themselves) as
> > required.
> >
> > DONT hack a load of the config around , start with basics (as per
> > docs)
> >
> >
> > alan
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
Anyway, in my current radius, I have groups and profiles, as I create the users with daloradius, and in the versions 2.x everything was working perfectly.
Why when the version changes, we must reconfigure everything from zero and nothing works?
Javier Escalante
Business Development Manager
Javier.escalante@bwireless.eu
00 34 626 785 675
00 34 93 141 56 36
00 41 78 689 85 69
Skype: fruiz002
Do you know our IoT solutions? Have a look here: www.bsmart.global
http://www.bwireless.eu
Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique.
-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
Sent: martes, 26 de junio de 2018 0:01
To: FreeRadius users mailing list
Subject: Re: right tutorial
read SQL FR docs to see what the radreply table does - use of fall-through etc.
your error is because it is trying to do a group check. you havent got any group info - your choice how to fix
alan
On 25 June 2018 at 22:58, Javier Escalante <Javier.Escalante@bwireless.eu>
wrote:
> Hello,
>
> What means "set to no", commented? What do you mean when you say:
> "you might want to put relevant things int he radreply table."
>
>
> Thanks
>
> BR
> Javier Escalante
> Business Development Manager
> Javier.escalante@bwireless.eu
> 00 34 626 785 675
> 00 34 93 141 56 36
> 00 41 78 689 85 69
> Skype: fruiz002
> Do you know our IoT solutions? Have a look here: www.bsmart.global
> http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> Carácter Personal, se informa que todos los datos personales que nos
> ha facilitado serán incorporados y tratados en los ficheros de B’W &
> TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> Puede ejercer sus derechos de acceso, rectificación, cancelación y
> oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> mediante una comunicación a la dirección de correo electrónico info@bwireless.eu.
> En ambos casos, deberá acompañar una copia de su documento nacional
> de identidad o documento válido que lo identifique.
>
>
> -----Original Message-----
> From: Freeradius-Users
> [mailto:freeradius-users-bounces+javier.escalante=
> bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> Sent: lunes, 25 de junio de 2018 18:22
> To: FreeRadius users mailing list
> Subject: Re: right tutorial
>
> hi,
>
> check your config (sql config) to ensure you are not using the group
> check stuff if you dont want groups and havent defined groups
>
> # Tables containing 'check' items
> authcheck_table = "radcheck"
> groupcheck_table = "radgroupcheck"
>
> # Tables containing 'reply' items
> authreply_table = "radreply"
> groupreply_table = "radgroupreply"
>
> # Table to keep group info
> usergroup_table = "radusergroup"
>
> # If set to 'yes' (default) we read the group tables unless
> Fall-Through = no in the reply table.
> # If set to 'no' we do not read the group tables unless Fall-Through =
> yes in the reply table.
> # read_groups = yes
>
> see? its a check item by default...and if you dont have a response, its a
> fail. you might want to put relevant things int he radreply table.
>
> alan
>
>
> On 24 June 2018 at 14:57, Javier Escalante
> <Javier.Escalante@bwireless.eu>
> wrote:
>
> > Hello,
> >
> > Sorry guys, based on the answers of Alan, I might be stupid...I'll
> > explain another time and I hope this time I get some help:
> >
> > 1. I installed a fresh server (I have my all server already
> > configured and working since 4 years) 2. I installed freeradius 3.0.16 and mysql.
> > No errors during installation 3. I tested with user and password in
> > file, and it worked perfectly 4. I tested by putting the user test
> > with password test in radcheck and the authentication failed as it
> > is shown further down.
> > 5. I have searched in all kind of forums and obviously also in
> > www.freeradius.org. No solution yet.
> > 6. The sql seems to be working despite the include line is not
> > uncommented in radiusd.conf. Can somebody confirm?
> >
> > Can anybody give me a clue of how to solve this problem?
> >
> > Request:
> >
> > radtest test test localhost 10 1107
> >
> > Freeradius debug output:
> >
> > Ready to process requests
> > (0) Received Access-Request Id 195 from 127.0.0.1:37474 to
> > 127.0.0.1:1812 length
> > 74
> > (0) User-Name = "test"
> > (0) User-Password = "test"
> > (0) NAS-IP-Address = 5.135.246.127
> > (0) NAS-Port = 10
> > (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27
> > (0) # Executing section authorize from file
> > /etc/freeradius/3.0/sites-enabled/de
> >
> > fault
> > (0) authorize {
> > (0) [preprocess] = ok
> > (0) [chap] = noop
> > (0) [mschap] = noop
> > (0) [digest] = noop
> > (0) suffix: Checking for suffix after "@"
> > (0) suffix: No '@' in User-Name = "test", looking up realm NULL
> > (0) suffix: No such realm "NULL"
> > (0) [suffix] = noop
> > (0) eap: No EAP-Message, not doing EAP
> > (0) [eap] = noop
> > (0) [files] = noop
> > (0) sql: EXPAND %{User-Name}
> > (0) sql: --> test
> > (0) sql: SQL-User-Name set to 'test'
> > rlm_sql (sql): Reserved connection (0)
> > (0) sql: EXPAND SELECT id, username, attribute, value, op FROM
> > radcheck WHERE us
> > ername = '%{SQL-User-Name}' ORDER BY id
> > (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck
> > WHERE us
> > ername = 'test' ORDER BY id
> > (0) sql: Executing select query: SELECT id, username, attribute,
> > value, op FROM
> > radcheck WHERE username = 'test' ORDER BY id
> > (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username =
> > '%{SQL-User-
> > Name}' ORDER BY priority
> > (0) sql: --> SELECT groupname FROM radusergroup WHERE username =
> 'test'
> > ORDER
> > BY priority
> > (0) sql: Executing select query: SELECT groupname FROM radusergroup
> > WHERE userna
> > me = 'test' ORDER BY priority
> > (0) sql: User not found in any groups rlm_sql (sql): Released
> > connection (0) Need 5 more connections to reach 10 spares rlm_sql
> > (sql): Opening additional connection (5), 1 of
> > 27 pending slots used
> > (0) [sql] = notfound
> > (0) [expiration] = noop
> > (0) [logintime] = noop
> > (0) pap: WARNING: No "known good" password found for the user. Not
> > setting Auth
> > -Type
> > (0) pap: WARNING: Authentication will fail unless a "known good"
> > password is ava
> > ilable
> > (0) [pap] = noop
> > (0) } # authorize = ok
> > (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type
> > = Reject
> > (0) Failed to authenticate the user
> > (0) Using Post-Auth-Type Reject
> > (0) # Executing group from file /etc/freeradius/3.0/sites-
> enabled/default
> > (0) Post-Auth-Type REJECT {
> > (0) sql: EXPAND .query
> > (0) sql: --> .query
> > (0) sql: Using query template 'query'
> > rlm_sql (sql): Reserved connection (1)
> > (0) sql: EXPAND %{User-Name}
> > (0) sql: --> test
> > (0) sql: SQL-User-Name set to 'test'
> > (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply,
> > authdate) VALUES
> > ( '%{SQL-User-Name}',
> > '%{%{User-Password}:-%{Chap-Password}}',
> > '%{reply:Packet-
> > Type}', '%S')
> > (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate)
> > VALUES
> > ( 'test', 'test', 'Access-Reject', '2018-06-24
> > 13:55:21')
> > (0) sql: Executing query: INSERT INTO radpostauth (username, pass,
> > reply, authda
> > te) VALUES ( 'test', 'test', 'Access-Reject',
> > '2018-06-24
> > 13:55:21')
> > (0) sql: SQL query returned: success
> > (0) sql: 1 record(s) updated
> > rlm_sql (sql): Released connection (1)
> > (0) [sql] = ok
> > (0) attr_filter.access_reject: EXPAND %{User-Name}
> > (0) attr_filter.access_reject: --> test
> > (0) attr_filter.access_reject: Matched entry DEFAULT at line 11
> > (0) [attr_filter.access_reject] = updated
> > (0) [eap] = noop
> > (0) policy remove_reply_message_if_eap {
> > (0) if (&reply:EAP-Message && &reply:Reply-Message) {
> > (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
> > (0) else {
> > (0) [noop] = noop
> > (0) } # else = noop
> > (0) } # policy remove_reply_message_if_eap = noop
> > (0) } # Post-Auth-Type REJECT = updated
> > (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds.
> > Waking up in 0.6 seconds.
> > (0) Sending delayed response
> > (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474
> > length 20 Waking up in 3.9 seconds.
> > (0) Cleaning up request packet ID 195 with timestamp +2 Ready to
> > process requests
> >
> > Thanks in advance
> >
> >
> > BR
> >
> >
> >
> >
> > Javier Escalante
> > Business Development Manager
> > Javier.escalante@bwireless.eu
> > 00 34 626 785 675
> > 00 34 93 141 56 36
> > 00 41 78 689 85 69
> > Skype: fruiz002
> > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> > Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> > Carácter Personal, se informa que todos los datos personales que
> > nos ha facilitado serán incorporados y tratados en los ficheros de
> > B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> > domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> > mediante una comunicación a la dirección de correo electrónico
> info@bwireless.eu.
> > En ambos casos, deberá acompañar una copia de su documento nacional
> > de identidad o documento válido que lo identifique.
> >
> >
> > -----Original Message-----
> > From: Freeradius-Users
> > [mailto:freeradius-users-bounces+javier.escalante=
> > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > Sent: viernes, 22 de junio de 2018 20:06
> > To: FreeRadius users mailing list
> > Subject: Re: right tutorial
> >
> > hi,
> >
> > Could somebody tell us which tutorial /wiki can we follow in order
> > to
> > > properly configure freeradius 3.0.16?
> > >
> >
> > properly configure? you need to define what it is you are trying to do.
> > based on other replies there is history here that I havent seen (or
> > deleted amongst deluge of other posts) one persons
> > requirement/use-case rarely matches with another.
> >
> > take FreeRADIUS 3.0.16 - either built form source or via package. then
> > follow the guides (or read the docs in the config files themselves)
> > as required.
> >
> > DONT hack a load of the config around , start with basics (as per
> > docs)
> >
> >
> > alan
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
If you moved from 2. To 3, I'm guessing the main problem would be change
the "==" operators to ":="
On Mon, Jun 25, 2018, 23:07 Javier Escalante <Javier.Escalante@bwireless.eu>
wrote:
> Anyway, in my current radius, I have groups and profiles, as I create the
> users with daloradius, and in the versions 2.x everything was working
> perfectly.
>
> Why when the version changes, we must reconfigure everything from zero and
> nothing works?
>
> Javier Escalante
> Business Development Manager
> Javier.escalante@bwireless.eu
> 00 34 626 785 675
> 00 34 93 141 56 36
> 00 41 78 689 85 69
> Skype: fruiz002
> Do you know our IoT solutions? Have a look here: www.bsmart.global
> http://www.bwireless.eu
> Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de
> diciembre, de Protección de Datos de Carácter Personal, se informa que
> todos los datos personales que nos ha facilitado serán incorporados y
> tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades
> de su e-mail.
> Puede ejercer sus derechos de acceso, rectificación, cancelación y
> oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante
> una comunicación a la dirección de correo electrónico info@bwireless.eu.
> En ambos casos, deberá acompañar una copia de su documento nacional de
> identidad o documento válido que lo identifique.
>
>
> -----Original Message-----
> From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=
> bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> Sent: martes, 26 de junio de 2018 0:01
> To: FreeRadius users mailing list
> Subject: Re: right tutorial
>
> read SQL FR docs to see what the radreply table does - use of fall-through
> etc.
>
> your error is because it is trying to do a group check. you havent got any
> group info - your choice how to fix
>
> alan
>
> On 25 June 2018 at 22:58, Javier Escalante <Javier.Escalante@bwireless.eu>
> wrote:
>
> > Hello,
> >
> > What means "set to no", commented? What do you mean when you say:
> > "you might want to put relevant things int he radreply table."
> >
> >
> > Thanks
> >
> > BR
> > Javier Escalante
> > Business Development Manager
> > Javier.escalante@bwireless.eu
> > 00 34 626 785 675
> > 00 34 93 141 56 36
> > 00 41 78 689 85 69
> > Skype: fruiz002
> > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> > Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> > Carácter Personal, se informa que todos los datos personales que nos
> > ha facilitado serán incorporados y tratados en los ficheros de B’W &
> > TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> > domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> > mediante una comunicación a la dirección de correo electrónico
> info@bwireless.eu.
> > En ambos casos, deberá acompañar una copia de su documento nacional
> > de identidad o documento válido que lo identifique.
> >
> >
> > -----Original Message-----
> > From: Freeradius-Users
> > [mailto:freeradius-users-bounces+javier.escalante=
> > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > Sent: lunes, 25 de junio de 2018 18:22
> > To: FreeRadius users mailing list
> > Subject: Re: right tutorial
> >
> > hi,
> >
> > check your config (sql config) to ensure you are not using the group
> > check stuff if you dont want groups and havent defined groups
> >
> > # Tables containing 'check' items
> > authcheck_table = "radcheck"
> > groupcheck_table = "radgroupcheck"
> >
> > # Tables containing 'reply' items
> > authreply_table = "radreply"
> > groupreply_table = "radgroupreply"
> >
> > # Table to keep group info
> > usergroup_table = "radusergroup"
> >
> > # If set to 'yes' (default) we read the group tables unless
> > Fall-Through = no in the reply table.
> > # If set to 'no' we do not read the group tables unless Fall-Through =
> > yes in the reply table.
> > # read_groups = yes
> >
> > see? its a check item by default...and if you dont have a response, its
> a
> > fail. you might want to put relevant things int he radreply table.
> >
> > alan
> >
> >
> > On 24 June 2018 at 14:57, Javier Escalante
> > <Javier.Escalante@bwireless.eu>
> > wrote:
> >
> > > Hello,
> > >
> > > Sorry guys, based on the answers of Alan, I might be stupid...I'll
> > > explain another time and I hope this time I get some help:
> > >
> > > 1. I installed a fresh server (I have my all server already
> > > configured and working since 4 years) 2. I installed freeradius 3.0.16
> and mysql.
> > > No errors during installation 3. I tested with user and password in
> > > file, and it worked perfectly 4. I tested by putting the user test
> > > with password test in radcheck and the authentication failed as it
> > > is shown further down.
> > > 5. I have searched in all kind of forums and obviously also in
> > > www.freeradius.org. No solution yet.
