Greetings  o/ I support a radius version 2.2.5 + mysql for a customer of ours. Recently I had to add new Vendor attributes. Using those generates an error and I am stuck. The exact error is: rlm_sql: Failed to create the pair: Unknown vendor name in attribute name "Transmode-ENM-User-Category" rlm_sql (sql): Error getting data from database The SQL query and output: mysql radius_aaa -e "SELECT id, username, attribute, value, op           FROM radreply           WHERE username ='testuser01'"; +-----+------------+-----------------------------+--------------------+----+ | id  | username   | attribute                   | value              | op | +-----+------------+-----------------------------+--------------------+----+ |  65 | testuser01 | Cisco-AVPair                | "shell:priv-lvl=5" | =  | |  66 | testuser01 | Service-Type                | NAS-Prompt-User    | =  | |  67 | testuser01 | Foundry-Privilege-Level     | 5                  | =  | |  89 | testuser01 | Juniper-Local-User-Name     | JunOS-Backbone-RO  | := | | 132 | testuser01 | Juniper-Local-User-Name     | JunOS-CPE-RO       | := | | 158 | testuser01 | Juniper-Local-User-Name     | remote             | := | | 159 | testuser01 | Transmode-ENM-User-Category | 0x1                | += | +-----+------------+-----------------------------+--------------------+----+ Debug output: --- freeradius: FreeRADIUS Version 2.2.5, for host x86_64-pc-linux-gnu, built on Aug 10 2017 at 07:25:15 Copyright (C) 1999-2013 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. Starting - reading configuration files ... including configuration file /etc/freeradius-aaa//radiusd.conf including configuration file /etc/freeradius-aaa//clients.conf including files in directory /etc/freeradius-aaa//modules/ including configuration file /etc/freeradius-aaa//modules/opendirectory including configuration file /etc/freeradius-aaa//modules/echo including configuration file /etc/freeradius-aaa//modules/logintime including configuration file /etc/freeradius-aaa//modules/detail.log including configuration file /etc/freeradius-aaa//modules/passwd including configuration file /etc/freeradius-aaa//modules/linelog including configuration file /etc/freeradius-aaa//modules/attr_rewrite including configuration file /etc/freeradius-aaa//modules/always including configuration file /etc/freeradius-aaa//modules/expiration including configuration file /etc/freeradius-aaa//modules/smsotp including configuration file /etc/freeradius-aaa//modules/dynamic_clients including configuration file /etc/freeradius-aaa//modules/mschap including configuration file /etc/freeradius-aaa//modules/radutmp including configuration file /etc/freeradius-aaa//modules/policy including configuration file /etc/freeradius-aaa//modules/mac2vlan including configuration file /etc/freeradius-aaa//modules/counter including configuration file /etc/freeradius-aaa//modules/acct_unique including configuration file /etc/freeradius-aaa//modules/exec including configuration file /etc/freeradius-aaa//modules/inner-eap including configuration file /etc/freeradius-aaa//modules/realm including configuration file /etc/freeradius-aaa//modules/ippool including configuration file /etc/freeradius-aaa//modules/detail.example.com including configuration file /etc/freeradius-aaa//modules/sql_log including configuration file /etc/freeradius-aaa//modules/wimax including configuration file /etc/freeradius-aaa//modules/ldap including configuration file /etc/freeradius-aaa//modules/mac2ip including configuration file /etc/freeradius-aaa//modules/attr_filter including configuration file /etc/freeradius-aaa//modules/ntlm_auth including configuration file /etc/freeradius-aaa//modules/otp including configuration file /etc/freeradius-aaa//modules/pap including configuration file /etc/freeradius-aaa//modules/chap including configuration file /etc/freeradius-aaa//modules/etc_group including configuration file /etc/freeradius-aaa//modules/preprocess including