No matching entry in the database for request from user
Hello, I'm getting "No matching entry in the database for request from user" returned from the sql lookup. Below I have the radclient and server diagnostics interlaced. All look correct and the querries are good (see below for them). What is wrong? Bill /usr/local/bin/radclient -x -f radclient.dat2 "194.54.234.234:1814" auth example Sending Access-Request of id 33 to 194.54.234.234:1814 Acct-Session-Id = "6000006B" User-Name = "GLF0000002@billmax.com" User-Password = "example" NAS-IP-Address = 194.126.63.86 NAS-Port-Id = "32" NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP rad_recv: Access-Request packet from host 194.54.234.234:1814, id=29, length=94 Acct-Session-Id = "6000006B" User-Name = "GLF0000002" User-Password = "example" NAS-IP-Address = 194.126.63.86 NAS-Port-Id = "32" NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP Proxy-State = 0x30303164 rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'GLF0000002' ORDER BY id rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'GLF0000002' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'GLF0000002' ORDER BY id rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'GLF0000002' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): No matching entry in the database for request from user [GLF0000002] rlm_sql (sql): Released sql socket id: 4 Re-sending Access-Request of id 33 to 194.54.234.234:1814 Acct-Session-Id = "6000006B" User-Name = "GLF0000002@billmax.com" User-Password = "\291\246\352\320\006\303p\316\230\n%\353\255\202J\341" Group = "default" NAS-IP-Address = 194.126.63.86 NAS-Port-Id = "32" NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP rad_recv: Access-Request packet from host 194.54.234.234:1814, id=29, length=94 Sending Access-Reject of id 29 to 194.54.234.234:1814 Proxy-State = 0x30303164 rad_recv: Access-Reject packet from host 194.54.234.234:1814, id=33, length=54 Reply-Message = "Proxied request" Reply-Message = "Proxied request" Here are the querries from above. They all work: mysql> SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'GLF0000002' ORDER BY id; +-------+------------+-----------------+---------------+----+ | id | UserName | Attribute | Value | op | +-------+------------+-----------------+---------------+----+ | 60647 | GLF0000002 | Crypt-Password | SMVdbmrqLzh2A | == | | 60648 | GLF0000002 | Session-Timeout | 7200 | == | +-------+------------+-----------------+---------------+----+ 2 rows in set (0.00 sec) mysql> SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'GLF0000002' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id; +----+-----------+------------------+-------------+----+ | id | GroupName | Attribute | Value | op | +----+-----------+------------------+-------------+----+ | 1 | default | Auth-Type | Pap | := | | 2 | default | Service-Type | Framed-User | := | | 3 | default | Framed-Protocol | PPP | := | | 4 | default | Simultaneous-Use | 1 | := | +----+-----------+------------------+-------------+----+ 4 rows in set (0.00 sec) mysql> SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'GLF0000002' ORDER BY id; +----+------------+------------------+-------+----+ | id | UserName | Attribute | Value | op | +----+------------+------------------+-------+----+ | 11 | GLF0000002 | Simultaneous-Use | 1 | := | +----+------------+------------------+-------+----+ 1 row in set (0.00 sec) mysql> SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'GLF0000002' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id; +----+-----------+-------------------+-----------------+----+ | id | GroupName | Attribute | Value | op | +----+-----------+-------------------+-----------------+----+ | 2 | default | Framed-Protocol | PPP | := | | 3 | default | Service-Type | Framed-User | := | | 4 | default | Framed-MTU | 1500 | := | | 5 | default | Simultaneous-Use | 1 | := | | 6 | default | Framed-IP-Netmask | 255.255.255.255 | := | | 7 | default | Idle-Timeout | 900 | := | +----+-----------+-------------------+-----------------+----+ 6 rows in set (0.01 sec)
I just tested the exact same setup but this time accessing this radius server directly (instead of thru a proxy) and it works fine. So the proxy is changing something. Thoughts? Bill Schoolfield wrote:
Hello,
I'm getting "No matching entry in the database for request from user" returned from the sql lookup. Below I have the radclient and server diagnostics interlaced. All look correct and the querries are good (see below for them). What is wrong?