> > > 6. The sql seems to be working despite the include line is not
> > > uncommented in radiusd.conf. Can somebody confirm?
> > >
> > > Can anybody give me a clue of how to solve this problem?
> > >
> > > Request:
> > >
> > > radtest test test localhost 10 1107
> > >
> > > Freeradius debug output:
> > >
> > > Ready to process requests
> > > (0) Received Access-Request Id 195 from 127.0.0.1:37474 to
> > > 127.0.0.1:1812 length
> > > 74
> > > (0) User-Name = "test"
> > > (0) User-Password = "test"
> > > (0) NAS-IP-Address = 5.135.246.127
> > > (0) NAS-Port = 10
> > > (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27
> > > (0) # Executing section authorize from file
> > > /etc/freeradius/3.0/sites-enabled/de
> > >
> > > fault
> > > (0) authorize {
> > > (0) [preprocess] = ok
> > > (0) [chap] = noop
> > > (0) [mschap] = noop
> > > (0) [digest] = noop
> > > (0) suffix: Checking for suffix after "@"
> > > (0) suffix: No '@' in User-Name = "test", looking up realm NULL
> > > (0) suffix: No such realm "NULL"
> > > (0) [suffix] = noop
> > > (0) eap: No EAP-Message, not doing EAP
> > > (0) [eap] = noop
> > > (0) [files] = noop
> > > (0) sql: EXPAND %{User-Name}
> > > (0) sql: --> test
> > > (0) sql: SQL-User-Name set to 'test'
> > > rlm_sql (sql): Reserved connection (0)
> > > (0) sql: EXPAND SELECT id, username, attribute, value, op FROM
> > > radcheck WHERE us
> > > ername = '%{SQL-User-Name}' ORDER BY id
> > > (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck
> > > WHERE us
> > > ername = 'test' ORDER BY id
> > > (0) sql: Executing select query: SELECT id, username, attribute,
> > > value, op FROM
> > > radcheck WHERE username = 'test' ORDER BY id
> > > (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username =
> > > '%{SQL-User-
> > > Name}' ORDER BY priority
> > > (0) sql: --> SELECT groupname FROM radusergroup WHERE username =
> > 'test'
> > > ORDER
> > > BY priority
> > > (0) sql: Executing select query: SELECT groupname FROM radusergroup
> > > WHERE userna
> > > me = 'test' ORDER BY priority
> > > (0) sql: User not found in any groups rlm_sql (sql): Released
> > > connection (0) Need 5 more connections to reach 10 spares rlm_sql
> > > (sql): Opening additional connection (5), 1 of
> > > 27 pending slots used
> > > (0) [sql] = notfound
> > > (0) [expiration] = noop
> > > (0) [logintime] = noop
> > > (0) pap: WARNING: No "known good" password found for the user. Not
> > > setting Auth
> > > -Type
> > > (0) pap: WARNING: Authentication will fail unless a "known good"
> > > password is ava
> > > ilable
> > > (0) [pap] = noop
> > > (0) } # authorize = ok
> > > (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type
> > > = Reject
> > > (0) Failed to authenticate the user
> > > (0) Using Post-Auth-Type Reject
> > > (0) # Executing group from file /etc/freeradius/3.0/sites-
> > enabled/default
> > > (0) Post-Auth-Type REJECT {
> > > (0) sql: EXPAND .query
> > > (0) sql: --> .query
> > > (0) sql: Using query template 'query'
> > > rlm_sql (sql): Reserved connection (1)
> > > (0) sql: EXPAND %{User-Name}
> > > (0) sql: --> test
> > > (0) sql: SQL-User-Name set to 'test'
> > > (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply,
> > > authdate) VALUES
> > > ( '%{SQL-User-Name}',
> > > '%{%{User-Password}:-%{Chap-Password}}',
> > > '%{reply:Packet-
> > > Type}', '%S')
> > > (0) sql: --> INSERT INTO radpostauth (username, pass, reply,
> authdate)
> > > VALUES
> > > ( 'test', 'test', 'Access-Reject', '2018-06-24
> > > 13:55:21')
> > > (0) sql: Executing query: INSERT INTO radpostauth (username, pass,
> > > reply, authda
> > > te) VALUES ( 'test', 'test', 'Access-Reject',
> > > '2018-06-24
> > > 13:55:21')
> > > (0) sql: SQL query returned: success
> > > (0) sql: 1 record(s) updated
> > > rlm_sql (sql): Released connection (1)
> > > (0) [sql] = ok
> > > (0) attr_filter.access_reject: EXPAND %{User-Name}
> > > (0) attr_filter.access_reject: --> test
> > > (0) attr_filter.access_reject: Matched entry DEFAULT at line 11
> > > (0) [attr_filter.access_reject] = updated
> > > (0) [eap] = noop
> > > (0) policy remove_reply_message_if_eap {
> > > (0) if (&reply:EAP-Message && &reply:Reply-Message) {
> > > (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
> > > (0) else {
> > > (0) [noop] = noop
> > > (0) } # else = noop
> > > (0) } # policy remove_reply_message_if_eap = noop
> > > (0) } # Post-Auth-Type REJECT = updated
> > > (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds.
> > > Waking up in 0.6 seconds.
> > > (0) Sending delayed response
> > > (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474
> > > length 20 Waking up in 3.9 seconds.
> > > (0) Cleaning up request packet ID 195 with timestamp +2 Ready to
> > > process requests
> > >
> > > Thanks in advance
> > >
> > >
> > > BR
> > >
> > >
> > >
> > >
> > > Javier Escalante
> > > Business Development Manager
> > > Javier.escalante@bwireless.eu
> > > 00 34 626 785 675
> > > 00 34 93 141 56 36
> > > 00 41 78 689 85 69
> > > Skype: fruiz002
> > > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > > http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> > > Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> > > Carácter Personal, se informa que todos los datos personales que
> > > nos ha facilitado serán incorporados y tratados en los ficheros de
> > > B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> > > domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> > > mediante una comunicación a la dirección de correo electrónico
> > info@bwireless.eu.
> > > En ambos casos, deberá acompañar una copia de su documento nacional
> > > de identidad o documento válido que lo identifique.
> > >
> > >
> > > -----Original Message-----
> > > From: Freeradius-Users
> > > [mailto:freeradius-users-bounces+javier.escalante=
> > > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > > Sent: viernes, 22 de junio de 2018 20:06
> > > To: FreeRadius users mailing list
> > > Subject: Re: right tutorial
> > >
> > > hi,
> > >
> > > Could somebody tell us which tutorial /wiki can we follow in order
> > > to
> > > > properly configure freeradius 3.0.16?
> > > >
> > >
> > > properly configure? you need to define what it is you are trying to
> do.
> > > based on other replies there is history here that I havent seen (or
> > > deleted amongst deluge of other posts) one persons
> > > requirement/use-case rarely matches with another.
> > >
> > > take FreeRADIUS 3.0.16 - either built form source or via package.
> then
> > > follow the guides (or read the docs in the config files themselves)
> > > as required.
> > >
> > > DONT hack a load of the config around , start with basics (as per
> > > docs)
> > >
> > >
> > > alan
> > > -
> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > > list/users.html
> > >
> > >
> > > -
> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > > list/users.html
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
In 2.x I have := in radcheck
Javier Escalante
Business Development Manager
Javier.escalante@bwireless.eu
00 34 626 785 675
00 34 93 141 56 36
00 41 78 689 85 69
Skype: fruiz002
Do you know our IoT solutions? Have a look here: www.bsmart.global
http://www.bwireless.eu
Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique.
-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=bwireless.eu@lists.freeradius.org] On Behalf Of Uchenna Nebedum
Sent: martes, 26 de junio de 2018 0:09
To: FreeRadius users mailing list
Subject: Re: right tutorial
If you moved from 2. To 3, I'm guessing the main problem would be change the "==" operators to ":="
On Mon, Jun 25, 2018, 23:07 Javier Escalante <Javier.Escalante@bwireless.eu>
wrote:
> Anyway, in my current radius, I have groups and profiles, as I create
> the users with daloradius, and in the versions 2.x everything was
> working perfectly.
>
> Why when the version changes, we must reconfigure everything from zero
> and nothing works?
>
> Javier Escalante
> Business Development Manager
> Javier.escalante@bwireless.eu
> 00 34 626 785 675
> 00 34 93 141 56 36
> 00 41 78 689 85 69
> Skype: fruiz002
> Do you know our IoT solutions? Have a look here: www.bsmart.global
> http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> Carácter Personal, se informa que todos los datos personales que nos
> ha facilitado serán incorporados y tratados en los ficheros de B’W &
> TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> Puede ejercer sus derechos de acceso, rectificación, cancelación y
> oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> mediante una comunicación a la dirección de correo electrónico info@bwireless.eu.
> En ambos casos, deberá acompañar una copia de su documento nacional
> de identidad o documento válido que lo identifique.
>
>
> -----Original Message-----
> From: Freeradius-Users
> [mailto:freeradius-users-bounces+javier.escalante=
> bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> Sent: martes, 26 de junio de 2018 0:01
> To: FreeRadius users mailing list
> Subject: Re: right tutorial
>
> read SQL FR docs to see what the radreply table does - use of
> fall-through etc.
>
> your error is because it is trying to do a group check. you havent got
> any group info - your choice how to fix
>
> alan
>
> On 25 June 2018 at 22:58, Javier Escalante
> <Javier.Escalante@bwireless.eu>
> wrote:
>
> > Hello,
> >
> > What means "set to no", commented? What do you mean when you say:
> > "you might want to put relevant things int he radreply table."
> >
> >
> > Thanks
> >
> > BR
> > Javier Escalante
> > Business Development Manager
> > Javier.escalante@bwireless.eu
> > 00 34 626 785 675
> > 00 34 93 141 56 36
> > 00 41 78 689 85 69
> > Skype: fruiz002
> > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> > Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> > Carácter Personal, se informa que todos los datos personales que
> > nos ha facilitado serán incorporados y tratados en los ficheros de
> > B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> > domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> > mediante una comunicación a la dirección de correo electrónico
> info@bwireless.eu.
> > En ambos casos, deberá acompañar una copia de su documento nacional
> > de identidad o documento válido que lo identifique.
> >
> >
> > -----Original Message-----
> > From: Freeradius-Users
> > [mailto:freeradius-users-bounces+javier.escalante=
> > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > Sent: lunes, 25 de junio de 2018 18:22
> > To: FreeRadius users mailing list
> > Subject: Re: right tutorial
> >
> > hi,
> >
> > check your config (sql config) to ensure you are not using the group
> > check stuff if you dont want groups and havent defined groups
> >
> > # Tables containing 'check' items
> > authcheck_table = "radcheck"
> > groupcheck_table = "radgroupcheck"
> >
> > # Tables containing 'reply' items
> > authreply_table = "radreply"
> > groupreply_table = "radgroupreply"
> >
> > # Table to keep group info
> > usergroup_table = "radusergroup"
> >
> > # If set to 'yes' (default) we read the group tables unless
> > Fall-Through = no in the reply table.
> > # If set to 'no' we do not read the group tables unless Fall-Through
> > = yes in the reply table.
> > # read_groups = yes
> >
> > see? its a check item by default...and if you dont have a response,
> > its
> a
> > fail. you might want to put relevant things int he radreply table.
> >
> > alan
> >
> >
> > On 24 June 2018 at 14:57, Javier Escalante
> > <Javier.Escalante@bwireless.eu>
> > wrote:
> >
> > > Hello,
> > >
> > > Sorry guys, based on the answers of Alan, I might be stupid...I'll
> > > explain another time and I hope this time I get some help:
> > >
> > > 1. I installed a fresh server (I have my all server already
> > > configured and working since 4 years) 2. I installed freeradius
> > > 3.0.16
> and mysql.
> > > No errors during installation 3. I tested with user and password
> > > in file, and it worked perfectly 4. I tested by putting the user
> > > test with password test in radcheck and the authentication failed
> > > as it is shown further down.
> > > 5. I have searched in all kind of forums and obviously also in
> > > www.freeradius.org. No solution yet.
> > > 6. The sql seems to be working despite the include line is not
> > > uncommented in radiusd.conf. Can somebody confirm?
> > >
> > > Can anybody give me a clue of how to solve this problem?
> > >
> > > Request:
> > >
> > > radtest test test localhost 10 1107
> > >
> > > Freeradius debug output:
> > >
> > > Ready to process requests
> > > (0) Received Access-Request Id 195 from 127.0.0.1:37474 to
> > > 127.0.0.1:1812 length
> > > 74
> > > (0) User-Name = "test"
> > > (0) User-Password = "test"
> > > (0) NAS-IP-Address = 5.135.246.127
> > > (0) NAS-Port = 10
> > > (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27
> > > (0) # Executing section authorize from file
> > > /etc/freeradius/3.0/sites-enabled/de
> > >
> > > fault
> > > (0) authorize {
> > > (0) [preprocess] = ok
> > > (0) [chap] = noop
> > > (0) [mschap] = noop
> > > (0) [digest] = noop
> > > (0) suffix: Checking for suffix after "@"
> > > (0) suffix: No '@' in User-Name = "test", looking up realm NULL
> > > (0) suffix: No such realm "NULL"
> > > (0) [suffix] = noop
> > > (0) eap: No EAP-Message, not doing EAP
> > > (0) [eap] = noop
> > > (0) [files] = noop
> > > (0) sql: EXPAND %{User-Name}
> > > (0) sql: --> test
> > > (0) sql: SQL-User-Name set to 'test'
> > > rlm_sql (sql): Reserved connection (0)
> > > (0) sql: EXPAND SELECT id, username, attribute, value, op FROM
> > > radcheck WHERE us
> > > ername = '%{SQL-User-Name}' ORDER BY id
> > > (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck
> > > WHERE us
> > > ername = 'test' ORDER BY id
> > > (0) sql: Executing select query: SELECT id, username, attribute,
> > > value, op FROM
> > > radcheck WHERE username = 'test' ORDER BY id
> > > (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username
> > > =
> > > '%{SQL-User-
> > > Name}' ORDER BY priority
> > > (0) sql: --> SELECT groupname FROM radusergroup WHERE username =
> > 'test'
> > > ORDER
> > > BY priority
> > > (0) sql: Executing select query: SELECT groupname FROM
> > > radusergroup WHERE userna
> > > me = 'test' ORDER BY priority
> > > (0) sql: User not found in any groups rlm_sql (sql): Released
> > > connection (0) Need 5 more connections to reach 10 spares rlm_sql
> > > (sql): Opening additional connection (5), 1 of
> > > 27 pending slots used
> > > (0) [sql] = notfound
> > > (0) [expiration] = noop
> > > (0) [logintime] = noop
> > > (0) pap: WARNING: No "known good" password found for the user.