configuration file /etc/freeradius-aaa//modules/checkval including configuration file /etc/freeradius-aaa//modules/perl including configuration file /etc/freeradius-aaa//modules/krb5 including configuration file /etc/freeradius-aaa//modules/files including configuration file /etc/freeradius-aaa//modules/cui including configuration file /etc/freeradius-aaa//modules/detail including configuration file /etc/freeradius-aaa//modules/digest including configuration file /etc/freeradius-aaa//modules/expr including configuration file /etc/freeradius-aaa//modules/unix including configuration file /etc/freeradius-aaa//modules/smbpasswd including configuration file /etc/freeradius-aaa//modules/sradutmp including configuration file /etc/freeradius-aaa//modules/sqlcounter_expire_on_login including configuration file /etc/freeradius-aaa//modules/pam including configuration file /etc/freeradius-aaa//eap.conf including configuration file /etc/freeradius-aaa//sql.conf including configuration file /etc/freeradius-aaa//sql/mysql/dialup.conf including configuration file /etc/freeradius-aaa//sql/mysql/counter.conf including configuration file /etc/freeradius-aaa//policy.conf including files in directory /etc/freeradius-aaa//sites-enabled/ including configuration file /etc/freeradius-aaa//sites-enabled/default including configuration file /etc/freeradius-aaa//sites-enabled/inner-tunnel main {     user = "freerad"     group = "freerad"     allow_core_dumps = no } including dictionary file /etc/freeradius-aaa//dictionary main {     name = "freeradius-aaa"     prefix = "/usr"     localstatedir = "/var"     sbindir = "/usr/sbin"     logdir = "/var/log/freeradius-aaa"     run_dir = "/var/run/freeradius-aaa"     libdir = "/usr/lib/freeradius"     radacctdir = "/var/log/freeradius-aaa/radacct"     hostname_lookups = no     max_request_time = 30     cleanup_delay = 5     max_requests = 1024     pidfile = "/var/run/freeradius-aaa/freeradius-aaa.pid"     checkrad = "/usr/sbin/checkrad"     debug_level = 0     proxy_requests = no  log {      stripped_names = no      auth = yes      auth_badpass = no      auth_goodpass = no  }  security {      max_attributes = 200      reject_delay = 1      status_server = yes      allow_vulnerable_openssl = no  } } radiusd: #### Loading Realms and Home Servers #### radiusd: #### Loading Clients ####  client localhost {      ipaddr = 127.0.0.1      require_message_authenticator = no      secret = "testing123"      nastype = "other"  } radiusd: #### Instantiating modules ####  instantiate {  Module: Linked to module rlm_exec  Module: Instantiating module "exec" from file /etc/freeradius-aaa//modules/exec   exec {       wait = no       input_pairs = "request"       shell_escape = yes   }  Module: Linked to module rlm_expr  Module: Instantiating module "expr" from file /etc/freeradius-aaa//modules/expr  Module: Linked to module rlm_expiration  Module: Instantiating module "expiration" from file /etc/freeradius-aaa//modules/expiration   expiration {       reply-message = "Password Has Expired  "   }  Module: Linked to module rlm_logintime  Module: Instantiating module "logintime" from file /etc/freeradius-aaa//modules/logintime   logintime {       reply-message = "You are calling outside your allowed timespan  "       minimum-timeout = 60   }  } radiusd: #### Loading Virtual Servers #### server { # from file ?  modules {   Module: Creating Auth-Type = digest   Module: Creating Post-Auth-Type = REJECT  Module: Checking authenticate {...