Freeradius 3 sql not working with nas entries in nas table
hi, i’m using freenas sql and want the nas to be read from the sql table nas (default). after commenting the entry for localhost in the conf file and putting them into the nas table, reloading freenas, the connection from localhost is rejected. # Set to 'yes' to read radius clients from the database ('nas' table) # Clients will ONLY be read on server startup. read_clients = yes # Table to keep radius client info client_table = „nas" ################### select * from nas; +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+ | id | nasname | shortname | type | ports | secret | server | community | description | +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+ | 1 | localhost | NULL | other | NULL | testing123 | 127.0.0.1 | NULL | localhost RADIUS Client | +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+ 1 row in set (0.00 sec) #################### radtest user-2001 tlkieyc3 localhost 1812 testing123 Listening on auth address * port 1812 bound to server default Listening on acct address * port 1813 bound to server default Listening on auth address :: port 1812 bound to server default Listening on acct address :: port 1813 bound to server default Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Listening on proxy address * port 45483 Listening on proxy address :: port 52244 Ready to process requests Ignoring request to auth address * port 1812 bound to server default from unknown client 127.0.0.1 port 47933 proto udp Ready to process requests Ignoring request to auth address * port 1812 bound to server default from unknown client 127.0.0.1 port 47933 proto udp Ready to process requests Ignoring request to auth address * port 1812 bound to server default from unknown client 127.0.0.1 port 47933 proto udp Ready to process requests any suggestions? is there a way to get freeradius to print out the loaded nas from the db? TIA .h
On Thu, 2017-11-30 at 14:17 +0100, .h wrote:
after commenting the entry for localhost in the conf file and putting them into the nas table, reloading freenas, the connection from localhost is rejected.
...
Listening on auth address * port 1812 bound to server default Listening on acct address * port 1813 bound to server default Listening on auth address :: port 1812 bound to server default Listening on acct address :: port 1813 bound to server default Listening on auth address 127.0.0.1 port 18120 bound to server inner- tunnel Listening on proxy address * port 45483 Listening on proxy address :: port 52244 Ready to process requests Ignoring request to auth address * port 1812 bound to server default from unknown client 127.0.0.1 port 47933 proto udp Ready to process requests
any suggestions?
Enable the dynamic-clients virtual server in raddb/sites-enabled. -- Matthew
Hi Matthew, no change. freeradius is still not recognizing the client. ########## dynamic clients ########## client dynamic { ipaddr = 192.0.2.0/24 dynamic_clients = dynamic_clients lifetime = 3600 } server dynamic_clients { authorize { update control { &FreeRADIUS-Client-IP-Address = "%{Packet-Src-IP-Address}" &FreeRADIUS-Client-Require-MA = no &FreeRADIUS-Client-Secret = "testing123" &FreeRADIUS-Client-Shortname = "%{Packet-Src-IP-Address}" &FreeRADIUS-Client-NAS-Type = "other" &FreeRADIUS-Client-Virtual-Server = "something" } dynamic_clients if ("%{sql: SELECT nasname FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'}") { update control { &FreeRADIUS-Client-IP-Address = "%{Packet-Src-IP-Address}" &FreeRADIUS-Client-Shortname = "%{sql: SELECT shortname FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'}" &FreeRADIUS-Client-Secret = "%{sql: SELECT secret FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'}" &FreeRADIUS-Client-NAS-Type = "%{sql: SELECT type FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'}" &FreeRADIUS-Client-Virtual-Server = "%{sql: SELECT server FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'}" } } ok } } anything from in the conf? TIA .h
Am 30.11.2017 um 14:26 schrieb Matthew Newton-3 [via FreeRADIUS] <ml+s1045715n5748187h24@n5.nabble.com>:
On Thu, 2017-11-30 at 14:17 +0100, .h wrote:
after commenting the entry for localhost in the conf file and putting them into the nas table, reloading freenas, the connection from localhost is rejected.
...
Listening on auth address * port 1812 bound to server default Listening on acct address * port 1813 bound to server default Listening on auth address :: port 1812 bound to server default Listening on acct address :: port 1813 bound to server default Listening on auth address 127.0.0.1 port 18120 bound to server inner- tunnel Listening on proxy address * port 45483 Listening on proxy address :: port 52244 Ready to process requests Ignoring request to auth address * port 1812 bound to server default from unknown client 127.0.0.1 port 47933 proto udp Ready to process requests
any suggestions?