> > > Not setting Auth
> > > -Type
> > > (0) pap: WARNING: Authentication will fail unless a "known good"
> > > password is ava
> > > ilable
> > > (0) [pap] = noop
> > > (0) } # authorize = ok
> > > (0) ERROR: No Auth-Type found: rejecting the user via
> > > Post-Auth-Type = Reject
> > > (0) Failed to authenticate the user
> > > (0) Using Post-Auth-Type Reject
> > > (0) # Executing group from file /etc/freeradius/3.0/sites-
> > enabled/default
> > > (0) Post-Auth-Type REJECT {
> > > (0) sql: EXPAND .query
> > > (0) sql: --> .query
> > > (0) sql: Using query template 'query'
> > > rlm_sql (sql): Reserved connection (1)
> > > (0) sql: EXPAND %{User-Name}
> > > (0) sql: --> test
> > > (0) sql: SQL-User-Name set to 'test'
> > > (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply,
> > > authdate) VALUES
> > > ( '%{SQL-User-Name}',
> > > '%{%{User-Password}:-%{Chap-Password}}',
> > > '%{reply:Packet-
> > > Type}', '%S')
> > > (0) sql: --> INSERT INTO radpostauth (username, pass, reply,
> authdate)
> > > VALUES
> > > ( 'test', 'test', 'Access-Reject', '2018-06-24
> > > 13:55:21')
> > > (0) sql: Executing query: INSERT INTO radpostauth (username, pass,
> > > reply, authda
> > > te) VALUES ( 'test', 'test', 'Access-Reject',
> > > '2018-06-24
> > > 13:55:21')
> > > (0) sql: SQL query returned: success
> > > (0) sql: 1 record(s) updated
> > > rlm_sql (sql): Released connection (1)
> > > (0) [sql] = ok
> > > (0) attr_filter.access_reject: EXPAND %{User-Name}
> > > (0) attr_filter.access_reject: --> test
> > > (0) attr_filter.access_reject: Matched entry DEFAULT at line 11
> > > (0) [attr_filter.access_reject] = updated
> > > (0) [eap] = noop
> > > (0) policy remove_reply_message_if_eap {
> > > (0) if (&reply:EAP-Message && &reply:Reply-Message) {
> > > (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
> > > (0) else {
> > > (0) [noop] = noop
> > > (0) } # else = noop
> > > (0) } # policy remove_reply_message_if_eap = noop
> > > (0) } # Post-Auth-Type REJECT = updated
> > > (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds.
> > > Waking up in 0.6 seconds.
> > > (0) Sending delayed response
> > > (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to
> > > 127.0.0.1:37474 length 20 Waking up in 3.9 seconds.
> > > (0) Cleaning up request packet ID 195 with timestamp +2 Ready to
> > > process requests
> > >
> > > Thanks in advance
> > >
> > >
> > > BR
> > >
> > >
> > >
> > >
> > > Javier Escalante
> > > Business Development Manager
> > > Javier.escalante@bwireless.eu
> > > 00 34 626 785 675
> > > 00 34 93 141 56 36
> > > 00 41 78 689 85 69
> > > Skype: fruiz002
> > > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > > http://www.bwireless.eu Le informamos que, de conformidad con la
> > > Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos
> > > de Carácter Personal, se informa que todos los datos personales
> > > que nos ha facilitado serán incorporados y tratados en los
> > > ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L.
> > > con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o
> > > bien mediante una comunicación a la dirección de correo
> > > electrónico
> > info@bwireless.eu.
> > > En ambos casos, deberá acompañar una copia de su documento
> > > nacional de identidad o documento válido que lo identifique.
> > >
> > >
> > > -----Original Message-----
> > > From: Freeradius-Users
> > > [mailto:freeradius-users-bounces+javier.escalante=
> > > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > > Sent: viernes, 22 de junio de 2018 20:06
> > > To: FreeRadius users mailing list
> > > Subject: Re: right tutorial
> > >
> > > hi,
> > >
> > > Could somebody tell us which tutorial /wiki can we follow in order
> > > to
> > > > properly configure freeradius 3.0.16?
> > > >
> > >
> > > properly configure? you need to define what it is you are trying
> > > to
> do.
> > > based on other replies there is history here that I havent seen
> > > (or deleted amongst deluge of other posts) one persons
> > > requirement/use-case rarely matches with another.
> > >
> > > take FreeRADIUS 3.0.16 - either built form source or via package.
> then
> > > follow the guides (or read the docs in the config files
> > > themselves) as required.
> > >
> > > DONT hack a load of the config around , start with basics (as per
> > > docs)
> > >
> > >
> > > alan
> > > -
> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > > list/users.html
> > >
> > >
> > > -
> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > > list/users.html
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
And btw, in my current system (2.x working perfectly), the table radreply, is empty.
Javier Escalante
Business Development Manager
Javier.escalante@bwireless.eu
00 34 626 785 675
00 34 93 141 56 36
00 41 78 689 85 69
Skype: fruiz002
Do you know our IoT solutions? Have a look here: www.bsmart.global
http://www.bwireless.eu
Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique.
-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
Sent: martes, 26 de junio de 2018 0:01
To: FreeRadius users mailing list
Subject: Re: right tutorial
read SQL FR docs to see what the radreply table does - use of fall-through etc.
your error is because it is trying to do a group check. you havent got any group info - your choice how to fix
alan
On 25 June 2018 at 22:58, Javier Escalante <Javier.Escalante@bwireless.eu>
wrote:
> Hello,
>
> What means "set to no", commented? What do you mean when you say:
> "you might want to put relevant things int he radreply table."
>
>
> Thanks
>
> BR
> Javier Escalante
> Business Development Manager
> Javier.escalante@bwireless.eu
> 00 34 626 785 675
> 00 34 93 141 56 36
> 00 41 78 689 85 69
> Skype: fruiz002
> Do you know our IoT solutions? Have a look here: www.bsmart.global
> http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> Carácter Personal, se informa que todos los datos personales que nos
> ha facilitado serán incorporados y tratados en los ficheros de B’W &
> TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> Puede ejercer sus derechos de acceso, rectificación, cancelación y
> oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> mediante una comunicación a la dirección de correo electrónico info@bwireless.eu.
> En ambos casos, deberá acompañar una copia de su documento nacional
> de identidad o documento válido que lo identifique.
>
>
> -----Original Message-----
> From: Freeradius-Users
> [mailto:freeradius-users-bounces+javier.escalante=
> bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> Sent: lunes, 25 de junio de 2018 18:22
> To: FreeRadius users mailing list
> Subject: Re: right tutorial
>
> hi,
>
> check your config (sql config) to ensure you are not using the group
> check stuff if you dont want groups and havent defined groups
>
> # Tables containing 'check' items
> authcheck_table = "radcheck"
> groupcheck_table = "radgroupcheck"
>
> # Tables containing 'reply' items
> authreply_table = "radreply"
> groupreply_table = "radgroupreply"
>
> # Table to keep group info
> usergroup_table = "radusergroup"
>
> # If set to 'yes' (default) we read the group tables unless
> Fall-Through = no in the reply table.
> # If set to 'no' we do not read the group tables unless Fall-Through =
> yes in the reply table.
> # read_groups = yes
>
> see? its a check item by default...and if you dont have a response, its a
> fail. you might want to put relevant things int he radreply table.
>
> alan
>
>
> On 24 June 2018 at 14:57, Javier Escalante
> <Javier.Escalante@bwireless.eu>
> wrote:
>
> > Hello,
> >
> > Sorry guys, based on the answers of Alan, I might be stupid...I'll
> > explain another time and I hope this time I get some help:
> >
> > 1. I installed a fresh server (I have my all server already
> > configured and working since 4 years) 2. I installed freeradius 3.0.16 and mysql.
> > No errors during installation 3. I tested with user and password in
> > file, and it worked perfectly 4. I tested by putting the user test
> > with password test in radcheck and the authentication failed as it
> > is shown further down.
> > 5. I have searched in all kind of forums and obviously also in
> > www.freeradius.org. No solution yet.
> > 6. The sql seems to be working despite the include line is not
> > uncommented in radiusd.conf. Can somebody confirm?
> >
> > Can anybody give me a clue of how to solve this problem?
> >
> > Request:
> >
> > radtest test test localhost 10 1107
> >
> > Freeradius debug output:
> >
> > Ready to process requests
> > (0) Received Access-Request Id 195 from 127.0.0.1:37474 to
> > 127.0.0.1:1812 length
> > 74
> > (0) User-Name = "test"
> > (0) User-Password = "test"
> > (0) NAS-IP-Address = 5.135.246.127
> > (0) NAS-Port = 10
> > (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27
> > (0) # Executing section authorize from file
> > /etc/freeradius/3.0/sites-enabled/de
> >
> > fault
> > (0) authorize {
> > (0) [preprocess] = ok
> > (0) [chap] = noop
> > (0) [mschap] = noop
> > (0) [digest] = noop
> > (0) suffix: Checking for suffix after "@"
> > (0) suffix: No '@' in User-Name = "test", looking up realm NULL
> > (0) suffix: No such realm "NULL"
> > (0) [suffix] = noop
> > (0) eap: No EAP-Message, not doing EAP
> > (0) [eap] = noop
> > (0) [files] = noop
> > (0) sql: EXPAND %{User-Name}
> > (0) sql: --> test
> > (0) sql: SQL-User-Name set to 'test'
> > rlm_sql (sql): Reserved connection (0)
> > (0) sql: EXPAND SELECT id, username, attribute, value, op FROM
> > radcheck WHERE us
> > ername = '%{SQL-User-Name}' ORDER BY id
> > (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck
> > WHERE us
> > ername = 'test' ORDER BY id
> > (0) sql: Executing select query: SELECT id, username, attribute,
> > value, op FROM
> > radcheck WHERE username = 'test' ORDER BY id
> > (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username =
> > '%{SQL-User-
> > Name}' ORDER BY priority
> > (0) sql: --> SELECT groupname FROM radusergroup WHERE username =
> 'test'
> > ORDER
> > BY priority
> > (0) sql: Executing select query: SELECT groupname FROM radusergroup
> > WHERE userna
> > me = 'test' ORDER BY priority
> > (0) sql: User not found in any groups rlm_sql (sql): Released
> > connection (0) Need 5 more connections to reach 10 spares rlm_sql
> > (sql): Opening additional connection (5), 1 of
> > 27 pending slots used
> > (0) [sql] = notfound
> > (0) [expiration] = noop
> > (0) [logintime] = noop
> > (0) pap: WARNING: No "known good" password found for the user. Not
> > setting Auth
> > -Type
> > (0) pap: WARNING: Authentication will fail unless a "known good"
> > password is ava
> > ilable
> > (0) [pap] = noop
> > (0) } # authorize = ok
> > (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type
> > = Reject
> > (0) Failed to authenticate the user
> > (0) Using Post-Auth-Type Reject
> > (0) # Executing group from file /etc/freeradius/3.0/sites-
> enabled/default
> > (0) Post-Auth-Type REJECT {
> > (0) sql: EXPAND .query
> > (0) sql: --> .query
> > (0) sql: Using query template 'query'
> > rlm_sql (sql): Reserved connection (1)
> > (0) sql: EXPAND %{User-Name}
> > (0) sql: --> test
> > (0) sql: SQL-User-Name set to 'test'
> > (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply,
> > authdate) VALUES
> > ( '%{SQL-User-Name}',
> > '%{%{User-Password}:-%{Chap-Password}}',
> > '%{reply:Packet-
> > Type}', '%S')
> > (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate)
> > VALUES
> > ( 'test', 'test', 'Access-Reject', '2018-06-24
> > 13:55:21')
> > (0) sql: Executing query: INSERT INTO radpostauth (username, pass,
> > reply, authda
> > te) VALUES ( 'test', 'test', 'Access-Reject',
> > '2018-06-24
> > 13:55:21')
> > (0) sql: SQL query returned: success
> > (0) sql: 1 record(s) updated
> > rlm_sql (sql): Released connection (1)
> > (0) [sql] = ok
> > (0) attr_filter.access_reject: EXPAND %{User-Name}
> > (0) attr_filter.access_reject: --> test
> > (0) attr_filter.access_reject: Matched entry DEFAULT at line 11
> > (0) [attr_filter.access_reject] = updated
> > (0) [eap] = noop
> > (0) policy remove_reply_message_if_eap {
> > (0) if (&reply:EAP-Message && &reply:Reply-Message) {
> > (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
> > (0) else {
> > (0) [noop] = noop
> > (0) } # else = noop
> > (0) } # policy remove_reply_message_if_eap = noop
> > (0) } # Post-Auth-Type REJECT = updated
> > (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds.
> > Waking up in 0.6 seconds.
> > (0) Sending delayed response
> > (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474
> > length 20 Waking up in 3.9 seconds.
> > (0) Cleaning up request packet ID 195 with timestamp +2 Ready to
> > process requests
> >
> > Thanks in advance
> >
> >
> > BR
> >
> >
> >
> >
> > Javier Escalante
> > Business Development Manager
> > Javier.escalante@bwireless.eu
> > 00 34 626 785 675
> > 00 34 93 141 56 36
> > 00 41 78 689 85 69
> > Skype: fruiz002
> > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> > Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> > Carácter Personal, se informa que todos los datos personales que
> > nos ha facilitado serán incorporados y tratados en los ficheros de
> > B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> > domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> > mediante una comunicación a la dirección de correo electrónico
> info@bwireless.eu.
> > En ambos casos, deberá acompañar una copia de su documento nacional
> > de identidad o documento válido que lo identifique.
> >
> >
> > -----Original Message-----
> > From: Freeradius-Users
> > [mailto:freeradius-users-bounces+javier.escalante=
> > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > Sent: viernes, 22 de junio de 2018 20:06
> > To: FreeRadius users mailing list
> > Subject: Re: right tutorial
> >
> > hi,
> >
> > Could somebody tell us which tutorial /wiki can we follow in order
> > to
> > > properly configure freeradius 3.0.16?
> > >
> >
> > properly configure? you need to define what it is you are trying to do.
> > based on other replies there is history here that I havent seen (or
> > deleted amongst deluge of other posts) one persons
> > requirement/use-case rarely matches with another.