} for more modules to load  Module: Linked to module rlm_pap  Module: Instantiating module "pap" from file /etc/freeradius-aaa//modules/pap   pap {       encryption_scheme = "auto"       auto_header = no   }  Module: Linked to module rlm_chap  Module: Instantiating module "chap" from file /etc/freeradius-aaa//modules/chap  Module: Linked to module rlm_mschap  Module: Instantiating module "mschap" from file /etc/freeradius-aaa//modules/mschap   mschap {       use_mppe = yes       require_encryption = no       require_strong = no       with_ntdomain_hack = no       allow_retry = yes   }  Module: Linked to module rlm_digest  Module: Instantiating module "digest" from file /etc/freeradius-aaa//modules/digest  Module: Linked to module rlm_unix  Module: Instantiating module "unix" from file /etc/freeradius-aaa//modules/unix   unix {       radwtmp = "/var/log/freeradius-aaa/radwtmp"   }  Module: Linked to module rlm_eap  Module: Instantiating module "eap" from file /etc/freeradius-aaa//eap.conf   eap {       default_eap_type = "md5"       timer_expire = 60       ignore_unknown_eap_types = no       cisco_accounting_username_bug = no       max_sessions = 4096   }  Module: Linked to sub-module rlm_eap_md5  Module: Instantiating eap-md5  Module: Linked to sub-module rlm_eap_leap  Module: Instantiating eap-leap  Module: Linked to sub-module rlm_eap_gtc  Module: Instantiating eap-gtc    gtc {        challenge = "Password: "        auth_type = "PAP"    }  Module: Linked to sub-module rlm_eap_tls  Module: Instantiating eap-tls    tls {        rsa_key_exchange = no        dh_key_exchange = yes        rsa_key_length = 512        dh_key_length = 512        verify_depth = 0        CA_path = "/etc/freeradius-aaa//certs"        pem_file_type = yes        private_key_file = "/etc/freeradius-aaa//certs/server.key"        certificate_file = "/etc/freeradius-aaa//certs/server.pem"        CA_file = "/etc/freeradius-aaa//certs/ca.pem"        private_key_password = "whatever"        dh_file = "/etc/freeradius-aaa//certs/dh"        random_file = "/dev/urandom"        fragment_size = 1024        include_length = yes        check_crl = no        cipher_list = "DEFAULT"        make_cert_command = "/etc/freeradius-aaa//certs/bootstrap"        ecdh_curve = "prime256v1"     cache {         enable = no         lifetime = 24         max_entries = 255     }     verify {     }    }  Module: Linked to sub-module rlm_eap_ttls  Module: Instantiating eap-ttls    ttls {        default_eap_type = "md5"        copy_request_to_tunnel = no        use_tunneled_reply = no        virtual_server = "inner-tunnel"        include_length = yes    }  Module: Linked to sub-module rlm_eap_peap  Module: Instantiating eap-peap    peap {        default_eap_type = "mschapv2"        copy_request_to_tunnel = no        use_tunneled_reply = no        proxy_tunneled_request_as_eap = yes        virtual_server = "inner-tunnel"        soh = no    }  Module: Linked to sub-module rlm_eap_mschapv2  Module: Instantiating eap-mschapv2    mschapv2 {        with_ntdomain_hack = no        send_error = no    }  Module: Checking authorize {...} for more modules to load  Module: Linked to module rlm_preprocess  Module: Instantiating module "preprocess" from file /etc/freeradius-aaa//modules/preprocess   preprocess {       huntgroups = "/etc/freeradius-aaa//huntgroups"       hints = "/etc/freeradius-aaa//hints"       with_ascend_hack = no       ascend_channels_per_line = 23       with_ntdomain_hack = no       with_specialix_jetstream_hack = no       with_cisco_vsa_hack = no       with_alvarion_vsa_hack = no   } reading pairlist file /etc/freeradius-aaa//huntgroups reading pairlist file /etc/freeradius-aaa//hints  Module: Linked to module rlm_realm  Module: Instantiating module "suffix" from file /etc/freeradius-aaa//modules/realm   realm suffix {       format = "suffix"       delimiter = "@"       ignore_default = no       ignore_null = no   }  Module: Linked to module rlm_files  Module: Instantiating module "files" from file /etc/freeradius-aaa//modules/files   files {       usersfile = "/etc/freeradius-aaa//users"       acctusersfile = "/etc/freeradius-aaa//acct_users"       preproxy_usersfile = "/etc/freeradius-aaa//preproxy_users"       compat = "no"   } reading pairlist file /etc/freeradius-aaa//users reading pairlist file /etc/freeradius-aaa//acct_users reading pairlist file /etc/freeradius-aaa//preproxy_users  Module: Linked to module rlm_sql  Module: Instantiating module "sql" from file /etc/freeradius-aaa//sql.conf   sql {       driver = "rlm_sql_mysql"       server = "127.0.0.1"       port = "3306"       login = "<secret>"       password = "<secret>"       radius_db = "radius_aaa"       read_groups = yes       sqltrace = no       sqltracefile = "/var/log/freeradius-aaa/sqltrace.sql"       readclients = yes       deletestalesessions = yes       num_sql_socks = 5       lifetime = 0       max_queries = 0       sql_user_name = "%{User-Name}"       default_user_profile = ""       nas_query = "SELECT id, nasname, shortname, type, secret, server FROM nas"       authorize_check_query = "SELECT id, username, attribute, value, op           FROM radcheck           WHERE username = '%{SQL-User-Name}'           ORDER BY id"       authorize_reply_query = "SELECT id, username, attribute, value, op           FROM radreply           WHERE username = '%{SQL-User-Name}'           ORDER BY id"       authorize_group_check_query = "SELECT id, groupname, attribute,           Value, op           FROM radgroupcheck           WHERE groupname = '%{Sql-Group}'           ORDER BY id"       authorize_group_reply_query = "SELECT id, groupname, attribute,           value, op           FROM radgroupreply           WHERE groupname = '%{Sql-Group}'           ORDER BY id"       accounting_onoff_query = "          UPDATE radacct           SET              acctstoptime       =  '%S',              acctsessiontime    =  unix_timestamp('%S') -                                    unix_timestamp(acctstarttime),              acctterminatecause =  '%{Acct-Terminate-Cause}',              acctstopdelay      =  %{%{Acct-Delay-Time}:-0}           WHERE acctstoptime IS NULL           AND nasipaddress      =  '%{NAS-IP-Address}'           AND acctstarttime     <= '%S'"       accounting_update_query = "           UPDATE radacct           SET              framedipaddress = '%{Framed-IP-Address}',              acctsessiontime     = '%{Acct-Session-Time}',              acctinputoctets     = '%{%{Acct-Input-Gigawords}:-0}'  << 32 |                                    '%{%{Acct-Input-Octets}:-0}',              acctoutputoctets    = '%{%{Acct-Output-Gigawords}:-0}' << 32 |                                    '%{%{Acct-Output-Octets}:-0}'           WHERE acctsessionid = '%{Acct-Session-Id}'           AND username        = '%{SQL-User-Name}'           AND nasipaddress    = '%{NAS-IP-Address}'"       accounting_update_query_alt = "           INSERT INTO radacct             (acctsessionid,    acctuniqueid,      username,              realm,            nasipaddress,      nasportid,              nasporttype,      acctstarttime,     acctsessiontime,              acctauthentic,    connectinfo_start, acctinputoctets,              acctoutputoctets, calledstationid,   callingstationid,              servicetype,      framedprotocol,    framedipaddress,              acctstartdelay,   xascendsessionsvrkey)           VALUES             ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}',              '%{SQL-User-Name}',              '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}',              '%{NAS-Port-Type}',              DATE_SUB('%S',                       INTERVAL (%{%{Acct-Session-Time}:-0} +                                 %{%{Acct-Delay-Time}:-0}) SECOND),                       '%{Acct-Session-Time}',              '%{Acct-Authentic}', '',              '%{%{Acct-Input-Gigawords}:-0}' << 32 |              '%{%{Acct-Input-Octets}:-0}',              '%{%{Acct-Output-Gigawords}:-0}' << 32 |              '%{%{Acct-Output-Octets}:-0}',              '%{Called-Station-Id}', '%{Calling-Station-Id}',              '%{Service-Type}', '%{Framed-Protocol}',              '%{Framed-IP-Address}',              '0', '%{X-Ascend-Session-Svr-Key}')"       accounting_start_query = "           INSERT INTO radacct             (acctsessionid,    acctuniqueid,     username,              realm,            nasipaddress,     nasportid,              