Bill
/usr/local/bin/radclient -x -f radclient.dat2 "194.54.234.234:1814" auth example
Sending Access-Request of id 33 to 194.54.234.234:1814 Acct-Session-Id = "6000006B" User-Name = "GLF0000002@billmax.com" User-Password = "example" NAS-IP-Address = 194.126.63.86 NAS-Port-Id = "32" NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP rad_recv: Access-Request packet from host 194.54.234.234:1814, id=29, length=94 Acct-Session-Id = "6000006B" User-Name = "GLF0000002" User-Password = "example" NAS-IP-Address = 194.126.63.86 NAS-Port-Id = "32" NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP Proxy-State = 0x30303164 rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'GLF0000002' ORDER BY id rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'GLF0000002' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'GLF0000002' ORDER BY id rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'GLF0000002' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): No matching entry in the database for request from user [GLF0000002] rlm_sql (sql): Released sql socket id: 4 Re-sending Access-Request of id 33 to 194.54.234.234:1814 Acct-Session-Id = "6000006B" User-Name = "GLF0000002@billmax.com" User-Password = "\291\246\352\320\006\303p\316\230\n%\353\255\202J\341" Group = "default" NAS-IP-Address = 194.126.63.86 NAS-Port-Id = "32" NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP rad_recv: Access-Request packet from host 194.54.234.234:1814, id=29, length=94 Sending Access-Reject of id 29 to 194.54.234.234:1814 Proxy-State = 0x30303164 rad_recv: Access-Reject packet from host 194.54.234.234:1814, id=33, length=54 Reply-Message = "Proxied request" Reply-Message = "Proxied request"
Here are the querries from above. They all work:
mysql> SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'GLF0000002' ORDER BY id; +-------+------------+-----------------+---------------+----+ | id | UserName | Attribute | Value | op | +-------+------------+-----------------+---------------+----+ | 60647 | GLF0000002 | Crypt-Password | SMVdbmrqLzh2A | == | | 60648 | GLF0000002 | Session-Timeout | 7200 | == | +-------+------------+-----------------+---------------+----+ 2 rows in set (0.00 sec)
mysql> SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'GLF0000002' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id; +----+-----------+------------------+-------------+----+ | id | GroupName | Attribute | Value | op | +----+-----------+------------------+-------------+----+ | 1 | default | Auth-Type | Pap | := | | 2 | default | Service-Type | Framed-User | := | | 3 | default | Framed-Protocol | PPP | := | | 4 | default | Simultaneous-Use | 1 | := | +----+-----------+------------------+-------------+----+ 4 rows in set (0.00 sec)
mysql> SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'GLF0000002' ORDER BY id; +----+------------+------------------+-------+----+ | id | UserName | Attribute | Value | op | +----+------------+------------------+-------+----+ | 11 | GLF0000002 | Simultaneous-Use | 1 | := | +----+------------+------------------+-------+----+ 1 row in set (0.00 sec)
mysql> SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'GLF0000002' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id; +----+-----------+-------------------+-----------------+----+ | id | GroupName | Attribute | Value | op | +----+-----------+-------------------+-----------------+----+ | 2 | default | Framed-Protocol | PPP | := | | 3 | default | Service-Type | Framed-User | := | | 4 | default | Framed-MTU | 1500 | := | | 5 | default | Simultaneous-Use | 1 | := | | 6 | default | Framed-IP-Netmask | 255.255.255.255 | := | | 7 | default | Idle-Timeout | 900 | := | +----+-----------+-------------------+-----------------+----+ 6 rows in set (0.01 sec)
-- Bill Schoolfield Vice President, BillMax bill@billmax.com 877.245.5629 (USA toll free) 817.446.7776 (International)
Bill Schoolfield <bill@billmax.com> wrote:
I just tested the exact same setup but this time accessing this radius server directly (instead of thru a proxy) and it works fine. So the proxy is changing something. Thoughts?
Run it in debug mode, and compare the input packets && sql queries. Alan DeKok.
I did. Turns out it had nothing to do with the proxy. I had inadvertently placed a reply attribute as a check attribute in the db. That of course caused the lookup to fail. My apologies for the false alarm. Bill Alan DeKok wrote:
Bill Schoolfield <bill@billmax.com> wrote:
I just tested the exact same setup but this time accessing this radius server directly (instead of thru a proxy) and it works fine. So the proxy is changing something. Thoughts?
Run it in debug mode, and compare the input packets && sql queries.
Alan DeKok.
participants (2)
-
Alan DeKok -
Bill Schoolfield