> >
> > take FreeRADIUS 3.0.16 - either built form source or via package. then
> > follow the guides (or read the docs in the config files themselves)
> > as required.
> >
> > DONT hack a load of the config around , start with basics (as per
> > docs)
> >
> >
> > alan
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
What's your radcheck in the 2.x ?
On Mon, Jun 25, 2018, 23:09 Javier Escalante <Javier.Escalante@bwireless.eu>
wrote:
> And btw, in my current system (2.x working perfectly), the table radreply,
> is empty.
>
> Javier Escalante
> Business Development Manager
> Javier.escalante@bwireless.eu
> 00 34 626 785 675
> 00 34 93 141 56 36
> 00 41 78 689 85 69
> Skype: fruiz002
> Do you know our IoT solutions? Have a look here: www.bsmart.global
> http://www.bwireless.eu
> Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de
> diciembre, de Protección de Datos de Carácter Personal, se informa que
> todos los datos personales que nos ha facilitado serán incorporados y
> tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades
> de su e-mail.
> Puede ejercer sus derechos de acceso, rectificación, cancelación y
> oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante
> una comunicación a la dirección de correo electrónico info@bwireless.eu.
> En ambos casos, deberá acompañar una copia de su documento nacional de
> identidad o documento válido que lo identifique.
>
>
> -----Original Message-----
> From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=
> bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> Sent: martes, 26 de junio de 2018 0:01
> To: FreeRadius users mailing list
> Subject: Re: right tutorial
>
> read SQL FR docs to see what the radreply table does - use of fall-through
> etc.
>
> your error is because it is trying to do a group check. you havent got any
> group info - your choice how to fix
>
> alan
>
> On 25 June 2018 at 22:58, Javier Escalante <Javier.Escalante@bwireless.eu>
> wrote:
>
> > Hello,
> >
> > What means "set to no", commented? What do you mean when you say:
> > "you might want to put relevant things int he radreply table."
> >
> >
> > Thanks
> >
> > BR
> > Javier Escalante
> > Business Development Manager
> > Javier.escalante@bwireless.eu
> > 00 34 626 785 675
> > 00 34 93 141 56 36
> > 00 41 78 689 85 69
> > Skype: fruiz002
> > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> > Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> > Carácter Personal, se informa que todos los datos personales que nos
> > ha facilitado serán incorporados y tratados en los ficheros de B’W &
> > TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> > domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> > mediante una comunicación a la dirección de correo electrónico
> info@bwireless.eu.
> > En ambos casos, deberá acompañar una copia de su documento nacional
> > de identidad o documento válido que lo identifique.
> >
> >
> > -----Original Message-----
> > From: Freeradius-Users
> > [mailto:freeradius-users-bounces+javier.escalante=
> > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > Sent: lunes, 25 de junio de 2018 18:22
> > To: FreeRadius users mailing list
> > Subject: Re: right tutorial
> >
> > hi,
> >
> > check your config (sql config) to ensure you are not using the group
> > check stuff if you dont want groups and havent defined groups
> >
> > # Tables containing 'check' items
> > authcheck_table = "radcheck"
> > groupcheck_table = "radgroupcheck"
> >
> > # Tables containing 'reply' items
> > authreply_table = "radreply"
> > groupreply_table = "radgroupreply"
> >
> > # Table to keep group info
> > usergroup_table = "radusergroup"
> >
> > # If set to 'yes' (default) we read the group tables unless
> > Fall-Through = no in the reply table.
> > # If set to 'no' we do not read the group tables unless Fall-Through =
> > yes in the reply table.
> > # read_groups = yes
> >
> > see? its a check item by default...and if you dont have a response, its
> a
> > fail. you might want to put relevant things int he radreply table.
> >
> > alan
> >
> >
> > On 24 June 2018 at 14:57, Javier Escalante
> > <Javier.Escalante@bwireless.eu>
> > wrote:
> >
> > > Hello,
> > >
> > > Sorry guys, based on the answers of Alan, I might be stupid...I'll
> > > explain another time and I hope this time I get some help:
> > >
> > > 1. I installed a fresh server (I have my all server already
> > > configured and working since 4 years) 2. I installed freeradius 3.0.16
> and mysql.
> > > No errors during installation 3. I tested with user and password in
> > > file, and it worked perfectly 4. I tested by putting the user test
> > > with password test in radcheck and the authentication failed as it
> > > is shown further down.
> > > 5. I have searched in all kind of forums and obviously also in
> > > www.freeradius.org. No solution yet.
> > > 6. The sql seems to be working despite the include line is not
> > > uncommented in radiusd.conf. Can somebody confirm?
> > >
> > > Can anybody give me a clue of how to solve this problem?
> > >
> > > Request:
> > >
> > > radtest test test localhost 10 1107
> > >
> > > Freeradius debug output:
> > >
> > > Ready to process requests
> > > (0) Received Access-Request Id 195 from 127.0.0.1:37474 to
> > > 127.0.0.1:1812 length
> > > 74
> > > (0) User-Name = "test"
> > > (0) User-Password = "test"
> > > (0) NAS-IP-Address = 5.135.246.127
> > > (0) NAS-Port = 10
> > > (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27
> > > (0) # Executing section authorize from file
> > > /etc/freeradius/3.0/sites-enabled/de
> > >
> > > fault
> > > (0) authorize {
> > > (0) [preprocess] = ok
> > > (0) [chap] = noop
> > > (0) [mschap] = noop
> > > (0) [digest] = noop
> > > (0) suffix: Checking for suffix after "@"
> > > (0) suffix: No '@' in User-Name = "test", looking up realm NULL
> > > (0) suffix: No such realm "NULL"
> > > (0) [suffix] = noop
> > > (0) eap: No EAP-Message, not doing EAP
> > > (0) [eap] = noop
> > > (0) [files] = noop
> > > (0) sql: EXPAND %{User-Name}
> > > (0) sql: --> test
> > > (0) sql: SQL-User-Name set to 'test'
> > > rlm_sql (sql): Reserved connection (0)
> > > (0) sql: EXPAND SELECT id, username, attribute, value, op FROM
> > > radcheck WHERE us
> > > ername = '%{SQL-User-Name}' ORDER BY id
> > > (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck
> > > WHERE us
> > > ername = 'test' ORDER BY id
> > > (0) sql: Executing select query: SELECT id, username, attribute,
> > > value, op FROM
> > > radcheck WHERE username = 'test' ORDER BY id
> > > (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username =
> > > '%{SQL-User-
> > > Name}' ORDER BY priority
> > > (0) sql: --> SELECT groupname FROM radusergroup WHERE username =
> > 'test'
> > > ORDER
> > > BY priority
> > > (0) sql: Executing select query: SELECT groupname FROM radusergroup
> > > WHERE userna
> > > me = 'test' ORDER BY priority
> > > (0) sql: User not found in any groups rlm_sql (sql): Released
> > > connection (0) Need 5 more connections to reach 10 spares rlm_sql
> > > (sql): Opening additional connection (5), 1 of
> > > 27 pending slots used
> > > (0) [sql] = notfound
> > > (0) [expiration] = noop
> > > (0) [logintime] = noop
> > > (0) pap: WARNING: No "known good" password found for the user. Not
> > > setting Auth
> > > -Type
> > > (0) pap: WARNING: Authentication will fail unless a "known good"
> > > password is ava
> > > ilable
> > > (0) [pap] = noop
> > > (0) } # authorize = ok
> > > (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type
> > > = Reject
> > > (0) Failed to authenticate the user
> > > (0) Using Post-Auth-Type Reject
> > > (0) # Executing group from file /etc/freeradius/3.0/sites-
> > enabled/default
> > > (0) Post-Auth-Type REJECT {
> > > (0) sql: EXPAND .query
> > > (0) sql: --> .query
> > > (0) sql: Using query template 'query'
> > > rlm_sql (sql): Reserved connection (1)
> > > (0) sql: EXPAND %{User-Name}
> > > (0) sql: --> test
> > > (0) sql: SQL-User-Name set to 'test'
> > > (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply,
> > > authdate) VALUES
> > > ( '%{SQL-User-Name}',
> > > '%{%{User-Password}:-%{Chap-Password}}',
> > > '%{reply:Packet-
> > > Type}', '%S')
> > > (0) sql: --> INSERT INTO radpostauth (username, pass, reply,
> authdate)
> > > VALUES
> > > ( 'test', 'test', 'Access-Reject', '2018-06-24
> > > 13:55:21')
> > > (0) sql: Executing query: INSERT INTO radpostauth (username, pass,
> > > reply, authda
> > > te) VALUES ( 'test', 'test', 'Access-Reject',
> > > '2018-06-24
> > > 13:55:21')
> > > (0) sql: SQL query returned: success
> > > (0) sql: 1 record(s) updated
> > > rlm_sql (sql): Released connection (1)
> > > (0) [sql] = ok
> > > (0) attr_filter.access_reject: EXPAND %{User-Name}
> > > (0) attr_filter.access_reject: --> test
> > > (0) attr_filter.access_reject: Matched entry DEFAULT at line 11
> > > (0) [attr_filter.access_reject] = updated
> > > (0) [eap] = noop
> > > (0) policy remove_reply_message_if_eap {
> > > (0) if (&reply:EAP-Message && &reply:Reply-Message) {
> > > (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
> > > (0) else {
> > > (0) [noop] = noop
> > > (0) } # else = noop
> > > (0) } # policy remove_reply_message_if_eap = noop
> > > (0) } # Post-Auth-Type REJECT = updated
> > > (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds.
> > > Waking up in 0.6 seconds.
> > > (0) Sending delayed response
> > > (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474
> > > length 20 Waking up in 3.9 seconds.
> > > (0) Cleaning up request packet ID 195 with timestamp +2 Ready to
> > > process requests
> > >
> > > Thanks in advance
> > >
> > >
> > > BR
> > >
> > >
> > >
> > >
> > > Javier Escalante
> > > Business Development Manager
> > > Javier.escalante@bwireless.eu
> > > 00 34 626 785 675
> > > 00 34 93 141 56 36
> > > 00 41 78 689 85 69
> > > Skype: fruiz002
> > > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > > http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> > > Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> > > Carácter Personal, se informa que todos los datos personales que
> > > nos ha facilitado serán incorporados y tratados en los ficheros de
> > > B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> > > domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> > > mediante una comunicación a la dirección de correo electrónico
> > info@bwireless.eu.
> > > En ambos casos, deberá acompañar una copia de su documento nacional
> > > de identidad o documento válido que lo identifique.
> > >
> > >
> > > -----Original Message-----
> > > From: Freeradius-Users
> > > [mailto:freeradius-users-bounces+javier.escalante=
> > > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > > Sent: viernes, 22 de junio de 2018 20:06
> > > To: FreeRadius users mailing list
> > > Subject: Re: right tutorial
> > >
> > > hi,
> > >
> > > Could somebody tell us which tutorial /wiki can we follow in order
> > > to
> > > > properly configure freeradius 3.0.16?
> > > >
> > >
> > > properly configure? you need to define what it is you are trying to
> do.
> > > based on other replies there is history here that I havent seen (or
> > > deleted amongst deluge of other posts) one persons
> > > requirement/use-case rarely matches with another.
> > >
> > > take FreeRADIUS 3.0.16 - either built form source or via package.
> then
> > > follow the guides (or read the docs in the config files themselves)
> > > as required.
> > >
> > > DONT hack a load of the config around , start with basics (as per
> > > docs)
> > >
> > >
> > > alan
> > > -
> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > > list/users.html
> > >
> > >
> > > -
> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > > list/users.html
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
Sorry, what do you mean by:
What's your radcheck in the 2.x?
Javier Escalante
Business Development Manager
Javier.escalante@bwireless.eu
00 34 626 785 675
00 34 93 141 56 36
00 41 78 689 85 69
Skype: fruiz002
Do you know our IoT solutions? Have a look here: www.bsmart.global
http://www.bwireless.eu
Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique.
-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=bwireless.eu@lists.freeradius.org] On Behalf Of Uchenna Nebedum
Sent: martes, 26 de junio de 2018 0:10
To: FreeRadius users mailing list
Subject: Re: right tutorial
What's your radcheck in the 2.x ?
On Mon, Jun 25, 2018, 23:09 Javier Escalante <Javier.Escalante@bwireless.eu>
wrote:
> And btw, in my current system (2.x working perfectly), the table
> radreply, is empty.
>
> Javier Escalante
> Business Development Manager
> Javier.escalante@bwireless.eu
> 00 34 626 785 675
> 00 34 93 141 56 36
> 00 41 78 689 85 69
> Skype: fruiz002
> Do you know our IoT solutions? Have a look here: www.bsmart.global
> http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> Carácter Personal, se informa que todos los datos personales que nos
> ha facilitado serán incorporados y tratados en los ficheros de B’W &
> TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> Puede ejercer sus derechos de acceso, rectificación, cancelación y
> oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> mediante una comunicación a la dirección de correo electrónico info@bwireless.eu.
> En ambos casos, deberá acompañar una copia de su documento nacional
> de identidad o documento válido que lo identifique.
>
>
> -----Original Message-----
> From: Freeradius-Users
> [mailto:freeradius-users-bounces+javier.escalante=
> bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> Sent: martes, 26 de junio de 2018 0:01
> To: FreeRadius users mailing list
> Subject: Re: right tutorial
>
> read SQL FR docs to see what the radreply table does - use of
> fall-through etc.
>
> your error is because it is trying to do a group check. you havent got
> any group info - your choice how to fix
>
> alan
>
> On 25 June 2018 at 22:58, Javier Escalante
> <Javier.Escalante@bwireless.eu>
> wrote:
>
> > Hello,
> >
> > What means "set to no", commented? What do you mean when you say:
> > "you might want to put relevant things int he radreply table."
> >
> >
> > Thanks
> >
> > BR
> > Javier Escalante
> > Business Development Manager
> > Javier.escalante@bwireless.eu
> > 00 34 626 785 675
> > 00 34 93 141 56 36
> > 00 41 78 689 85 69
> > Skype: fruiz002
> > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> > Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> > Carácter Personal, se informa que todos los datos personales que
> > nos ha facilitado serán incorporados y tratados en los ficheros de
> > B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> > domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> > mediante una comunicación a la dirección de correo electrónico
> info@bwireless.eu.
> > En ambos casos, deberá acompañar una copia de su documento nacional
> > de identidad o documento válido que lo identifique.