Enable the dynamic-clients virtual server in raddb/sites-enabled.
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
If you reply to this email, your message will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-na... <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748187.html> To unsubscribe from FreeRADIUS, click here <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMDIzMzk2NTk3>. NAML <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
On Thu, 2017-11-30 at 15:00 +0100, .h wrote:
no change. freeradius is still not recognizing the client.
########## dynamic clients ########## client dynamic { ipaddr = 192.0.2.0/24
^^^
anything from in the conf?
What does the debug output from `radiusd -X` say? You do still have to configure the dynamic-clients virtual server. -- Matthew
FreeRADIUS Version 3.0.12 Copyright (C) 1999-2016 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Starting - reading configuration files ... including dictionary file /usr/share/freeradius/dictionary including dictionary file /usr/share/freeradius/dictionary.dhcp including dictionary file /usr/share/freeradius/dictionary.vqp including dictionary file /etc/freeradius/3.0/dictionary including configuration file /etc/freeradius/3.0/radiusd.conf including configuration file /etc/freeradius/3.0/proxy.conf including configuration file /etc/freeradius/3.0/clients.conf including files in directory /etc/freeradius/3.0/mods-enabled/ including configuration file /etc/freeradius/3.0/mods-enabled/utf8 including configuration file /etc/freeradius/3.0/mods-enabled/detail.log including configuration file /etc/freeradius/3.0/mods-enabled/echo including configuration file /etc/freeradius/3.0/mods-enabled/linelog including configuration file /etc/freeradius/3.0/mods-enabled/unpack including configuration file /etc/freeradius/3.0/mods-enabled/realm including configuration file /etc/freeradius/3.0/mods-enabled/eap including configuration file /etc/freeradius/3.0/mods-enabled/detail including configuration file /etc/freeradius/3.0/mods-enabled/dynamic_clients including configuration file /etc/freeradius/3.0/mods-enabled/sradutmp including configuration file /etc/freeradius/3.0/mods-enabled/sql including configuration file /etc/freeradius/3.0/mods-config/sql/main/mysql/queries.conf including configuration file /etc/freeradius/3.0/mods-enabled/files including configuration file /etc/freeradius/3.0/mods-enabled/attr_filter including configuration file /etc/freeradius/3.0/mods-enabled/logintime including configuration file /etc/freeradius/3.0/mods-enabled/soh including configuration file /etc/freeradius/3.0/mods-enabled/preprocess including configuration file /etc/freeradius/3.0/mods-enabled/pap including configuration file /etc/freeradius/3.0/mods-enabled/digest including configuration file /etc/freeradius/3.0/mods-enabled/mschap including configuration file /etc/freeradius/3.0/mods-enabled/passwd including configuration file /etc/freeradius/3.0/mods-enabled/replicate including configuration file /etc/freeradius/3.0/mods-enabled/ntlm_auth including configuration file /etc/freeradius/3.0/mods-enabled/expr including configuration file /etc/freeradius/3.0/mods-enabled/radutmp including configuration file /etc/freeradius/3.0/mods-enabled/unix including configuration file /etc/freeradius/3.0/mods-enabled/expiration including configuration file /etc/freeradius/3.0/mods-enabled/cache_eap including configuration file /etc/freeradius/3.0/mods-enabled/chap including configuration file /etc/freeradius/3.0/mods-enabled/always including configuration file /etc/freeradius/3.0/mods-enabled/exec including files in directory /etc/freeradius/3.0/policy.d/ including configuration file /etc/freeradius/3.0/policy.d/operator-name including configuration file /etc/freeradius/3.0/policy.d/dhcp including configuration file /etc/freeradius/3.0/policy.d/control including configuration file /etc/freeradius/3.0/policy.d/debug including configuration file /etc/freeradius/3.0/policy.d/eap including configuration file /etc/freeradius/3.0/policy.d/canonicalization including configuration file /etc/freeradius/3.0/policy.d/abfab-tr including configuration file /etc/freeradius/3.0/policy.d/cui including configuration file /etc/freeradius/3.0/policy.d/moonshot-targeted-ids including configuration file /etc/freeradius/3.0/policy.d/accounting including configuration file /etc/freeradius/3.0/policy.d/filter including files in directory /etc/freeradius/3.0/sites-enabled/ including configuration file /etc/freeradius/3.0/sites-enabled/dynamic-clients including configuration file /etc/freeradius/3.0/sites-enabled/default including configuration