Re: User login restrictions based on SSID
Hi Alan, If the SQL can't connect, how authentication work as user details are stored in db?. I was able to login thru Radius and i have not enabled Radius caching of anysort on my WLAN controller. Anyway, i've stopped and started the services (mysql & freeradius) several times. Following is today's radius.log, there isn't much info, is there a command to log more info regarding this ?. Eby Wed May 25 12:13:00 2016 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 25 12:13:00 2016 : Info: rlm_sql (sql): Attempting to connect to root@localhost:3306/radius Wed May 25 12:13:00 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 Wed May 25 12:13:00 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 25 12:13:00 2016 : Info: rlm_sql (sql): Connected new DB handle, #0 Wed May 25 12:13:00 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 Wed May 25 12:13:00 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 25 12:13:00 2016 : Info: rlm_sql (sql): Connected new DB handle, #1 Wed May 25 12:13:00 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 Wed May 25 12:13:00 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 25 12:13:00 2016 : Info: rlm_sql (sql): Connected new DB handle, #2 Wed May 25 12:13:00 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 Wed May 25 12:13:00 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 25 12:13:00 2016 : Info: rlm_sql (sql): Connected new DB handle, #3 Wed May 25 12:13:00 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 Wed May 25 12:13:00 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 25 12:13:00 2016 : Info: rlm_sql (sql): Connected new DB handle, #4 Wed May 25 12:13:00 2016 : Info: Loaded virtual server <default> Wed May 25 12:13:00 2016 : Info: Loaded virtual server inner-tunnel Wed May 25 12:13:00 2016 : Info: ... adding new socket proxy address * port 34635 Wed May 25 12:13:00 2016 : Info: Ready to process requests. Wed May 25 12:13:51 2016 : Info: Signalled to terminate Wed May 25 12:13:51 2016 : Info: Exiting normally. Wed May 25 12:13:51 2016 : Info: rlm_sql (sql): Closing sqlsocket 4 Wed May 25 12:13:51 2016 : Info: rlm_sql (sql): Closing sqlsocket 3 Wed May 25 12:13:51 2016 : Info: rlm_sql (sql): Closing sqlsocket 2 Wed May 25 12:13:51 2016 : Info: rlm_sql (sql): Closing sqlsocket 1 Wed May 25 12:13:51 2016 : Info: rlm_sql (sql): Closing sqlsocket 0 Wed May 25 12:30:53 2016 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 25 12:30:53 2016 : Info: rlm_sql (sql): Attempting to connect to root@localhost:3306/radius Wed May 25 12:30:53 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 Wed May 25 12:30:53 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 25 12:30:53 2016 : Info: rlm_sql (sql): Connected new DB handle, #0 Wed May 25 12:30:53 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 Wed May 25 12:30:53 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 25 12:30:53 2016 : Info: rlm_sql (sql): Connected new DB handle, #1 Wed May 25 12:30:53 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 Wed May 25 12:30:53 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 25 12:30:53 2016 : Info: rlm_sql (sql): Connected new DB handle, #2 Wed May 25 12:30:53 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 Wed May 25 12:30:53 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 25 12:30:53 2016 : Info: rlm_sql (sql): Connected new DB handle, #3 Wed May 25 12:30:53 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 Wed May 25 12:30:53 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 25 12:30:53 2016 : Info: rlm_sql (sql): Connected new DB handle, #4 Wed May 25 12:30:53 2016 : Info: Loaded virtual server <default> Wed May 25 12:30:53 2016 : Info: Loaded virtual server inner-tunnel Wed May 25 12:30:53 2016 : Info: ... adding new socket proxy address * port 45005 Wed May 25 12:30:53 2016 : Info: Ready to process requests. Wed May 25 12:32:18 2016 : Info: Signalled to terminate Wed May 25 12:32:18 2016 : Info: Exiting normally. Wed May 25 12:32:18 2016 : Info: rlm_sql (sql): Closing sqlsocket 4 Wed May 25 12:32:18 2016 : Info: rlm_sql (sql): Closing sqlsocket 3 Wed May 25 12:32:18 2016 : Info: rlm_sql (sql): Closing sqlsocket 2 Wed May 25 12:32:18 2016 : Info: rlm_sql (sql): Closing sqlsocket 1 Wed May 25 12:32:18 2016 : Info: rlm_sql (sql): Closing sqlsocket 0 Wed May 25 12:41:28 2016 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 25 12:41:28 2016 : Info: rlm_sql (sql): Attempting to connect to root@localhost:3306/radius Wed May 25 12:41:28 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 Wed May 25 12:41:28 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 25 12:41:28 2016 : Info: rlm_sql (sql): Connected new DB handle, #0 Wed May 25 12:41:28 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 Wed May 25 12:41:28 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 25 12:41:28 2016 : Info: rlm_sql (sql): Connected new DB handle, #1 Wed May 25 12:41:28 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 Wed May 25 12:41:28 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 25 12:41:28 2016 : Info: rlm_sql (sql): Connected new DB handle, #2 