> >
> >
> > -----Original Message-----
> > From: Freeradius-Users
> > [mailto:freeradius-users-bounces+javier.escalante=
> > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > Sent: lunes, 25 de junio de 2018 18:22
> > To: FreeRadius users mailing list
> > Subject: Re: right tutorial
> >
> > hi,
> >
> > check your config (sql config) to ensure you are not using the group
> > check stuff if you dont want groups and havent defined groups
> >
> > # Tables containing 'check' items
> > authcheck_table = "radcheck"
> > groupcheck_table = "radgroupcheck"
> >
> > # Tables containing 'reply' items
> > authreply_table = "radreply"
> > groupreply_table = "radgroupreply"
> >
> > # Table to keep group info
> > usergroup_table = "radusergroup"
> >
> > # If set to 'yes' (default) we read the group tables unless
> > Fall-Through = no in the reply table.
> > # If set to 'no' we do not read the group tables unless Fall-Through
> > = yes in the reply table.
> > # read_groups = yes
> >
> > see? its a check item by default...and if you dont have a response,
> > its
> a
> > fail. you might want to put relevant things int he radreply table.
> >
> > alan
> >
> >
> > On 24 June 2018 at 14:57, Javier Escalante
> > <Javier.Escalante@bwireless.eu>
> > wrote:
> >
> > > Hello,
> > >
> > > Sorry guys, based on the answers of Alan, I might be stupid...I'll
> > > explain another time and I hope this time I get some help:
> > >
> > > 1. I installed a fresh server (I have my all server already
> > > configured and working since 4 years) 2. I installed freeradius
> > > 3.0.16
> and mysql.
> > > No errors during installation 3. I tested with user and password
> > > in file, and it worked perfectly 4. I tested by putting the user
> > > test with password test in radcheck and the authentication failed
> > > as it is shown further down.
> > > 5. I have searched in all kind of forums and obviously also in
> > > www.freeradius.org. No solution yet.
> > > 6. The sql seems to be working despite the include line is not
> > > uncommented in radiusd.conf. Can somebody confirm?
> > >
> > > Can anybody give me a clue of how to solve this problem?
> > >
> > > Request:
> > >
> > > radtest test test localhost 10 1107
> > >
> > > Freeradius debug output:
> > >
> > > Ready to process requests
> > > (0) Received Access-Request Id 195 from 127.0.0.1:37474 to
> > > 127.0.0.1:1812 length
> > > 74
> > > (0) User-Name = "test"
> > > (0) User-Password = "test"
> > > (0) NAS-IP-Address = 5.135.246.127
> > > (0) NAS-Port = 10
> > > (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27
> > > (0) # Executing section authorize from file
> > > /etc/freeradius/3.0/sites-enabled/de
> > >
> > > fault
> > > (0) authorize {
> > > (0) [preprocess] = ok
> > > (0) [chap] = noop
> > > (0) [mschap] = noop
> > > (0) [digest] = noop
> > > (0) suffix: Checking for suffix after "@"
> > > (0) suffix: No '@' in User-Name = "test", looking up realm NULL
> > > (0) suffix: No such realm "NULL"
> > > (0) [suffix] = noop
> > > (0) eap: No EAP-Message, not doing EAP
> > > (0) [eap] = noop
> > > (0) [files] = noop
> > > (0) sql: EXPAND %{User-Name}
> > > (0) sql: --> test
> > > (0) sql: SQL-User-Name set to 'test'
> > > rlm_sql (sql): Reserved connection (0)
> > > (0) sql: EXPAND SELECT id, username, attribute, value, op FROM
> > > radcheck WHERE us
> > > ername = '%{SQL-User-Name}' ORDER BY id
> > > (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck
> > > WHERE us
> > > ername = 'test' ORDER BY id
> > > (0) sql: Executing select query: SELECT id, username, attribute,
> > > value, op FROM
> > > radcheck WHERE username = 'test' ORDER BY id
> > > (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username
> > > =
> > > '%{SQL-User-
> > > Name}' ORDER BY priority
> > > (0) sql: --> SELECT groupname FROM radusergroup WHERE username =
> > 'test'
> > > ORDER
> > > BY priority
> > > (0) sql: Executing select query: SELECT groupname FROM
> > > radusergroup WHERE userna
> > > me = 'test' ORDER BY priority
> > > (0) sql: User not found in any groups rlm_sql (sql): Released
> > > connection (0) Need 5 more connections to reach 10 spares rlm_sql
> > > (sql): Opening additional connection (5), 1 of
> > > 27 pending slots used
> > > (0) [sql] = notfound
> > > (0) [expiration] = noop
> > > (0) [logintime] = noop
> > > (0) pap: WARNING: No "known good" password found for the user.
> > > Not setting Auth
> > > -Type
> > > (0) pap: WARNING: Authentication will fail unless a "known good"
> > > password is ava
> > > ilable
> > > (0) [pap] = noop
> > > (0) } # authorize = ok
> > > (0) ERROR: No Auth-Type found: rejecting the user via
> > > Post-Auth-Type = Reject
> > > (0) Failed to authenticate the user
> > > (0) Using Post-Auth-Type Reject
> > > (0) # Executing group from file /etc/freeradius/3.0/sites-
> > enabled/default
> > > (0) Post-Auth-Type REJECT {
> > > (0) sql: EXPAND .query
> > > (0) sql: --> .query
> > > (0) sql: Using query template 'query'
> > > rlm_sql (sql): Reserved connection (1)
> > > (0) sql: EXPAND %{User-Name}
> > > (0) sql: --> test
> > > (0) sql: SQL-User-Name set to 'test'
> > > (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply,
> > > authdate) VALUES
> > > ( '%{SQL-User-Name}',
> > > '%{%{User-Password}:-%{Chap-Password}}',
> > > '%{reply:Packet-
> > > Type}', '%S')
> > > (0) sql: --> INSERT INTO radpostauth (username, pass, reply,
> authdate)
> > > VALUES
> > > ( 'test', 'test', 'Access-Reject', '2018-06-24
> > > 13:55:21')
> > > (0) sql: Executing query: INSERT INTO radpostauth (username, pass,
> > > reply, authda
> > > te) VALUES ( 'test', 'test', 'Access-Reject',
> > > '2018-06-24
> > > 13:55:21')
> > > (0) sql: SQL query returned: success
> > > (0) sql: 1 record(s) updated
> > > rlm_sql (sql): Released connection (1)
> > > (0) [sql] = ok
> > > (0) attr_filter.access_reject: EXPAND %{User-Name}
> > > (0) attr_filter.access_reject: --> test
> > > (0) attr_filter.access_reject: Matched entry DEFAULT at line 11
> > > (0) [attr_filter.access_reject] = updated
> > > (0) [eap] = noop
> > > (0) policy remove_reply_message_if_eap {
> > > (0) if (&reply:EAP-Message && &reply:Reply-Message) {
> > > (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
> > > (0) else {
> > > (0) [noop] = noop
> > > (0) } # else = noop
> > > (0) } # policy remove_reply_message_if_eap = noop
> > > (0) } # Post-Auth-Type REJECT = updated
> > > (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds.
> > > Waking up in 0.6 seconds.
> > > (0) Sending delayed response
> > > (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to
> > > 127.0.0.1:37474 length 20 Waking up in 3.9 seconds.
> > > (0) Cleaning up request packet ID 195 with timestamp +2 Ready to
> > > process requests
> > >
> > > Thanks in advance
> > >
> > >
> > > BR
> > >
> > >
> > >
> > >
> > > Javier Escalante
> > > Business Development Manager
> > > Javier.escalante@bwireless.eu
> > > 00 34 626 785 675
> > > 00 34 93 141 56 36
> > > 00 41 78 689 85 69
> > > Skype: fruiz002
> > > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > > http://www.bwireless.eu Le informamos que, de conformidad con la
> > > Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos
> > > de Carácter Personal, se informa que todos los datos personales
> > > que nos ha facilitado serán incorporados y tratados en los
> > > ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L.
> > > con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o
> > > bien mediante una comunicación a la dirección de correo
> > > electrónico
> > info@bwireless.eu.
> > > En ambos casos, deberá acompañar una copia de su documento
> > > nacional de identidad o documento válido que lo identifique.
> > >
> > >
> > > -----Original Message-----
> > > From: Freeradius-Users
> > > [mailto:freeradius-users-bounces+javier.escalante=
> > > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > > Sent: viernes, 22 de junio de 2018 20:06
> > > To: FreeRadius users mailing list
> > > Subject: Re: right tutorial
> > >
> > > hi,
> > >
> > > Could somebody tell us which tutorial /wiki can we follow in order
> > > to
> > > > properly configure freeradius 3.0.16?
> > > >
> > >
> > > properly configure? you need to define what it is you are trying
> > > to
> do.
> > > based on other replies there is history here that I havent seen
> > > (or deleted amongst deluge of other posts) one persons
> > > requirement/use-case rarely matches with another.
> > >
> > > take FreeRADIUS 3.0.16 - either built form source or via package.
> then
> > > follow the guides (or read the docs in the config files
> > > themselves) as required.
> > >
> > > DONT hack a load of the config around , start with basics (as per
> > > docs)
> > >
> > >
> > > alan
> > > -
> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > > list/users.html
> > >
> > >
> > > -
> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > > list/users.html
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hwllo,
You mean this;
radcheck table:
joeuser Cleartext-Password := somepassword
radreply table:
joeuser Fall-Through = Yes
https://wiki.freeradius.org/modules/Rlm_sql#sql-schema-and-usage_radreply-table
If so, I added the following line in radreply:
Full texts id username attribute op value
Edit Edit Copy Copy Delete Delete 6 fredf Fall-Through :=
The result is the same...
Is there any doc. Where there is more info about radreply? Anyway, as commented, in my current verion, it is not used.
BR
Javier Escalante
Business Development Manager
Javier.escalante@bwireless.eu
00 34 626 785 675
00 34 93 141 56 36
00 41 78 689 85 69
Skype: fruiz002
Do you know our IoT solutions? Have a look here: www.bsmart.global
http://www.bwireless.eu
Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique.
-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
Sent: martes, 26 de junio de 2018 0:01
To: FreeRadius users mailing list
Subject: Re: right tutorial
read SQL FR docs to see what the radreply table does - use of fall-through etc.
your error is because it is trying to do a group check. you havent got any group info - your choice how to fix
alan
On 25 June 2018 at 22:58, Javier Escalante <Javier.Escalante@bwireless.eu>
wrote:
> Hello,
>
> What means "set to no", commented? What do you mean when you say:
> "you might want to put relevant things int he radreply table."
>
>
> Thanks
>
> BR
> Javier Escalante
> Business Development Manager
> Javier.escalante@bwireless.eu
> 00 34 626 785 675
> 00 34 93 141 56 36
> 00 41 78 689 85 69
> Skype: fruiz002
> Do you know our IoT solutions? Have a look here: www.bsmart.global
> http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> Carácter Personal, se informa que todos los datos personales que nos
> ha facilitado serán incorporados y tratados en los ficheros de B’W &
> TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> Puede ejercer sus derechos de acceso, rectificación, cancelación y
> oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> mediante una comunicación a la dirección de correo electrónico info@bwireless.eu.
> En ambos casos, deberá acompañar una copia de su documento nacional
> de identidad o documento válido que lo identifique.
>
>
> -----Original Message-----
> From: Freeradius-Users
> [mailto:freeradius-users-bounces+javier.escalante=
> bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> Sent: lunes, 25 de junio de 2018 18:22
> To: FreeRadius users mailing list
> Subject: Re: right tutorial
>
> hi,
>
> check your config (sql config) to ensure you are not using the group
> check stuff if you dont want groups and havent defined groups
>
> # Tables containing 'check' items
> authcheck_table = "radcheck"
> groupcheck_table = "radgroupcheck"
>
> # Tables containing 'reply' items
> authreply_table = "radreply"
> groupreply_table = "radgroupreply"
>
> # Table to keep group info
> usergroup_table = "radusergroup"
>
> # If set to 'yes' (default) we read the group tables unless
> Fall-Through = no in the reply table.
> # If set to 'no' we do not read the group tables unless Fall-Through =
> yes in the reply table.
> # read_groups = yes
>
> see? its a check item by default...and if you dont have a response, its a
> fail. you might want to put relevant things int he radreply table.
>
> alan
>
>
> On 24 June 2018 at 14:57, Javier Escalante
> <Javier.Escalante@bwireless.eu>
> wrote:
>
> > Hello,
> >
> > Sorry guys, based on the answers of Alan, I might be stupid...I'll
> > explain another time and I hope this time I get some help:
> >
> > 1. I installed a fresh server (I have my all server already
> > configured and working since 4 years) 2. I installed freeradius 3.0.16 and mysql.
> > No errors during installation 3. I tested with user and password in
> > file, and it worked perfectly 4. I tested by putting the user test
> > with password test in radcheck and the authentication failed as it
> > is shown further down.
> > 5. I have searched in all kind of forums and obviously also in
> > www.freeradius.org. No solution yet.
> > 6. The sql seems to be working despite the include line is not
> > uncommented in radiusd.conf. Can somebody confirm?
> >
> > Can anybody give me a clue of how to solve this problem?