file /etc/freeradius/3.0/sites-enabled/inner-tunnel main { security { user = "freerad" group = "freerad" allow_core_dumps = no } name = "freeradius" prefix = "/usr" localstatedir = "/var" logdir = "/var/log/freeradius" run_dir = "/var/run/freeradius" } main { name = "freeradius" prefix = "/usr" localstatedir = "/var" sbindir = "/usr/sbin" logdir = "/var/log/freeradius" run_dir = "/var/run/freeradius" libdir = "/usr/lib/freeradius" radacctdir = "/var/log/freeradius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 16384 pidfile = "/var/run/freeradius/freeradius.pid" checkrad = "/usr/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no colourise = yes msg_denied = "You are already logged in - access denied" } resources { } security { max_attributes = 200 reject_delay = 1.000000 status_server = yes } } proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = <<< secret >>> response_window = 20.000000 response_timeouts = 1 max_outstanding = 65536 zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 check_timeout = 4 num_answers_to_alive = 3 revive_interval = 120 limit { max_connections = 16 max_requests = 0 lifetime = 0 idle_timeout = 0 } coa { irt = 2 mrt = 16 mrc = 5 mrd = 30 } } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } client dynamic { ipaddr = 192.0.2.0/24 require_message_authenticator = no limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } dynamic_clients = "dynamic_clients" lifetime = 3600 } Debugger not attached modules { detail auth_log { filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } detail reply_log { filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } detail pre_proxy_log { filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } detail post_proxy_log { filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } exec echo { wait = yes program = "/bin/echo %{User-Name}" input_pairs = "request" output_pairs = "reply" shell_escape = yes } linelog { filename = "/var/log/freeradius/linelog" escape_filenames = no syslog_severity = "info" permissions = 384 format = "This is a log message for %{User-Name}" reference = "messages.%{%{reply:Packet-Type}:-default}" } linelog log_accounting { filename = "/var/log/freeradius/linelog-accounting" escape_filenames = no syslog_severity = "info" permissions = 384 format = "" reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}" } realm IPASS { format = "prefix" delimiter = "/" ignore_default = no ignore_null = no } realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } realm realmpercent { format = "suffix" delimiter = "%" ignore_default = no ignore_null = no } realm ntdomain { format = "prefix" delimiter = "\\" ignore_default = no ignore_null = no } eap { default_eap_type = "peap" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 16384 } detail { filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } radutmp sradutmp { filename = "/var/log/freeradius/sradutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes permissions = 420 caller_id = no } sql { driver = "rlm_sql_mysql" server = "localhost" port = 3306 login = "root" password = <<< secret >>> radius_db = "radius" read_groups = yes read_profiles = yes read_clients = yes delete_stale_sessions = yes sql_user_name = "%{User-Name}" default_user_profile = "" client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas" authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id" authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id" group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" accounting { reference = "%{tolower:type.%{Acct-Status-Type}.query}" type { accounting-on { query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})" } accounting-off { query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})" } start { query = "INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')" } interim-update { query = "UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctinterval = %{integer:Event-Timestamp} - UNIX_TIMESTAMP(@acctupdatetime_old), framedipaddress = '%{Framed-IP-Address}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'" } stop { query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'" } } } post-auth { reference = ".query" query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')" } } rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Creating attribute SQL-Group files { filename = "/etc/freeradius/3.0/mods-config/files/authorize" acctusersfile = "/etc/freeradius/3.0/mods-config/files/accounting" preproxy_usersfile = "/etc/freeradius/3.0/mods-config/files/pre-proxy" } attr_filter attr_filter.post-proxy { filename = "/etc/freeradius/3.0/mods-config/attr_filter/post-proxy" key = "%{Realm}" relaxed = no } attr_filter attr_filter.pre-proxy { filename = "/etc/freeradius/3.0/mods-config/attr_filter/pre-proxy" key = "%{Realm}" relaxed = no } attr_filter attr_filter.access_reject { filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_reject" key = "%{User-Name}" relaxed = no } attr_filter attr_filter.access_challenge { filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_challenge" key = "%{User-Name}" relaxed = no } attr_filter attr_filter.accounting_response { filename = "/etc/freeradius/3.0/mods-config/attr_filter/accounting_response" key = "%{User-Name}" relaxed = no } logintime { minimum_timeout = 60 } soh { dhcp = yes } preprocess { huntgroups = "/etc/freeradius/3.0/mods-config/preprocess/huntgroups" hints = "/etc/freeradius/3.0/mods-config/preprocess/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } pap { normalise = yes } mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = yes passchange { } allow_retry = yes } passwd etc_passwd { filename = "/etc/passwd" format = "*User-Name:Crypt-Password:" delimiter = ":" ignore_nislike = no ignore_empty = yes allow_multiple_keys = no hash_size = 100 } exec ntlm_auth { wait = yes program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}" shell_escape = yes } expr { safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüa ÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ" } radutmp { filename = "/var/log/freeradius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes permissions = 384 caller_id = yes } unix { radwtmp = "/var/log/freeradius/radwtmp" } Creating attribute Unix-Group cache cache_eap { driver = "rlm_cache_rbtree" key = "%{%{control:State}:-%{%{reply:State}:-%{State}}}" ttl = 15 max_entries = 0 epoch = 0 add_stats = no } always reject { rcode = "reject" simulcount = 0 mpp = no } always fail { rcode = "fail" simulcount = 0 mpp = no } always ok { rcode = "ok" simulcount = 0 mpp = no } always handled { rcode = "handled" simulcount = 0 mpp = no } always invalid { rcode = "invalid" simulcount = 0 mpp = no } always userlock { rcode = "userlock" simulcount = 0 mpp = no } always notfound { rcode = "notfound" simulcount = 0 mpp = no } always noop { rcode = "noop" simulcount = 0 mpp = no } always updated { rcode = "updated" simulcount = 0 mpp = no } exec { wait = no input_pairs = "request" shell_escape = yes timeout = 10 } instantiate { } rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output gtc { challenge = "Password: " auth_type = "PAP" } tls { tls = "tls-common" } tls-config tls-common { verify_depth = 0 ca_path = "/etc/freeradius/3.0/certs" pem_file_type = yes private_key_file = "/etc/ssl/private/ssl-cert-snakeoil.key" certificate_file = "/etc/ssl/certs/ssl-cert-snakeoil.pem" ca_file = "/etc/ssl/certs/ca-certificates.crt" private_key_password = <<< secret >>> dh_file = "/etc/freeradius/3.0/certs/dh" fragment_size = 1024 include_length = yes auto_chain = yes check_crl = no check_all_crl = no cipher_list = "DEFAULT" ecdh_curve = "prime256v1" cache { enable = yes lifetime = 24 max_entries = 255 } verify { skip_if_ocsp_ok = no } ocsp { enable = no override_cert_url = yes url = "http://127.0.0.1/ocsp/" use_nonce = yes timeout = 0 softfail = no } } ttls { tls = "tls-common" default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = yes virtual_server = "inner-tunnel" include_length = yes require_client_cert = no } tls: Using cached TLS configuration from previous invocation peap { tls = "tls-common" default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = yes proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" soh = no require_client_cert = no } tls: Using cached TLS configuration from previous invocation mschapv2 { with_ntdomain_hack = no send_error = no } rlm_sql_mysql: libmysql version: 10.1.26-MariaDB mysql { tls { } warnings = "auto" } rlm_sql (sql): Attempting to connect to database "radius" rlm_sql (sql): Initialising connection pool pool { start = 5 min = 3 max = 32 spare = 10 uses = 0 lifetime = 0 cleanup_interval = 30 idle_timeout = 60 retry_delay = 30 spread = no } rlm_sql (sql): Opening additional connection (0), 1 of 32 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 10.1.26-MariaDB-0+deb9u1, protocol version 10 rlm_sql (sql): Opening additional connection (1), 1 of 31 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 10.1.26-MariaDB-0+deb9u1, protocol version 10 rlm_sql (sql): Opening additional connection (2), 1 of 30 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 10.1.26-MariaDB-0+deb9u1, protocol version 10 rlm_sql (sql): Opening additional connection (3), 1 of 29 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 