Hello I use freeradius through chillispot and with a LDAP auth session. I am in trouble with freeradius during the login phase see below the trace of the log. Ready to process requests. rad_recv: Access-Request packet from host 147.215.1.111:32787, id=218, length=57 User-Name = "exam0" User-Password = "xxxxxxxx" --------> intentionnaly hidden NAS-IP-Address = 255.255.255.255 NAS-Port = 1 rlm_ldap: - authorize rlm_ldap: performing user authorization for exam0 rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: (re)connect to ldap.esiee.fr:389, authentication 0 rlm_ldap: bind as / to ldap.esiee.fr:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: no dialupAccess attribute - access denied by default rlm_ldap: ldap_release_conn: Release Id: 0 rad_recv: Access-Request packet from host 147.215.1.111:32787, id=218, length=57 Sending Access-Reject of id 218 to 147.215.1.111:32787 rad_recv: Access-Request packet from host 127.0.0.1:32791, id=0, length=197 User-Name = "exam01" User-Password = "xxxxxxxx" NAS-IP-Address = 0.0.0.0 Service-Type = Login-User Framed-IP-Address = 192.168.182.3 Calling-Station-Id = "00-0E-35-4A-84-94" Called-Station-Id = "00-12-79-90-10-21" NAS-Identifier = "nas01" Acct-Session-Id = "431321c600000000" NAS-Port-Type = Wireless-802.11 NAS-Port = 0 Message-Authenticator = 0x9d756035da40f907731462aca245f22c WISPr-Logoff-URL = "http://192.168.182.1:3990/logoff" rlm_ldap: - authorize rlm_ldap: performing user authorization for exam01 rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: no dialupAccess attribute - access denied by default rlm_ldap: ldap_release_conn: Release Id: 0 rad_recv: Access-Request packet from host 127.0.0.1:32791, id=0, length=197 Sending Access-Reject of id 0 to 127.0.0.1:32791 Thanks for any help -- Cordialement/Regards Frank Bonnet
Hi, do you need dialupAccess attribute? --- cut --- rlm_ldap: no dialupAccess attribute - access denied by default --- cut --- Tell freeRadius NOT to look for this attribute, or use this attribute to allow/disallow access... Regards, Edvin Seferovic -----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Frank Bonnet Sent: Montag, 29. August 2005 17:08 To: freeradius-users@lists.freeradius.org Subject: radius LDAP problem ? Hello I use freeradius through chillispot and with a LDAP auth session. I am in trouble with freeradius during the login phase see below the trace of the log. Ready to process requests. rad_recv: Access-Request packet from host 147.215.1.111:32787, id=218, length=57 User-Name = "exam0" User-Password = "xxxxxxxx" --------> intentionnaly hidden NAS-IP-Address = 255.255.255.255 NAS-Port = 1 rlm_ldap: - authorize rlm_ldap: performing user authorization for exam0 rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: (re)connect to ldap.esiee.fr:389, authentication 0 rlm_ldap: bind as / to ldap.esiee.fr:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: no dialupAccess attribute - access denied by default rlm_ldap: ldap_release_conn: Release Id: 0 rad_recv: Access-Request packet from host 147.215.1.111:32787, id=218, length=57 Sending Access-Reject of id 218 to 147.215.1.111:32787 rad_recv: Access-Request packet from host 127.0.0.1:32791, id=0, length=197 User-Name = "exam01" User-Password = "xxxxxxxx" NAS-IP-Address = 0.0.0.0 Service-Type = Login-User Framed-IP-Address = 192.168.182.3 Calling-Station-Id = "00-0E-35-4A-84-94" Called-Station-Id = "00-12-79-90-10-21" NAS-Identifier = "nas01" Acct-Session-Id = "431321c600000000" NAS-Port-Type = Wireless-802.11 NAS-Port = 0 Message-Authenticator = 0x9d756035da40f907731462aca245f22c WISPr-Logoff-URL = "http://192.168.182.1:3990/logoff" rlm_ldap: - authorize rlm_ldap: performing user authorization for exam01 rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: no dialupAccess attribute - access denied by default rlm_ldap: ldap_release_conn: Release Id: 0 rad_recv: Access-Request packet from host 127.0.0.1:32791, id=0, length=197 Sending Access-Reject of id 0 to 127.0.0.1:32791 Thanks for any help -- Cordialement/Regards Frank Bonnet - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Seferovic Edvin wrote:
Hi,
do you need dialupAccess attribute?
--- cut --- rlm_ldap: no dialupAccess attribute - access denied by default --- cut ---
Tell freeRadius NOT to look for this attribute, or use this attribute to allow/disallow access...
Hello Edvin Thanks for your answer, how to tell freeradius no to use this attribute do I have to set it to NULL ? do I have to comment the line ? I used the basic Debian configuration and I am not an expert in radius world ... -- Cordialement/Regards Frank Bonnet
Hi, I am having problems with freeradius connecting to a mysql database. Freeradius reports the error: rlm_sql_mysql: Mysql error 'Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2) The mysqld.sock file is acutally located at /home/system/var/run/mysqld/mysqld.sock, so I created a symlink to that file in /var/run/mysqld, and now freeradius reports the same error, but with a (13) at the end instead of a (2). Is there anyway to configure freeradius to look in the correct location, or is there another work around? Thanks in advance, Ben
participants (4)
-
Ben Dowling -
Frank Bonnet -
Seferovic Edvin -
Vladimir Vuksan