> >
> > Request:
> >
> > radtest test test localhost 10 1107
> >
> > Freeradius debug output:
> >
> > Ready to process requests
> > (0) Received Access-Request Id 195 from 127.0.0.1:37474 to
> > 127.0.0.1:1812 length
> > 74
> > (0) User-Name = "test"
> > (0) User-Password = "test"
> > (0) NAS-IP-Address = 5.135.246.127
> > (0) NAS-Port = 10
> > (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27
> > (0) # Executing section authorize from file
> > /etc/freeradius/3.0/sites-enabled/de
> >
> > fault
> > (0) authorize {
> > (0) [preprocess] = ok
> > (0) [chap] = noop
> > (0) [mschap] = noop
> > (0) [digest] = noop
> > (0) suffix: Checking for suffix after "@"
> > (0) suffix: No '@' in User-Name = "test", looking up realm NULL
> > (0) suffix: No such realm "NULL"
> > (0) [suffix] = noop
> > (0) eap: No EAP-Message, not doing EAP
> > (0) [eap] = noop
> > (0) [files] = noop
> > (0) sql: EXPAND %{User-Name}
> > (0) sql: --> test
> > (0) sql: SQL-User-Name set to 'test'
> > rlm_sql (sql): Reserved connection (0)
> > (0) sql: EXPAND SELECT id, username, attribute, value, op FROM
> > radcheck WHERE us
> > ername = '%{SQL-User-Name}' ORDER BY id
> > (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck
> > WHERE us
> > ername = 'test' ORDER BY id
> > (0) sql: Executing select query: SELECT id, username, attribute,
> > value, op FROM
> > radcheck WHERE username = 'test' ORDER BY id
> > (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username =
> > '%{SQL-User-
> > Name}' ORDER BY priority
> > (0) sql: --> SELECT groupname FROM radusergroup WHERE username =
> 'test'
> > ORDER
> > BY priority
> > (0) sql: Executing select query: SELECT groupname FROM radusergroup
> > WHERE userna
> > me = 'test' ORDER BY priority
> > (0) sql: User not found in any groups rlm_sql (sql): Released
> > connection (0) Need 5 more connections to reach 10 spares rlm_sql
> > (sql): Opening additional connection (5), 1 of
> > 27 pending slots used
> > (0) [sql] = notfound
> > (0) [expiration] = noop
> > (0) [logintime] = noop
> > (0) pap: WARNING: No "known good" password found for the user. Not
> > setting Auth
> > -Type
> > (0) pap: WARNING: Authentication will fail unless a "known good"
> > password is ava
> > ilable
> > (0) [pap] = noop
> > (0) } # authorize = ok
> > (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type
> > = Reject
> > (0) Failed to authenticate the user
> > (0) Using Post-Auth-Type Reject
> > (0) # Executing group from file /etc/freeradius/3.0/sites-
> enabled/default
> > (0) Post-Auth-Type REJECT {
> > (0) sql: EXPAND .query
> > (0) sql: --> .query
> > (0) sql: Using query template 'query'
> > rlm_sql (sql): Reserved connection (1)
> > (0) sql: EXPAND %{User-Name}
> > (0) sql: --> test
> > (0) sql: SQL-User-Name set to 'test'
> > (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply,
> > authdate) VALUES
> > ( '%{SQL-User-Name}',
> > '%{%{User-Password}:-%{Chap-Password}}',
> > '%{reply:Packet-
> > Type}', '%S')
> > (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate)
> > VALUES
> > ( 'test', 'test', 'Access-Reject', '2018-06-24
> > 13:55:21')
> > (0) sql: Executing query: INSERT INTO radpostauth (username, pass,
> > reply, authda
> > te) VALUES ( 'test', 'test', 'Access-Reject',
> > '2018-06-24
> > 13:55:21')
> > (0) sql: SQL query returned: success
> > (0) sql: 1 record(s) updated
> > rlm_sql (sql): Released connection (1)
> > (0) [sql] = ok
> > (0) attr_filter.access_reject: EXPAND %{User-Name}
> > (0) attr_filter.access_reject: --> test
> > (0) attr_filter.access_reject: Matched entry DEFAULT at line 11
> > (0) [attr_filter.access_reject] = updated
> > (0) [eap] = noop
> > (0) policy remove_reply_message_if_eap {
> > (0) if (&reply:EAP-Message && &reply:Reply-Message) {
> > (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
> > (0) else {
> > (0) [noop] = noop
> > (0) } # else = noop
> > (0) } # policy remove_reply_message_if_eap = noop
> > (0) } # Post-Auth-Type REJECT = updated
> > (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds.
> > Waking up in 0.6 seconds.
> > (0) Sending delayed response
> > (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474
> > length 20 Waking up in 3.9 seconds.
> > (0) Cleaning up request packet ID 195 with timestamp +2 Ready to
> > process requests
> >
> > Thanks in advance
> >
> >
> > BR
> >
> >
> >
> >
> > Javier Escalante
> > Business Development Manager
> > Javier.escalante@bwireless.eu
> > 00 34 626 785 675
> > 00 34 93 141 56 36
> > 00 41 78 689 85 69
> > Skype: fruiz002
> > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> > Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> > Carácter Personal, se informa que todos los datos personales que
> > nos ha facilitado serán incorporados y tratados en los ficheros de
> > B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> > domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> > mediante una comunicación a la dirección de correo electrónico
> info@bwireless.eu.
> > En ambos casos, deberá acompañar una copia de su documento nacional
> > de identidad o documento válido que lo identifique.
> >
> >
> > -----Original Message-----
> > From: Freeradius-Users
> > [mailto:freeradius-users-bounces+javier.escalante=
> > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > Sent: viernes, 22 de junio de 2018 20:06
> > To: FreeRadius users mailing list
> > Subject: Re: right tutorial
> >
> > hi,
> >
> > Could somebody tell us which tutorial /wiki can we follow in order
> > to
> > > properly configure freeradius 3.0.16?
> > >
> >
> > properly configure? you need to define what it is you are trying to do.
> > based on other replies there is history here that I havent seen (or
> > deleted amongst deluge of other posts) one persons
> > requirement/use-case rarely matches with another.
> >
> > take FreeRADIUS 3.0.16 - either built form source or via package. then
> > follow the guides (or read the docs in the config files themselves)
> > as required.
> >
> > DONT hack a load of the config around , start with basics (as per
> > docs)
> >
> >
> > alan
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
This is what I send;
root@be2:/etc/freeradius/3.0/sites-enabled# radtest testuser testpassword 127.0.0.1 0 secret Sent Access-Request Id 28 from 0.0.0.0:42886 to 127.0.0.1:1812 length 78
User-Name = "testuser"
User-Password = "testpassword"
NAS-IP-Address = 192.168.0.25
NAS-Port = 0
Message-Authenticator = 0x00
Cleartext-Password = "testpassword"
Received Access-Reject Id 28 from 127.0.0.1:1812 to 0.0.0.0:0 length 20
(0) -: Expected Access-Accept got Access-Reject
What I noticed is that based on this tutorial, which I followed now .
https://www.serveradminblog.com/2011/12/freeradius-install-howto-4-populating-tables/
I should have gotten this:
[root@ns2 raddb]# radtest testuser testpassword 127.0.0.1 0 testing123 Sending Access-Request of id 228 to 127.0.0.1 port 1812
User-Name = "testuser"
User-Password = "testpassword"
NAS-IP-Address = 192.168.0.10
NAS-Port = 0
Message-Authenticator = 0x00000000000000000000000000000000
rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=228, length=54
Ascend-Xmit-Rate = 524288
Ascend-Data-Rate = 131072
Framed-Pool = "internet"
So, in the tutorial, Cleartext-Password = "testpassword" does not show up. Can it be the error? Does anybody know how to fix it?
Thanks
BR
Javier Escalante
Business Development Manager
Javier.escalante@bwireless.eu
00 34 626 785 675
00 34 93 141 56 36
00 41 78 689 85 69
Skype: fruiz002
Do you know our IoT solutions? Have a look here: www.bsmart.global
http://www.bwireless.eu
Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique.
-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
Sent: martes, 26 de junio de 2018 0:01
To: FreeRadius users mailing list
Subject: Re: right tutorial
read SQL FR docs to see what the radreply table does - use of fall-through etc.
your error is because it is trying to do a group check. you havent got any group info - your choice how to fix
alan
On 25 June 2018 at 22:58, Javier Escalante <Javier.Escalante@bwireless.eu>
wrote:
> Hello,
>
> What means "set to no", commented? What do you mean when you say:
> "you might want to put relevant things int he radreply table."
>
>
> Thanks
>
> BR
> Javier Escalante
> Business Development Manager
> Javier.escalante@bwireless.eu
> 00 34 626 785 675
> 00 34 93 141 56 36
> 00 41 78 689 85 69
> Skype: fruiz002
> Do you know our IoT solutions? Have a look here: www.bsmart.global
> http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> Carácter Personal, se informa que todos los datos personales que nos
> ha facilitado serán incorporados y tratados en los ficheros de B’W &
> TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> Puede ejercer sus derechos de acceso, rectificación, cancelación y
> oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> mediante una comunicación a la dirección de correo electrónico info@bwireless.eu.
> En ambos casos, deberá acompañar una copia de su documento nacional
> de identidad o documento válido que lo identifique.
>
>
> -----Original Message-----
> From: Freeradius-Users
> [mailto:freeradius-users-bounces+javier.escalante=
> bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> Sent: lunes, 25 de junio de 2018 18:22
> To: FreeRadius users mailing list
> Subject: Re: right tutorial
>
> hi,
>
> check your config (sql config) to ensure you are not using the group
> check stuff if you dont want groups and havent defined groups
>
> # Tables containing 'check' items
> authcheck_table = "radcheck"
> groupcheck_table = "radgroupcheck"
>
> # Tables containing 'reply' items
> authreply_table = "radreply"
> groupreply_table = "radgroupreply"
>
> # Table to keep group info
> usergroup_table = "radusergroup"
>
> # If set to 'yes' (default) we read the group tables unless
> Fall-Through = no in the reply table.
> # If set to 'no' we do not read the group tables unless Fall-Through =
> yes in the reply table.
> # read_groups = yes
>
> see? its a check item by default...and if you dont have a response, its a
> fail. you might want to put relevant things int he radreply table.
>
> alan
>
>
> On 24 June 2018 at 14:57, Javier Escalante
> <Javier.Escalante@bwireless.eu>
> wrote:
>
> > Hello,
> >
> > Sorry guys, based on the answers of Alan, I might be stupid...I'll
> > explain another time and I hope this time I get some help:
> >
> > 1. I installed a fresh server (I have my all server already
> > configured and working since 4 years) 2. I installed freeradius 3.0.16 and mysql.
> > No errors during installation 3. I tested with user and password in
> > file, and it worked perfectly 4. I tested by putting the user test
> > with password test in radcheck and the authentication failed as it
> > is shown further down.
> > 5. I have searched in all kind of forums and obviously also in
> > www.freeradius.org. No solution yet.
> > 6. The sql seems to be working despite the include line is not
> > uncommented in radiusd.conf. Can somebody confirm?
> >
> > Can anybody give me a clue of how to solve this problem?
> >
> > Request:
> >
> > radtest test test localhost 10 1107
> >
> > Freeradius debug output:
> >
> > Ready to process requests
> > (0) Received Access-Request Id 195 from 127.0.0.1:37474 to
> > 127.0.0.1:1812 length
> > 74
> > (0) User-Name = "test"
> > (0) User-Password = "test"
> > (0) NAS-IP-Address = 5.135.246.127
> > (0) NAS-Port = 10
> > (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27
> > (0) # Executing section authorize from file
> > /etc/freeradius/3.0/sites-enabled/de
> >
> > fault
> > (0) authorize {
> > (0) [preprocess] = ok
> > (0) [chap] = noop
> > (0) [mschap] = noop
> > (0) [digest] = noop
> > (0) suffix: Checking for suffix after "@"
> > (0) suffix: No '@' in User-Name = "test", looking up realm NULL
> > (0) suffix: No such realm "NULL"
> > (0) [suffix] = noop
> > (0) eap: No EAP-Message, not doing EAP
> > (0) [eap] = noop
> > (0) [files] = noop
> > (0) sql: EXPAND %{User-Name}
> > (0) sql: --> test
> > (0) sql: SQL-User-Name set to 'test'
> > rlm_sql (sql): Reserved connection (0)
> > (0) sql: EXPAND SELECT id, username, attribute, value, op FROM
> > radcheck WHERE us
> > ername = '%{SQL-User-Name}' ORDER BY id
> > (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck
> > WHERE us
> > ername = 'test' ORDER BY id
> > (0) sql: Executing select query: SELECT id, username, attribute,
> > value, op FROM
> > radcheck WHERE username = 'test' ORDER BY id
> > (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username =
> > '%{SQL-User-
> > Name}' ORDER BY priority
> > (0) sql: --> SELECT groupname FROM radusergroup WHERE username =
> 'test'
> > ORDER
> > BY priority
> > (0) sql: Executing select query: SELECT groupname FROM radusergroup
> > WHERE userna
> > me = 'test' ORDER BY priority
> > (0) sql: User not found in any groups rlm_sql (sql): Released
> > connection (0) Need 5 more connections to reach 10 spares rlm_sql
> > (sql): Opening additional connection (5), 1 of
> > 27 pending slots used
> > (0) [sql] = notfound
> > (0) [expiration] = noop
> > (0) [logintime] = noop
> > (0) pap: WARNING: No "known good" password found for the user. Not
> > setting Auth
> > -Type
> > (0) pap: WARNING: Authentication will fail unless a "known good"
> > password is ava
> > ilable
> > (0) [pap] = noop
> > (0) } # authorize = ok
> > (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type
> > = Reject
> > (0) Failed to authenticate the user
> > (0) Using Post-Auth-Type Reject
> > (0) # Executing group from file /etc/freeradius/3.0/sites-
> enabled/default
> > (0) Post-Auth-Type REJECT {
> > (0) sql: EXPAND .query
> > (0) sql: --> .query
> > (0) sql: Using query template 'query'
> > rlm_sql (sql): Reserved connection (1)
> > (0) sql: EXPAND %{User-Name}
> > (0) sql: --> test
> > (0) sql: SQL-User-Name set to 'test'
> > (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply,
> > authdate) VALUES
> > ( '%{SQL-User-Name}',
> > '%{%{User-Password}:-%{Chap-Password}}',
> > '%{reply:Packet-
> > Type}', '%S')
> > (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate)
> > VALUES
> > ( 'test', 'test', 'Access-Reject', '2018-06-24
> > 13:55:21')
> > (0) sql: Executing query: INSERT INTO radpostauth (username, pass,
> > reply, authda
> > te) VALUES ( 'test', 'test', 'Access-Reject',
> > '2018-06-24
> > 13:55:21')
> > (0) sql: SQL query returned: success
> > (0) sql: 1 record(s) updated
> > rlm_sql (sql): Released connection (1)
> > (0) [sql] = ok
> > (0) attr_filter.access_reject: EXPAND %{User-Name}
> > (0) attr_filter.access_reject: --> test
> > (0) attr_filter.access_reject: Matched entry DEFAULT at line 11
> > (0) [attr_filter.access_reject] = updated
> > (0) [eap] = noop
> > (0) policy remove_reply_message_if_eap {
> > (0) if (&reply:EAP-Message && &reply:Reply-Message) {
> > (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
> > (0) else {
> > (0) [noop] = noop
> > (0) } # else = noop
> > (0) } # policy remove_reply_message_if_eap = noop
> > (0) } # Post-Auth-Type REJECT = updated
> > (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds.
> > Waking up in 0.6 seconds.
> > (0) Sending delayed response
> > (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474
> > length 20 Waking up in 3.9 seconds.