nasporttype,      acctstarttime,    acctstoptime,              acctsessiontime,  acctauthentic,    connectinfo_start,              connectinfo_stop, acctinputoctets,  acctoutputoctets,              calledstationid,  callingstationid, acctterminatecause,              servicetype,      framedprotocol,   framedipaddress,              acctstartdelay,   acctstopdelay,    xascendsessionsvrkey)           VALUES             ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}',              '%{SQL-User-Name}',              '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}',              '%{NAS-Port-Type}', '%S', NULL,              '0', '%{Acct-Authentic}', '%{Connect-Info}',              '', '0', '0',              '%{Called-Station-Id}', '%{Calling-Station-Id}', '',              '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}',              '%{%{Acct-Delay-Time}:-0}', '0', '%{X-Ascend-Session-Svr-Key}')"       accounting_start_query_alt = "           UPDATE radacct SET              acctstarttime     = '%S',              acctstartdelay    = '%{%{Acct-Delay-Time}:-0}',              connectinfo_start = '%{Connect-Info}'           WHERE acctsessionid  = '%{Acct-Session-Id}'           AND username         = '%{SQL-User-Name}'           AND nasipaddress     = '%{NAS-IP-Address}'"       accounting_stop_query = "           UPDATE radacct SET              acctstoptime       = '%S',              acctsessiontime    = '%{Acct-Session-Time}',              acctinputoctets    = '%{%{Acct-Input-Gigawords}:-0}' << 32 |                                   '%{%{Acct-Input-Octets}:-0}',              acctoutputoctets   = '%{%{Acct-Output-Gigawords}:-0}' << 32 |                                   '%{%{Acct-Output-Octets}:-0}',              acctterminatecause = '%{Acct-Terminate-Cause}',              acctstopdelay      = '%{%{Acct-Delay-Time}:-0}',              connectinfo_stop   = '%{Connect-Info}'           WHERE acctsessionid   = '%{Acct-Session-Id}'           AND username          = '%{SQL-User-Name}'           AND nasipaddress      = '%{NAS-IP-Address}'"       accounting_stop_query_alt = "           INSERT INTO radacct             (acctsessionid, acctuniqueid, username,              realm, nasipaddress, nasportid,              nasporttype, acctstarttime, acctstoptime,              acctsessiontime, acctauthentic, connectinfo_start,              connectinfo_stop, acctinputoctets, acctoutputoctets,              calledstationid, callingstationid, acctterminatecause,              servicetype, framedprotocol, framedipaddress,              acctstartdelay, acctstopdelay)           VALUES             ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}',              '%{SQL-User-Name}',              '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}',              '%{NAS-Port-Type}',              DATE_SUB('%S',                  INTERVAL (%{%{Acct-Session-Time}:-0} +                  %{%{Acct-Delay-Time}:-0}) SECOND),              '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '',              '%{Connect-Info}',              '%{%{Acct-Input-Gigawords}:-0}' << 32 |              '%{%{Acct-Input-Octets}:-0}',              '%{%{Acct-Output-Gigawords}:-0}' << 32 |              '%{%{Acct-Output-Octets}:-0}',              '%{Called-Station-Id}', '%{Calling-Station-Id}',              '%{Acct-Terminate-Cause}',              '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}',              '0', '%{%{Acct-Delay-Time}:-0}')"       group_membership_query = "SELECT groupname           FROM radusergroup           WHERE username = '%{SQL-User-Name}'           ORDER BY priority"       connect_failure_retry_delay = 60       simul_count_query = ""       simul_verify_query = "SELECT radacctid, acctsessionid, username,                                nasipaddress, nasportid, framedipaddress,                                callingstationid, framedprotocol                                FROM radacct                                WHERE username = '%{SQL-User-Name}'                                AND acctstoptime IS NULL"       postauth_query = "INSERT INTO radpostauth                           (username, pass, reply, authdate)                           VALUES (                           '%{User-Name}',                           '%{%{User-Password}:-%{Chap-Password}}',                           '%{reply:Packet-Type}', '%S')"       safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"   } rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to dolibarr@127.0.0.1:3306/radius_aaa rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 rlm_sql (sql): Processing generate_sql_clients rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): Read entry nasname=<HOSTNAME>,shortname=<HOSTNAME>,secret=<secret> rlm_sql (sql): Adding client <IP> (<HOSTNAME>, server=<none>) to clients list rlm_sql (sql): Read entry nasname=<HOSTNAME>,shortname=<HOSTNAME>,secret=<secret> rlm_sql (sql): Adding client <IP> (<HOSTNAME>, server=<none>) to clients list <removed some lines> rlm_sql (sql): Released sql socket id: 4  Module: Checking preacct {...} for more modules to load  Module: Linked to module rlm_acct_unique  Module: Instantiating module "acct_unique" from file /etc/freeradius-aaa//modules/acct_unique   acct_unique {       key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"   }  Module: Checking accounting {...} for more modules to load  Module: Linked to module rlm_detail  Module: Instantiating module "detail" from file /etc/freeradius-aaa//modules/detail   detail {       detailfile = "/var/log/freeradius-aaa/radacct/%{Client-IP-Address}/detail-%Y%m%d"       header = "%t"       detailperm = 384       dirperm = 493       locking = no       log_packet_header = no   }  Module: Linked to module rlm_radutmp  Module: Instantiating module "radutmp" from file /etc/freeradius-aaa//modules/radutmp   radutmp {       filename = "/var/log/freeradius-aaa/radutmp"       username = "%{User-Name}"       case_sensitive = yes       check_with_nas = yes       perm = 384       callerid = yes   }  Module: Linked to module rlm_sql_log  Module: Instantiating module "sql_log" from file /etc/freeradius-aaa//modules/sql_log   sql_log {       path = "/var/log/freeradius-aaa/radacct/sql-relay"       Post-Auth = "INSERT INTO radpostauth                        (username, pass, reply, authdate) VALUES                         ('%{User-Name}', '%{User-Password:-Chap-Password}',              '%{reply:Packet-Type}', '%S');"       sql_user_name = "%{%{User-Name}:-DEFAULT}"       utf8 = no       safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"   }  Module: Linked to module rlm_attr_filter  Module: Instantiating module "attr_filter.accounting_response" from file /etc/freeradius-aaa//modules/attr_filter   attr_filter attr_filter.accounting_response {       attrsfile = "/etc/freeradius-aaa//attrs.accounting_response"       key = "%{User-Name}"       relaxed = no   } reading pairlist file /etc/freeradius-aaa//attrs.accounting_response  Module: Checking session {...} for more modules to load  Module: Checking post-proxy {...} for more modules to load  Module: Checking post-auth {...} for more modules to load  Module: Instantiating module "attr_filter.access_reject" from file /etc/freeradius-aaa//modules/attr_filter   attr_filter attr_filter.access_reject {       attrsfile = "/etc/freeradius-aaa//attrs.access_reject"       key = "%{User-Name}"       relaxed = no   } reading pairlist file /etc/freeradius-aaa//attrs.access_reject  } # modules } # server server inner-tunnel { # from file /etc/freeradius-aaa//sites-enabled/inner-tunnel  modules {  Module: Checking authenticate {...} for more modules to load  Module: Checking authorize {...} for more modules to load  Module: Checking session {...} for more modules to load  Module: Checking post-proxy {...} for more modules to load  Module: Checking post-auth {...