Wed May 25 12:41:28 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 Wed May 25 12:41:28 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 25 12:41:28 2016 : Info: rlm_sql (sql): Connected new DB handle, #3 Wed May 25 12:41:28 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 Wed May 25 12:41:28 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 25 12:41:28 2016 : Info: rlm_sql (sql): Connected new DB handle, #4 Wed May 25 12:41:28 2016 : Info: Loaded virtual server <default> Wed May 25 12:41:28 2016 : Info: Loaded virtual server inner-tunnel Wed May 25 12:41:28 2016 : Info: ... adding new socket proxy address * port 34551 Wed May 25 12:41:28 2016 : Info: Ready to process requests. Wed May 25 14:54:09 2016 : Auth: Login incorrect: [sales/<via Auth-Type = EAP>] (from client aruba port 0 via TLS tunnel) Wed May 25 14:54:09 2016 : Auth: Login incorrect: [sales/<via Auth-Type = EAP>] (from client aruba port 0 cli 38192fb2eb02) Wed May 25 14:54:14 2016 : Auth: Login incorrect: [sales/<via Auth-Type = EAP>] (from client aruba port 0 via TLS tunnel) Wed May 25 14:54:14 2016 : Auth: Login incorrect: [sales/<via Auth-Type = EAP>] (from client aruba port 0 cli 38192fb2eb02) Wed May 25 14:54:56 2016 : Auth: Login incorrect: [support/<via Auth-Type = EAP>] (from client aruba port 0 via TLS tunnel) Wed May 25 14:54:56 2016 : Auth: Login incorrect: [support/<via Auth-Type = EAP>] (from client aruba port 0 cli 38192fb2eb02) Wed May 25 14:55:00 2016 : Auth: Login incorrect: [support/<via Auth-Type = EAP>] (from client aruba port 0 via TLS tunnel) Wed May 25 14:55:00 2016 : Auth: Login incorrect: [support/<via Auth-Type = EAP>] (from client aruba port 0 cli 38192fb2eb02) Wed May 25 16:00:08 2016 : Auth: Login OK: [eby] (from client aruba port 0 via TLS tunnel) Wed May 25 16:00:08 2016 : Auth: Login OK: [eby] (from client aruba port 0 cli e02a82e1afbf) Wed May 25 16:01:27 2016 : Auth: Login OK: [eby] (from client aruba port 0 via TLS tunnel) Wed May 25 16:01:27 2016 : Auth: Login OK: [eby] (from client aruba port 0 cli e02a82e1afbf) Wed May 25 16:03:27 2016 : Auth: Login OK: [eby] (from client aruba port 0 via TLS tunnel) Wed May 25 16:03:27 2016 : Auth: Login OK: [eby] (from client aruba port 0 cli e02a82e1afbf) Wed May 25 16:05:19 2016 : Auth: Login OK: [eby] (from client aruba port 0 via TLS tunnel) Wed May 25 16:05:19 2016 : Auth: Login OK: [eby] (from client aruba port 0 cli e02a82e1afbf) -------------------------------------------- On Tue, 24/5/16, A.L.M.Buxey@lboro.ac.uk <A.L.M.Buxey@lboro.ac.uk> wrote: Subject: Re: User login restrictions based on SSID To: "Eby Mani" <eby_km@yahoo.com>, "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Date: Tuesday, 24 May, 2016, 7:25 PM Hi,
I can login to mysql with the credentials used in sql.conf, yet not sure why it gives Mysql error. i have even restarted the server and getting same error.
not sure?
Tue May 24 20:35:21 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Tue May 24 20:35:21 2016 : Error: rlm_sql_mysql: Couldn't connect socket to MySQL server root@localhost:radius Tue May 24 20:35:21 2016 : Error: rlm_sql_mysql: Mysql error 'Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.so' Tue May 24 20:35:21 2016 : Error: rlm_sql (sql): Failed to connect DB handle #0
the error message says why...... alan
On May 25, 2016, at 7:09 AM, Eby Mani via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
If the SQL can't connect, how authentication work as user details are stored in db?.
It doesn't work.
I was able to login thru Radius and i have not enabled Radius caching of anysort on my WLAN controller.
Read the debug log to see why.
Anyway, i've stopped and started the services (mysql & freeradius) several times. Following is today's radius.log, there isn't much info, is there a command to log more info regarding this ?.
Run the server in debugging mode as suggested in the FAQ, "man" pages, web pages and daily on this list. Do that, or stop posting questions here. By refusing to follow the documentation, you're wasting your time, and ours. Alan DeKok.
Hi,
If the SQL can't connect, how authentication work as user details are stored in db?. I was able to login thru Radius and i have not enabled Radius caching of anysort on my WLAN controller.
well, it cant. but if you read the output, you'll see it has connected this time. i guess your SQL wasnt running last time..... just read the output!
Following is today's radius.log, there isn't much info, is there a command to log more info regarding this ?.
run in debug mode, not just as a service radiusd -X or freeradius -X on debian/ubuntu package builds.
Wed May 25 14:54:09 2016 : Auth: Login incorrect: [sales/<via Auth-Type = EAP>] (from client aruba port 0 via TLS tunnel) Wed May 25 14:54:09 2016 : Auth: Login incorrect: [sales/<via Auth-Type = EAP>] (from client aruba port 0 cli 38192fb2eb02)
in full debug mode you'd see why this failed.
Wed May 25 16:00:08 2016 : Auth: Login OK: [eby] (from client aruba port 0 via TLS tunnel) Wed May 25 16:00:08 2016 : Auth: Login OK: [eby] (from client aruba port 0 cli e02a82e1afbf)
and that worked alan
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Eby Mani