> > (0) Cleaning up request packet ID 195 with timestamp +2 Ready to
> > process requests
> >
> > Thanks in advance
> >
> >
> > BR
> >
> >
> >
> >
> > Javier Escalante
> > Business Development Manager
> > Javier.escalante@bwireless.eu
> > 00 34 626 785 675
> > 00 34 93 141 56 36
> > 00 41 78 689 85 69
> > Skype: fruiz002
> > Do you know our IoT solutions? Have a look here: www.bsmart.global
> > http://www.bwireless.eu Le informamos que, de conformidad con la Ley
> > Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de
> > Carácter Personal, se informa que todos los datos personales que
> > nos ha facilitado serán incorporados y tratados en los ficheros de
> > B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail.
> > Puede ejercer sus derechos de acceso, rectificación, cancelación y
> > oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con
> > domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien
> > mediante una comunicación a la dirección de correo electrónico
> info@bwireless.eu.
> > En ambos casos, deberá acompañar una copia de su documento nacional
> > de identidad o documento válido que lo identifique.
> >
> >
> > -----Original Message-----
> > From: Freeradius-Users
> > [mailto:freeradius-users-bounces+javier.escalante=
> > bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey
> > Sent: viernes, 22 de junio de 2018 20:06
> > To: FreeRadius users mailing list
> > Subject: Re: right tutorial
> >
> > hi,
> >
> > Could somebody tell us which tutorial /wiki can we follow in order
> > to
> > > properly configure freeradius 3.0.16?
> > >
> >
> > properly configure? you need to define what it is you are trying to do.
> > based on other replies there is history here that I havent seen (or
> > deleted amongst deluge of other posts) one persons
> > requirement/use-case rarely matches with another.
> >
> > take FreeRADIUS 3.0.16 - either built form source or via package. then
> > follow the guides (or read the docs in the config files themselves)
> > as required.
> >
> > DONT hack a load of the config around , start with basics (as per
> > docs)
> >
> >
> > alan
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Jun 26, 2018, at 8:25 AM, Javier Escalante <Javier.Escalante@bwireless.eu> wrote:
This is what I send;
Which isn't what we need to help you. You've been told this repeatedly.
What I noticed is that based on this tutorial, which I followed now .
https://www.serveradminblog.com/2011/12/freeradius-install-howto-4-populatin...
You've already been told that reading random web pages is wrong. You've already been told to ask the author of those pages if you have issues following their documentation.
So, in the tutorial, Cleartext-Password = "testpassword" does not show up. Can it be the error? Does anybody know how to fix it?
You're not following the instructions we give you, despite many, many, messages. You now have a choice: a) your next post to the list makes it clear that you're STILL not following instructions. You will then be unsubscribed from the list, and banned. b) your next post to the list makes it clear that you HAVE read the documentation, and you ARE following instructions. In which was people will help you, and you will get the problem solved. It's up to you. Alan DeKok.
You can bann me idiot,!!!!!!!!!!!! Sent from my Huawei Mobile -------- Original Message -------- Subject: Re: right tutorial From: Alan DeKok To: FreeRadius users mailing list CC: On Jun 26, 2018, at 8:25 AM, Javier Escalante wrote: > This is what I send; Which isn't what we need to help you. You've been told this repeatedly. > What I noticed is that based on this tutorial, which I followed now . > > https://www.serveradminblog.com/2011/12/freeradius-install-howto-4-p opulating-tables/ You've already been told that reading random web pages is wrong. You've already been told to ask the author of those pages if you have issues following their documentation. > So, in the tutorial, Cleartext-Password = "testpassword" does not show up. Can it be the error? Does anybody know how to fix it? You're not following the instructions we give you, despite many, many, messages. You now have a choice: a) your next post to the list makes it clear that you're STILL not following instructions. You will then be unsubscribed from the list, and banned. b) your next post to the list makes it clear that you HAVE read the documentation, and you ARE following instructions. In which was people will help you, and you will get the problem solved. It's up to you. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
You are so stupid that you think that you are superior to others, and instead of helping, you are just criticizo g others, when you are not able to give an understandable answer. What do you think, that you are superior to me? Stupid!! Make a proper fucking tutorial and give understandeable answers, before you treat us like idiots!!! Sent from my Huawei Mobile -------- Original Message -------- Subject: Re: right tutorial From: Alan DeKok To: FreeRadius users mailing list CC: On Jun 26, 2018, at 8:25 AM, Javier Escalante wrote: > This is what I send; Which isn't what we need to help you. You've been told this repeatedly. > What I noticed is that based on this tutorial, which I followed now . > > https://www.serveradminblog.com/2011/12/freeradius-install-howto-4-p opulating-tables/ You've already been told that reading random web pages is wrong. You've already been told to ask the author of those pages if you have issues following their documentation. > So, in the tutorial, Cleartext-Password = "testpassword" does not show up. Can it be the error? Does anybody know how to fix it? You're not following the instructions we give you, despite many, many, messages. You now have a choice: a) your next post to the list makes it clear that you're STILL not following instructions. You will then be unsubscribed from the list, and banned. b) your next post to the list makes it clear that you HAVE read the documentation, and you ARE following instructions. In which was people will help you, and you will get the problem solved. It's up to you. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
And we're done. He's gone. It's been many years since I've seen someone have that many problems following the documentation. Alan DeKok.
Well that “escalante”d quickly.
On Jun 26, 2018, at 11:36 PM, "Javier.Escalante@bwireless.eu" <Javier.Escalante@bwireless.eu> wrote:
You are so stupid that you think that you are superior to others, and instead of helping, you are just criticizo g others, when you are not able to give an understandable answer. What do you think, that you are superior to me? Stupid!! Make a proper fucking tutorial and give understandeable answers, before you treat us like idiots!!! Sent from my Huawei Mobile
-------- Original Message -------- Subject: Re: right tutorial From: Alan DeKok To: FreeRadius users mailing list CC:
On Jun 26, 2018, at 8:25 AM, Javier Escalante wrote: This is what I send;
Which isn't what we need to help you. You've been told this repeatedly.
What I noticed is that based on this tutorial, which I followed now .
So, in the tutorial, Cleartext-Password = "testpassword" does not show up. Can it be the error? Does anybody know how to fix it? You're not following the instructions we give you, despite many, many, messages. You now have a choice: a) your next post to the list makes it clear that you're STILL not following instructions. You will then be unsubscribed from the list, and banned. b) your next post to the list makes it clear that you HAVE read the documentation, and you ARE following instructions. In which was people will help you, and you will get the problem solved. It's up to you. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
https://www.serveradminblog.com/2011/12/freeradius-install-howto-4-p opulating-tables/ You've already been told that reading random web pages is wrong. You've already been told to ask the author of those pages if you have issues following their documentation. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Jun 26, 2018, at 9:43 AM, Martin Edge <medge@emersion.com> wrote:
Well that “escalante”d quickly.
Well, it took 30 messages of him making some progress before he was warned about his unproductive behaviour. And as soon as he was warned, he doubled down on being inappropriate. It's really quite simple. Follow instructions, and the problem will be solved. It doesn't take 30 messages to add a user to SQL and get it working. He didn't do what he was asked to do. He didn't answer questions people had for him. He read documentation and then did something *else*. He rarely posted the debug output. In short, he went out of his way to avoid solving the problem. That's just not acceptable. People sometimes worry about asking questions here. There's no need. Simple questions get simple responses. That's 99% of the traffic on this list. The more someone makes it clear they don't want help, the less likely we are to help them. Alan DeKok.
Alan, I have been on the list awhile now - and politely I do find you a little abrasive, i do appreciate and understand why you take the route you do. It in most cases helps direct those to think for themselves. Honestly after yesterday’s traffic I considered contacting you directly to understand why you take the heavy hand, but hey it’s your list, not for me to judge. I did feel the same when you helped (?) me, but hey I figured it out and my problem was solved. If you are ever in Australia- would love to catch up to meet you in person, Regards Martin Martin Edge Chief Technical Officer Emersion Software Systems e: medge@emersion.com p: +613 8658 9400 m: +61 439 367 205 a: L8/460 Bourke Street, Melbourne, VIC 3000 post: GPO Box 2824, Melbourne, VIC 3001
On Jun 26, 2018, at 11:59 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jun 26, 2018, at 9:43 AM, Martin Edge <medge@emersion.com> wrote:
Well that “escalante”d quickly.
Well, it took 30 messages of him making some progress before he was warned about his unproductive behaviour. And as soon as he was warned, he doubled down on being inappropriate.
It's really quite simple. Follow instructions, and the problem will be solved. It doesn't take 30 messages to add a user to SQL and get it working.
He didn't do what he was asked to do. He didn't answer questions people had for him. He read documentation and then did something *else*. He rarely posted the debug output.
In short, he went out of his way to avoid solving the problem. That's just not acceptable.
People sometimes worry about asking questions here. There's no need. Simple questions get simple responses. That's 99% of the traffic on this list.
The more someone makes it clear they don't want help, the less likely we are to help them.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Jun 26, 2018, at 10:19 AM, Martin Edge <medge@emersion.com> wrote:
Alan,
I have been on the list awhile now - and politely I do find you a little abrasive,
Sure. That's largely due to 20 years of messages like "Read the docs. Yes, I really meant read the docs. No, don't do anything else. Did you read the docs?" <sigh> This list isn't for coddling people or making friends. It's for solving technical problems. That means technical answers to technical questions. People who don't ask technical questions, and who don't follow technical answers are a problem.
i do appreciate and understand why you take the route you do. It in most cases helps direct those to think for themselves.
Yup. As I've said repeatedly, I'm not going to cut & paste answers from the documentation. That isn't rude. It's practical.
Honestly after yesterday’s traffic I considered contacting you directly to understand why you take the heavy hand, but hey it’s your list, not for me to judge.
The first few messages from me are always polite and helpful. After about 5 rounds of "no, READ THE DOCS", I get a little more short with people. That isn't going to change.
I did feel the same when you helped (?) me, but hey I figured it out and my problem was solved.
I don't want to hurt peoples feelings. But... Good IT people should be able to put their ego aside when reading the docs or when asking questions. When I ask questions on another list, I'm sure to ask *good* questions, and to *read the docs* they tell me to read. And funny enough, that usually means I solve the problem.
If you are ever in Australia- would love to catch up to meet you in person,
No fixed plans, but who knows? Alan DeKok.
Understood, I deal with transactional developers every day. I feel your pain. I’ve engaged with you directly - list doesn’t need noise.
On Jun 27, 2018, at 12:28 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jun 26, 2018, at 10:19 AM, Martin Edge <medge@emersion.com> wrote:
Alan,
I have been on the list awhile now - and politely I do find you a little abrasive,
Sure. That's largely due to 20 years of messages like "Read the docs. Yes, I really meant read the docs. No, don't do anything else. Did you read the docs?"
<sigh>
This list isn't for coddling people or making friends. It's for solving technical problems. That means technical answers to technical questions.
People who don't ask technical questions, and who don't follow technical answers are a problem.
i do appreciate and understand why you take the route you do. It in most cases helps direct those to think for themselves.
Yup. As I've said repeatedly, I'm not going to cut & paste answers from the documentation. That isn't rude. It's practical.
Honestly after yesterday’s traffic I considered contacting you directly to understand why you take the heavy hand, but hey it’s your list, not for me to judge.
The first few messages from me are always polite and helpful. After about 5 rounds of "no, READ THE DOCS", I get a little more short with people.
That isn't going to change.
I did feel the same when you helped (?) me, but hey I figured it out and my problem was solved.
I don't want to hurt peoples feelings. But...
Good IT people should be able to put their ego aside when reading the docs or when asking questions. When I ask questions on another list, I'm sure to ask *good* questions, and to *read the docs* they tell me to read.
And funny enough, that usually means I solve the problem.
If you are ever in Australia- would love to catch up to meet you in person,
No fixed plans, but who knows?
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Tue, Jun 26, 2018 at 9:27 AM, Alan DeKok <aland@deployingradius.com> wrote:
Sure. That's largely due to 20 years of messages like "Read the docs. Yes, I really meant read the docs. No, don't do anything else. Did you read the docs?"
Reading the docs is often like trying to learn English by reading the dictionary. I know what Nouns, Verbs, and Adjectives are, I don't know what a sane sentence structure is or how to write a poem. There is only so far most people can go on their own. Frustration is not a learning technique.
On Jun 26, 2018, at 12:50 PM, Anthony Stuckey <anthonystuckey@gmail.com> wrote:
Reading the docs is often like trying to learn English by reading the dictionary. I know what Nouns, Verbs, and Adjectives are, I don't know what a sane sentence structure is or how to write a poem.
There is only so far most people can go on their own. Frustration is not a learning technique.
People get told "read the docs" when the documentation has answers to their questions. If they have specific questions about what they read, or are uncertain about the docs, they are welcome to ask more questions. We *never* tell someone "read the docs" when the answer isn't in the docs. We *never* tell someone "read the docs" when it's clear that they HAVE read the documentation, and that they find it lacking. What you're asking for (implicitly) is documentation that tells you how to configure the server to do what you want. Sadly, this is largely impossible. There are many "how to" guides for simple / common situations. That documentation is pretty decent, and few people have pointed out errors or omissions in those pages. Once you're into custom / complex configurations, you *must* put the pieces together yourself. The following items are important: 1) you need to explain what you want to do, in detail. Many people fail here. "I want to do stuff" is not a good explanation. Much frustration is seen here when we go "please say WHAT you want to do", and people respond with "You're the experts, you tell me!" it doesn't work like that. 2) explain what you did Many people fail here, too. "I did stuff and it doesn't work" is a terrible post to a mailing list. It's been in the FAQ pretty much since the beginning of the project 3) follow instructions on the mailing list Honestly, if you ask a question and get told "post the debug output", you shouldn't do anything OTHER than post the debug output. Arguing about it, or doing something *else* is a guaranteed way to frustrate everyone. The same applies for other instructions. If you get told "post what you've put into SQL", then you should post the SQL data. Any other activity is anti-social and rude. 4) Nothing else. That's really it. If you follow steps 1, 2, and 3, then you *will* get your problem solved, and you *won't* get too frustrated. And neither will the people answering your questions. The sad part about this is that when I write such lists and give explanations, people complain that it's a series of "holier than thou" comments which put down the questioner. You just can't win. Alan DeKok.