} for more modules to load  } # modules } # server radiusd: #### Opening IP addresses and Ports #### listen {      type = "auth"      ipaddr = <IP>      port = 1814 } listen {      type = "acct"      ipaddr = <IP>      port = 1815 } listen {       type = "auth"       ipaddr = 127.0.0.1       port = 18120 } Listening on authentication address <IP> port 1814 Listening on accounting address <IP> port 1815 Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel Ready to process requests. rad_recv: Access-Request packet from host <IP> port 35760, id=91, length=80     User-Name = "testuser01"     User-Password = "test1234"     NAS-IP-Address = <IP>     NAS-Port = 0     Message-Authenticator = 0x61803daee501323cb7312359c83e6d2b # Executing section authorize from file /etc/freeradius-aaa//sites-enabled/default +group authorize { ++update request { sql_xlat     expand: %{User-Name} -> testuser01 sql_set_user escaped user --> 'testuser01'     expand: SELECT type FROM nas WHERE nasname='%{Packet-Src-IP-Address}' -> SELECT type FROM nas WHERE nasname='<IP>' rlm_sql (sql): Reserving sql socket id: 3 sql_xlat finished rlm_sql (sql): Released sql socket id: 3     expand: %{sql:SELECT type FROM nas WHERE nasname='%{Packet-Src-IP-Address}'} -> other ++} # update request = noop ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] No '@' in User-Name = "testuser01", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] = noop [eap] No EAP-Message, not doing EAP ++[eap] = noop ++[files] = noop [sql]     expand: %{User-Name} -> testuser01 [sql] sql_set_user escaped user --> 'testuser01' rlm_sql (sql): Reserving sql socket id: 2 [sql]     expand: SELECT id, username, attribute, value, op           FROM radcheck           WHERE username = '%{SQL-User-Name}'           ORDER BY id -> SELECT id, username, attribute, value, op           FROM radcheck           WHERE username = 'testuser01'           ORDER BY id [sql] User found in radcheck table [sql]     expand: SELECT id, username, attribute, value, op           FROM radreply           WHERE username = '%{SQL-User-Name}'           ORDER BY id -> SELECT id, username, attribute, value, op           FROM radreply           WHERE username = 'testuser01'           ORDER BY id rlm_sql: Failed to create the pair: Unknown vendor name in attribute name "Transmode-ENM-User-Category" rlm_sql (sql): Error getting data from database [sql] SQL query error; rejecting user rlm_sql (sql): Released sql socket id: 2 ++[sql] = fail +} # group authorize = fail Invalid user: [testuser01] (from client radius1 port 0) Using Post-Auth-Type REJECT # Executing group from file /etc/freeradius-aaa//sites-enabled/default +group REJECT { [sql]     expand: %{User-Name} -> testuser01 [sql] sql_set_user escaped user --> 'testuser01' [sql]     expand: %{User-Password} -> test1234 [sql]     expand: INSERT INTO radpostauth                           (username, pass, reply, authdate)                           VALUES (                           '%{User-Name}',                           '%{%{User-Password}:-%{Chap-Password}}',                           '%{reply:Packet-Type}', '%S') -> INSERT INTO radpostauth                           (username, pass, reply, authdate)                           VALUES (                           'testuser01',                           'test1234',                           'Access-Reject', '2018-03-01 09:50:43') rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth                           (username, pass, reply, authdate)                           VALUES (                           'testuser01',                           'test1234',                           'Access-Reject', '2018-03-01 09:50:43') rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 ++[sql] = ok [attr_filter.access_reject]     expand: %{User-Name} -> testuser01 attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] = updated +} # group REJECT = updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 91 to 217.17.30.116 port 35760 Waking up in 4.9 seconds. --- Any help would be nice. Regards, Steffen Schwebel