I have posted two requests to this list concerning MySQL issues and FreeRadius. To date I haven't gotten a single response. As I can also use /etc/password and /etc/shadow, I've decided for now to drop using MySQL (e.g. use Auth-Type := System). So hopefully my new problem is now more common. I've tried making updates to the users file for this but I'm still getting "no authenticate method (Auth-Type) configuration found". What am I getting wrong here? In the users file I have: DEFAULT Auth-Type := System, Simultaneous-Use == 1 Fall-Through = Yes Here's the log piece: Acct-Session-Id = "6000006B" User-Name = "bill" User-Password = "bill" NAS-IP-Address = 127.0.0.1 NAS-Port-Id = "32" NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP Mon May 8 23:50:01 2006 : Debug: Processing the authorize section of radiusd.conf Mon May 8 23:50:01 2006 : Debug: modcall: entering group authorize for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 1 Mon May 8 23:50:01 2006 : Debug: modcall[authorize]: module "preprocess" returns ok for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 1 Mon May 8 23:50:01 2006 : Debug: modcall[authorize]: module "chap" returns noop for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 1 Mon May 8 23:50:01 2006 : Debug: modcall[authorize]: module "mschap" returns noop for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 1 Mon May 8 23:50:01 2006 : Debug: rlm_realm: No '@' in User-Name = "bill", looking up realm NULL Mon May 8 23:50:01 2006 : Debug: rlm_realm: No such realm "NULL" Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 1 Mon May 8 23:50:01 2006 : Debug: modcall[authorize]: module "suffix" returns noop for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 1 Mon May 8 23:50:01 2006 : Debug: rlm_eap: No EAP-Message, not doing EAP Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 1 Mon May 8 23:50:01 2006 : Debug: modcall[authorize]: module "eap" returns noop for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: calling files (rlm_files) for request 1 Mon May 8 23:50:01 2006 : Debug: users: Matched entry DEFAULT at line 79 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 1 Mon May 8 23:50:01 2006 : Debug: modcall[authorize]: module "files" returns ok for request 1 Mon May 8 23:50:01 2006 : Debug: modcall: group authorize returns ok for request 1 Mon May 8 23:50:01 2006 : Debug: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Mon May 8 23:50:01 2006 : Debug: auth: Failed to validate the user.
Bill Schoolfield <bill@billmax.com> wrote:
In the users file I have:
DEFAULT Auth-Type := System, Simultaneous-Use == 1 Fall-Through = Yes
You're comparing the Simultaneous-Use, don't do that. Use := there, too.
Mon May 8 23:50:01 2006 : Debug: users: Matched entry DEFAULT at line 79
If that isn't the entry you quoted, that would appear to be the problem. Alan DeKok.
Hello all, Is this normal? It looks like it's comparing group ownership against each group even though the user is a member of only one group. Why does it has to check group ownership if there is an entry in the usergroup file for this user? It looks like it's running 'SELECT GroupName FROM usergroup WHERE UserName='shipcoadsl'' for each group in the radgroupcheck. Isn't this a waste of resources? Is there a way to stop it? Is this normal? Am I missing something? Thank you for your input. Bogdan. modcall: entering group authorize for request 0 rlm_sql (sql): - sql_groupcmp radius_xlat: 'shipcoadsl' rlm_sql (sql): sql_set_user escaped user --> 'shipcoadsl' radius_xlat: 'SELECT GroupName FROM usergroup WHERE UserName='shipcoadsl'' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_mysql: query: SELECT GroupName FROM usergroup WHERE UserName='shipcoadsl' rlm_sql (sql): Released sql socket id: 4 rlm_sql (sql): - sql_groupcmp finished: User does not belong in group dialup rlm_sql (sql): - sql_groupcmp radius_xlat: 'shipcoadsl' rlm_sql (sql): sql_set_user escaped user --> 'shipcoadsl' radius_xlat: 'SELECT GroupName FROM usergroup WHERE UserName='shipcoadsl'' rlm_sql (sql): Reserving sql socket id: 3 rlm_sql_mysql: query: SELECT GroupName FROM usergroup WHERE UserName='shipcoadsl' rlm_sql (sql): Released sql socket id: 3 rlm_sql (sql): - sql_groupcmp finished: User does not belong in group idm rlm_sql (sql): - sql_groupcmp radius_xlat: 'shipcoadsl' rlm_sql (sql): sql_set_user escaped user --> 'shipcoadsl' radius_xlat: 'SELECT GroupName FROM usergroup WHERE UserName='shipcoadsl'' rlm_sql (sql): Reserving sql socket id: 2 rlm_sql_mysql: query: SELECT GroupName FROM usergroup WHERE UserName='shipcoadsl' rlm_sql (sql): Released sql socket id: 2 rlm_sql (sql): - sql_groupcmp finished: User does not belong in group ikano rlm_sql (sql): - sql_groupcmp radius_xlat: 'shipcoadsl' rlm_sql (sql): sql_set_user escaped user --> 'shipcoadsl' radius_xlat: 'SELECT GroupName FROM usergroup WHERE UserName='shipcoadsl'' rlm_sql (sql): Reserving sql socket id: 1 rlm_sql_mysql: query: SELECT GroupName FROM usergroup WHERE UserName='shipcoadsl' rlm_sql (sql): Released sql socket id: 1 rlm_sql (sql): - sql_groupcmp finished: User does not belong in group adsl rlm_sql (sql): - sql_groupcmp radius_xlat: 'shipcoadsl' rlm_sql (sql): sql_set_user escaped user --> 'shipcoadsl' radius_xlat: 'SELECT GroupName FROM usergroup WHERE UserName='shipcoadsl'' rlm_sql (sql): Reserving sql socket id: 0 rlm_sql_mysql: query: SELECT GroupName FROM usergroup WHERE UserName='shipcoadsl' rlm_sql (sql): - sql_groupcmp finished: User belongs in group adsl-static
--- Bill Schoolfield <bill@billmax.com> wrote:
I have posted two requests to this list concerning MySQL issues and FreeRadius. To date I haven't gotten a single response. As I can also use /etc/password and /etc/shadow, I've decided for now to drop using MySQL (e.g. use Auth-Type := System).
So hopefully my new problem is now more common. I've tried making updates to the users file for this but I'm still getting "no authenticate method (Auth-Type) configuration found". What am I getting wrong here?
In the users file I have:
DEFAULT Auth-Type := System, Simultaneous-Use == 1 Fall-Through = Yes
Here's the log piece:
Acct-Session-Id = "6000006B" User-Name = "bill" User-Password = "bill" NAS-IP-Address = 127.0.0.1 NAS-Port-Id = "32" NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP Mon May 8 23:50:01 2006 : Debug: Processing the authorize section of radiusd.conf Mon May 8 23:50:01 2006 : Debug: modcall: entering group authorize for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 1 Mon May 8 23:50:01 2006 : Debug: modcall[authorize]: module "preprocess" returns ok for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 1 Mon May 8 23:50:01 2006 : Debug: modcall[authorize]: module "chap" returns noop for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 1 Mon May 8 23:50:01 2006 : Debug: modcall[authorize]: module "mschap" returns noop for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 1 Mon May 8 23:50:01 2006 : Debug: rlm_realm: No '@' in User-Name = "bill", looking up realm NULL Mon May 8 23:50:01 2006 : Debug: rlm_realm: No such realm "NULL" Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 1 Mon May 8 23:50:01 2006 : Debug: modcall[authorize]: module "suffix" returns noop for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 1 Mon May 8 23:50:01 2006 : Debug: rlm_eap: No EAP-Message, not doing EAP Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 1 Mon May 8 23:50:01 2006 : Debug: modcall[authorize]: module "eap" returns noop for request 1 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: calling files (rlm_files) for request 1 Mon May 8 23:50:01 2006 : Debug: users: Matched entry DEFAULT at line 79 Mon May 8 23:50:01 2006 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 1 Mon May 8 23:50:01 2006 : Debug: modcall[authorize]: module "files" returns ok for request 1 Mon May 8 23:50:01 2006 : Debug: modcall: group authorize returns ok for request 1 Mon May 8 23:50:01 2006 : Debug: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Mon May 8 23:50:01 2006 : Debug: auth: Failed to validate the user.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
You need to post your ENTIRE debug and radiusd.conf. However, looks like you don't have any entries in the authentication section of your server config, like "unix" if you're using /etc/password, et al. I'm pretty sure your "Simultaneous-Use" should be using := not == Also, if that is your only entry in "users", the Fall-Through is redundant. Laker __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
participants (4)
-
Alan DeKok -
Bill Schoolfield -
Bogdan Dumitriu - Technical Support Team -
Laker Netman