On 06/26/18 14:58, Alan DeKok wrote:
On Jun 26, 2018, at 9:43 AM, Martin Edge <medge@emersion.com> wrote:
Well that “escalante”d quickly. Well, it took 30 messages of him making some progress before he was warned about his unproductive behaviour. And as soon as he was warned, he doubled down on being inappropriate.
It's really quite simple. Follow instructions, and the problem will be solved. It doesn't take 30 messages to add a user to SQL and get it working.
He didn't do what he was asked to do. He didn't answer questions people had for him. He read documentation and then did something *else*. He rarely posted the debug output.
In short, he went out of his way to avoid solving the problem. That's just not acceptable.
People sometimes worry about asking questions here. There's no need. Simple questions get simple responses. That's 99% of the traffic on this list.
The more someone makes it clear they don't want help, the less likely we are to help them.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I admit when I first started with FR I did have some issues figuring things out and understandably your responses Alan were quite short and sharp. The documentation does cover how to get a "working" setup. Is it to the point? In respect to does it suite everyone's use case; *no*! Different installations/requirements need different things, be it backend or what have you; this requires some knowledge and understanding of what you have and what you're trying to achieve and knowing the different components to put together. Following the list + docs most if not all of my questions have already been answered so now without needing to ask basic questions I have a nice working setup. Generally reading many posts, mostly from newbies they always seem to have a similar theme and questions or issues. The best thing to do is *read* then work methodically through the examples, VM's are a nice simple way to do this, then when running FR view the information output and actually read and try to understand what it says. So yes FR is awsome and the community is great and what I especially like is Alan's responses are always a nice kick in the butt to make people think for themselves and try to stand on their own two feed rather then being "baby sitted". Though I think we need to find a nice 'bot' or automation system for trivial questions like "it doesn't work help?" ..... Response: "Hello this is the FRad bot, Step 1. RTFM, Step 2. Read, Step 3. Think" :-P Anyway my views and humor aside, thanks to everyone for all the help directly and indirectly :-) :-) Best Regards, Kaya
On Jun 26, 2018, at 10:31 AM, Kaya Saman <kayasaman@gmail.com> wrote:
I admit when I first started with FR I did have some issues figuring things out and understandably your responses Alan were quite short and sharp.
Yes...
The documentation does cover how to get a "working" setup. Is it to the point? In respect to does it suite everyone's use case; *no*! Different installations/requirements need different things, be it backend or what have you; this requires some knowledge and understanding of what you have and what you're trying to achieve and knowing the different components to put together.
That's one of the hardest concepts to get across. FreeRADIUS can do almost anything. Which means it's impossible for us to document exactly how to do everything. Instead, we rely on documenting the pieces. The list is then about helping people put the pieces together. That then creates a solution.
Following the list + docs most if not all of my questions have already been answered so now without needing to ask basic questions I have a nice working setup.
The docs are much better than they were for v2. Many, many, questions are now answered by "go read doc X". Which should help a lot.
Generally reading many posts, mostly from newbies they always seem to have a similar theme and questions or issues. The best thing to do is *read* then work methodically through the examples, VM's are a nice simple way to do this, then when running FR view the information output and actually read and try to understand what it says.
That's what we try to explain. Sometimes it takes time to convince people that there really is no "magic solution". Another problem is that RADIUS is *much* more complex than DHCP or DNS. DNS is "here's a name, get me an IP". DHCP is "here's a MAC, get me an IP". Not complex. In contrast, RADIUS is VPN, dial-up, ADLS, Wifi, etc. with PAP, CHAP, MS-CHAP, 10 different EAP types. And then SQL, LDAP, Redis, proxying, ... And the combinations. :(
So yes FR is awsome and the community is great and what I especially like is Alan's responses are always a nice kick in the butt to make people think for themselves and try to stand on their own two feed rather then being "baby sitted". Though I think we need to find a nice 'bot' or automation system for trivial questions like "it doesn't work help?" ..... Response: "Hello this is the FRad bot, Step 1. RTFM, Step 2. Read, Step 3. Think" :-P
Yup.
Anyway my views and humor aside, thanks to everyone for all the help directly and indirectly :-) :-)
Despite my occasional crankiness, helping people is what I do. And, it's my goal. The good news is that we're working on making v4 better. I don't talk about money or business a lot, but perhaps it's useful. I'm not only 100% on FreeRADIUS, there are others, too. And I'm investing money into making the documentation and examples better. i.e. paying a full-time salary for this work. On the expectation that the end product will be better and easier to use. When I started FreeRADIUS as a hobby ~20 years ago, I didn't think I would end up paying people to work full-time on it. But that's where we are now. Alan DeKok.
On 06/26/18 16:29, Alan DeKok wrote:
On Jun 26, 2018, at 10:31 AM, Kaya Saman <kayasaman@gmail.com> wrote:
I admit when I first started with FR I did have some issues figuring things out and understandably your responses Alan were quite short and sharp. Yes...
The documentation does cover how to get a "working" setup. Is it to the point? In respect to does it suite everyone's use case; *no*! Different installations/requirements need different things, be it backend or what have you; this requires some knowledge and understanding of what you have and what you're trying to achieve and knowing the different components to put together. That's one of the hardest concepts to get across. FreeRADIUS can do almost anything. Which means it's impossible for us to document exactly how to do everything.
Instead, we rely on documenting the pieces. The list is then about helping people put the pieces together. That then creates a solution.
Following the list + docs most if not all of my questions have already been answered so now without needing to ask basic questions I have a nice working setup. The docs are much better than they were for v2. Many, many, questions are now answered by "go read doc X". Which should help a lot.
Generally reading many posts, mostly from newbies they always seem to have a similar theme and questions or issues. The best thing to do is *read* then work methodically through the examples, VM's are a nice simple way to do this, then when running FR view the information output and actually read and try to understand what it says. That's what we try to explain. Sometimes it takes time to convince people that there really is no "magic solution".
Another problem is that RADIUS is *much* more complex than DHCP or DNS. DNS is "here's a name, get me an IP". DHCP is "here's a MAC, get me an IP". Not complex.
In contrast, RADIUS is VPN, dial-up, ADLS, Wifi, etc. with PAP, CHAP, MS-CHAP, 10 different EAP types. And then SQL, LDAP, Redis, proxying, ...
And the combinations. :(
Yeah, and this is what makes FR too cool! Since it can handle integrating the above together. I mean you can run it to authenticate, authorize PPP sessions for xDSL users, or look at MAC addresses of systems to allow/deny access or control 802.11 users etc.... just like you wrote above, kind of like the "Swiss-Army-Knife" of systems integration??
So yes FR is awsome and the community is great and what I especially like is Alan's responses are always a nice kick in the butt to make people think for themselves and try to stand on their own two feed rather then being "baby sitted". Though I think we need to find a nice 'bot' or automation system for trivial questions like "it doesn't work help?" ..... Response: "Hello this is the FRad bot, Step 1. RTFM, Step 2. Read, Step 3. Think" :-P Yup.
Anyway my views and humor aside, thanks to everyone for all the help directly and indirectly :-) :-) Despite my occasional crankiness, helping people is what I do. And, it's my goal.
The good news is that we're working on making v4 better. I don't talk about money or business a lot, but perhaps it's useful.
I'm not only 100% on FreeRADIUS, there are others, too. And I'm investing money into making the documentation and examples better. i.e. paying a full-time salary for this work. On the expectation that the end product will be better and easier to use.
When I started FreeRADIUS as a hobby ~20 years ago, I didn't think I would end up paying people to work full-time on it. But that's where we are now.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
For yourself and the team... keep up the good work! :-D Call me a masochist if you will but I especially like reading some of your comments, especially when OP's don't pay attention or are being stupid! I think it goes back to my academic days (a while back now) were I always used to get on better with teachers or lecturers that were harder and more strict on their pupils. Ha looking back now it would have been so cool to have someone like yourself as a mentor. Digression aside, need to repatch my switch now to provision it for another server then start on a FR and OpenLDAP migration {yippie / sigh <- pick one haha} ; definite FR question here: how do I turn the server again :-P :-P Best Regards, Kaya
On Jun 26, 2018, at 11:58 AM, Kaya Saman <kayasaman@gmail.com> wrote:
Yeah, and this is what makes FR too cool! Since it can handle integrating the above together. I mean you can run it to authenticate, authorize PPP sessions for xDSL users, or look at MAC addresses of systems to allow/deny access or control 802.11 users etc.... just like you wrote above, kind of like the "Swiss-Army-Knife" of systems integration??
Yes. e..g The recent discussion about doing IP pool assignment in DHCP based on User-Name from RADIUS. That's impossible to do in any other piece of software. v4 will add even more functionality. That's good, but that also means documentation is even more important.
For yourself and the team... keep up the good work! :-D
Thanks. Alan DeKok.
Kaya Saman <kayasaman@gmail.com> writes:
For yourself and the team... keep up the good work! :-D
+1
Call me a masochist if you will but I especially like reading some of your comments, especially when OP's don't pay attention or are being stupid! I think it goes back to my academic days (a while back now) were I always used to get on better with teachers or lecturers that were harder and more strict on their pupils. Ha looking back now it would have been so cool to have someone like yourself as a mentor.
Ah, it's not just me :-) I often read the FreeRADIUS users list for entertainment, and usually end up learning something new. Bjørn
Hello,
Sorry guys, based on the answers of Alan, I might be stupid...I'll explain another time and I hope this time I get some help:
1. I installed a fresh server (I have my all server already configured and working since 4 years) 2. I installed freeradius 3.0.16 and mysql. No errors during installation 3. I tested with user and password in file, and it worked perfectly 4. I tested by putting the user test with password test in radcheck and the authentication failed as it is shown further down. 5. I have searched in all kind of forums and obviously also in www.freeradius.org. No solution yet. 6. The sql seems to be working despite the include line is not uncommented in radiusd.conf. Can somebody confirm?
Can anybody give me a clue of how to solve this problem?
Request:
radtest test test localhost 10 1107
Freeradius debug output:
Ready to process requests (0) Received Access-Request Id 195 from 127.0.0.1:37474 to 127.0.0.1:1812 length 74 (0) User-Name = "test" (0) User-Password = "test" (0) NAS-IP-Address = 5.135.246.127 (0) NAS-Port = 10 (0) Message-Authenticator = 0x05270c450007175556849d0b38cc7a27 (0) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/de
fault (0) authorize { (0) [preprocess] = ok (0) [chap] = noop (0) [mschap] = noop (0) [digest] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "test", looking up realm NULL (0) suffix: No such realm "NULL" (0) [suffix] = noop (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) [files] = noop (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' rlm_sql (sql): Reserved connection (0) (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE us ername = '%{SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE us ername = 'test' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User- Name}' ORDER BY priority (0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE userna me = 'test' ORDER BY priority (0) sql: User not found in any groups rlm_sql (sql): Released connection (0) Need 5 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots used (0) [sql] = notfound (0) [expiration] = noop (0) [logintime] = noop (0) pap: WARNING: No "known good" password found for the user. Not setting Auth -Type (0) pap: WARNING: Authentication will fail unless a "known good" password is ava ilable (0) [pap] = noop (0) } # authorize = ok (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user (0) Using Post-Auth-Type Reject (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) Post-Auth-Type REJECT { (0) sql: EXPAND .query (0) sql: --> .query (0) sql: Using query template 'query' rlm_sql (sql): Reserved connection (1) (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet- Type}', '%S') (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', 'test', 'Access-Reject', '2018-06-24 13:55:21') (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authda te) VALUES ( 'test', 'test', 'Access-Reject', '2018-06-24 13:55:21') (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (1) (0) [sql] = ok (0) attr_filter.access_reject: EXPAND %{User-Name} (0) attr_filter.access_reject: --> test (0) attr_filter.access_reject: Matched entry DEFAULT at line 11 (0) [attr_filter.access_reject] = updated (0) [eap] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # Post-Auth-Type REJECT = updated (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 195 from 127.0.0.1:1812 to 127.0.0.1:37474 length 20 Waking up in 3.9 seconds. (0) Cleaning up request packet ID 195 with timestamp +2 Ready to process requests
Thanks in advance
BR
Javier Escalante Business Development Manager Javier.escalante@bwireless.eu 00 34 626 785 675 00 34 93 141 56 36 00 41 78 689 85 69 Skype: fruiz002 Do you know our IoT solutions? Have a look here: www.bsmart.global http://www.bwireless.eu Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail. Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique.
-----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante= bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey Sent: viernes, 22 de junio de 2018 20:06 To: FreeRadius users mailing list Subject: Re: right tutorial
hi,
Could somebody tell us which tutorial /wiki can we follow in order to
properly configure freeradius 3.0.16?
properly configure? you need to define what it is you are trying to do. based on other replies there is history here that I havent seen (or deleted amongst deluge of other posts) one persons requirement/use-case rarely matches with another.
take FreeRADIUS 3.0.16 - either built form source or via package. then follow the guides (or read the docs in the config files themselves) as required.
DONT hack a load of the config around , start with basics (as per docs)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
Sorry, I found what you mean, I tried with yes and no, and the result is the same... Javier Escalante Business Development Manager Javier.escalante@bwireless.eu 00 34 626 785 675 00 34 93 141 56 36 00 41 78 689 85 69 Skype: fruiz002 Do you know our IoT solutions? Have a look here: www.bsmart.global http://www.bwireless.eu Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail. Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique. -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=bwireless.eu@lists.freeradius.org] On Behalf Of Alan Buxey Sent: lunes, 25 de junio de 2018 18:22 To: FreeRadius users mailing list Subject: Re: right tutorial hi, check your config (sql config) to ensure you are not using the group check stuff if you dont want groups and havent defined groups # Tables containing 'check' items authcheck_table = "radcheck" groupcheck_table = "radgroupcheck" # Tables containing 'reply' items authreply_table = "radreply" groupreply_table = "radgroupreply" # Table to keep group info usergroup_table = "radusergroup" # If set to 'yes' (default) we read the group tables unless Fall-Through = no in the reply table. # If set to 'no' we do not read the group tables unless Fall-Through = yes in the reply table. # read_groups = yes see? its a check item by default...and if you dont have a response, its a fail. you might want to put relevant things int he radreply table. alan On 24 June 2018 at 14:57, Javier Escalante <Javier.Escalante@bwireless.eu> wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (11)
-
Alan Buxey -
Alan DeKok -
Anthony Stuckey -
Arran Cudbard-Bell -
Bjørn Mork -
Dom Latter -
Javier Escalante -
Javier.Escalante＠bwireless.eu
-
Kaya Saman -
Martin Edge -
Uchenna Nebedum