10.1.26-MariaDB-0+deb9u1, protocol version 10 rlm_sql (sql): Opening additional connection (4), 1 of 28 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 10.1.26-MariaDB-0+deb9u1, protocol version 10 rlm_sql (sql): Processing generate_sql_clients rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): Reserved connection (0) rlm_sql (sql): Executing select query: SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): No short name found for row 1 rlm_sql (sql): Released connection (0) rlm_sql (sql): Need 5 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 10.1.26-MariaDB-0+deb9u1, protocol version 10 reading pairlist file /etc/freeradius/3.0/mods-config/files/authorize reading pairlist file /etc/freeradius/3.0/mods-config/files/accounting reading pairlist file /etc/freeradius/3.0/mods-config/files/pre-proxy reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/post-proxy reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/pre-proxy reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_reject [/etc/freeradius/3.0/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay" found in filter list for realm "DEFAULT". [/etc/freeradius/3.0/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay-USec" found in filter list for realm "DEFAULT". reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_challenge reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/accounting_response reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/huntgroups reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/hints rlm_mschap (mschap): using internal authentication rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Ignoring "ldap" (see raddb/mods-available/README.rst) listen { type = "auth" ipaddr = * port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "acct" ipaddr = * port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "auth" ipv6addr = :: port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "acct" ipv6addr = :: port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "auth" ipaddr = 127.0.0.1 port = 18120 } Listening on auth address * port 1812 bound to server default Listening on acct address * port 1813 bound to server default Listening on auth address :: port 1812 bound to server default Listening on acct address :: port 1813 bound to server default Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Listening on proxy address * port 37123 Listening on proxy address :: port 41617 Ready to process requests Ignoring request to auth address * port 1812 bound to server default from unknown client 127.0.0.1 port 37672 proto udp Ready to process requests Ignoring request to auth address * port 1812 bound to server default from unknown client 127.0.0.1 port 37672 proto udp Ready to process requests Ignoring request to auth address * port 1812 bound to server default from unknown client 127.0.0.1 port 37672 proto udp Ready to process requests
Am 30.11.2017 um 15:03 schrieb Matthew Newton-3 [via FreeRADIUS] <ml+s1045715n5748189h86@n5.nabble.com>:
On Thu, 2017-11-30 at 15:00 +0100, .h wrote:
no change. freeradius is still not recognizing the client.
########## dynamic clients ########## client dynamic { ipaddr = 192.0.2.0/24
^^^
anything from in the conf?
What does the debug output from `radiusd -X` say?
You do still have to configure the dynamic-clients virtual server.
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
If you reply to this email, your message will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-na... To unsubscribe from FreeRADIUS, click here. NAML
On Thu, 2017-11-30 at 15:26 +0100, .h wrote:
FreeRADIUS Version 3.0.12 ... client dynamic { ipaddr = 192.0.2.0/24
...
On Thu, 2017-11-30 at 15:00 +0100, .h wrote:
no change. freeradius is still not recognizing the client.
########## dynamic clients ########## client dynamic { ipaddr = 192.0.2.0/24
^^^
You didn't update the configuration like I pointed out. Read the whole dynamic-clients config through and make sure it's set up properly. Otherwise you'll probably end up letting clients connect that you didn't want to. -- Matthew
On Nov 30, 2017, at 9:37 AM, Matthew Newton <mcn@freeradius.org> wrote:
You didn't update the configuration like I pointed out.
Read the whole dynamic-clients config through and make sure it's set up properly. Otherwise you'll probably end up letting clients connect that you didn't want to.
Dynamic clients aren't the same as clients in SQL. The problem is elsewhere... Alan DeKok.
On Thu, 2017-11-30 at 10:08 -0500, Alan DeKok wrote:
On Nov 30, 2017, at 9:37 AM, Matthew Newton <mcn@freeradius.org> wrote:
Dynamic clients aren't the same as clients in SQL. The problem is elsewhere...
Gah, what you get for looking at one thing for a few hours right before thinking about something else... Thanks, -- Matthew
On Nov 30, 2017, at 9:26 AM, .h <h@alf.world> wrote:
rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): Reserved connection (0) rlm_sql (sql): Executing select query: SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): No short name found for row 1 rlm_sql (sql): Released connection (0)
That's the problem. While there's a lot of information in the debug output, reading it *is* helpful. Typically I just look for the things that are a problem... e.g. problem reading clients from SQL? Look for debug messages containing both "sql" and "clients". Yup... there it is. If you're running in a terminal, the debug output *should* print the "No short name found" line in red. Which helps a lot in finding errors. If it doesn't... upgrade to a newer version of the server. Alan DeKok.
one step further… but still not working. rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): Reserved connection (0) rlm_sql (sql): Executing select query: SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): Adding client localhost (localhost) to 127.0.0.1 clients list Failed to find virtual server 127.0.0.1 Failed to add client, possible duplicate? rlm_sql (sql): Released connection (0) where should the virtual server be defined? tia .h
Am 30.11.2017 um 16:14 schrieb Alan DeKok-2 [via FreeRADIUS] <ml+s1045715n5748195h72@n5.nabble.com>:
On Nov 30, 2017, at 9:26 AM, .h <[hidden email]> wrote:
rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): Reserved connection (0) rlm_sql (sql): Executing select query: SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): No short name found for row 1 rlm_sql (sql): Released connection (0)
That's the problem.
While there's a lot of information in the debug output, reading it *is* helpful. Typically I just look for the things that are a problem...
e.g. problem reading clients from SQL? Look for debug messages containing both "sql" and "clients". Yup... there it is.
If you're running in a terminal, the debug output *should* print the "No short name found" line in red. Which helps a lot in finding errors.
If it doesn't... upgrade to a newer version of the server.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
If you reply to this email, your message will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-na... To unsubscribe from FreeRADIUS, click here. NAML
On Nov 30, 2017, at 2:20 PM, .h <h@alf.world> wrote:
one step further… but still not working.
rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): Reserved connection (0) rlm_sql (sql): Executing select query: SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): Adding client localhost (localhost) to 127.0.0.1 clients list Failed to find virtual server 127.0.0.1
You have "127.0.0.1" in the "server" column. You need to put in the name of the virtual server for this client.
Failed to add client, possible duplicate? rlm_sql (sql): Released connection (0)
where should the virtual server be defined?
raddb/sites-enabled/ The "default" file defines a virtual server called "default". See it's contents for more information. Alan DeKok.
Hi Alan, i have three columns in the table nasname, shortname and server. what has to be put where? where should the ip go? tia .h
Am 30.11.2017 um 20:27 schrieb Alan DeKok-2 [via FreeRADIUS] <ml+s1045715n5748211h68@n5.nabble.com>:
On Nov 30, 2017, at 2:20 PM, .h <[hidden email] <x-msg://26/user/SendEmail.jtp?type=node&node=5748211&i=0>> wrote:
one step further… but still not working.
rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): Reserved connection (0) rlm_sql (sql): Executing select query: SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): Adding client localhost (localhost) to 127.0.0.1 clients list Failed to find virtual server 127.0.0.1
You have "127.0.0.1" in the "server" column. You need to put in the name of the virtual server for this client.
Failed to add client, possible duplicate? rlm_sql (sql): Released connection (0)
where should the virtual server be defined?
raddb/sites-enabled/
The "default" file defines a virtual server called "default". See it's contents for more information.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
If you reply to this email, your message will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-na... <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748211.html> To unsubscribe from FreeRADIUS, click here <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMDIzMzk2NTk3>. NAML <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
On Nov 30, 2017, at 2:36 PM, .h <h@alf.world> wrote:
i have three columns in the table nasname, shortname and server.
Why? The server DOES come with a schema. See raddb/mods-config/sql/main/mysql/schema.sql Look for 'nas'. And see also raddb/mods-config/sql/main/mysql/queries.conf Look also for 'nas'.
what has to be put where? where should the ip go?
In the 'nasname' column. Alan DeKok.
Hi Alan, is there any documentation on this section? do i have to add a virtual server for every nas that will be used? tia harald
Am 30.11.2017 um 20:27 schrieb Alan DeKok-2 [via FreeRADIUS] <ml+s1045715n5748211h68@n5.nabble.com>:
where should the virtual server be defined?
raddb/sites-enabled/
The "default" file defines a virtual server called "default". See it's contents for more information.
On Nov 30, 2017, at 2:52 PM, .h <h@alf.world> wrote:
is there any documentation on this section?
On what section? The queries.conf file describes what each column should contain.
do i have to add a virtual server for every nas that will be used?
You need to populate each column in the row. Multiple rows can use "default" for the virtual server column... which then tells it to use the "default" virtual server. The "nas" table in SQL defines a NAS. With IP address, shared secret, and virtual server. I *did* point you to documentation. Did you read it? Because the question here makes it look like you don't know what a virtual server is, or what a NAS is, or what the purpose of each column is. Alan DeKok.
Hi Alan, no worries, I know what a NAS is. I’m using freeradius for quite a while, but not the sql version. I was able to transfer every setting to sql except the clients.conf. in the former config adding a new client was simple by adding a section to clients.conf, i.e.: client client_xyz { ipaddr = 10.0.0.1 secret = secret } Now adding a line into the nas table is not giving me the same result. +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+ | id | nasname | shortname | type | ports | secret | server | community | description | +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+ | 1 | 127.0.0.1 | localhost | other | NULL | testing123 | localhost | NULL | localhost RADIUS Client | +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+ This is whats unclear to me. what is the easiest way to transfer all clients from .conf to sql? TIA .h
Am 30.11.2017 um 20:59 schrieb Alan DeKok-2 [via FreeRADIUS] <ml+s1045715n5748215h92@n5.nabble.com>:
On Nov 30, 2017, at 2:52 PM, .h <[hidden email] <x-msg://5/user/SendEmail.jtp?type=node&node=5748215&i=0>> wrote:
is there any documentation on this section?
On what section?
The queries.conf file describes what each column should contain.
do i have to add a virtual server for every nas that will be used?
You need to populate each column in the row.
Multiple rows can use "default" for the virtual server column... which then tells it to use the "default" virtual server.
The "nas" table in SQL defines a NAS. With IP address, shared secret, and virtual server.
I *did* point you to documentation. Did you read it? Because the question here makes it look like you don't know what a virtual server is, or what a NAS is, or what the purpose of each column is.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
If you reply to this email, your message will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-na... <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html> To unsubscribe from FreeRADIUS, click here <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMDIzMzk2NTk3>. NAML <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
Server is the default virtual server to use. Eg default in a basic install.
Do you have a virtual server named localhost ??
alan
On 1 Dec 2017 4:24 am, ".h" <h@alf.world> wrote:
> Hi Alan,
>
> no worries, I know what a NAS is.
> I’m using freeradius for quite a while, but not the sql version.
>
> I was able to transfer every setting to sql except the clients.conf.
>
> in the former config adding a new client was simple by adding a section to
> clients.conf, i.e.:
>
> client client_xyz {
> ipaddr = 10.0.0.1
> secret = secret
> }
>
> Now adding a line into the nas table is not giving me the same result.
> +----+-----------+-----------+-------+-------+------------+-
> ----------+-----------+-------------------------+
> | id | nasname | shortname | type | ports | secret | server |
> community | description |
> +----+-----------+-----------+-------+-------+------------+-
> ----------+-----------+-------------------------+
> | 1 | 127.0.0.1 | localhost | other | NULL | testing123 | localhost |
> NULL | localhost RADIUS Client |
> +----+-----------+-----------+-------+-------+------------+-
> ----------+-----------+-------------------------+
>
> This is whats unclear to me.
>
> what is the easiest way to transfer all clients from .conf to sql?
>
> TIA
> .h
>
> > Am 30.11.2017 um 20:59 schrieb Alan DeKok-2 [via FreeRADIUS] <
> ml+s1045715n5748215h92@n5.nabble.com>:
> >
> > On Nov 30, 2017, at 2:52 PM, .h <[hidden email]
> <x-msg://5/user/SendEmail.jtp?type=node&node=5748215&i=0>> wrote:
> > >
> > > is there any documentation on this section?
> >
> > On what section?
> >
> > The queries.conf file describes what each column should contain.
> >
> > > do i have to add a virtual server for every nas that will be used?
> >
> > You need to populate each column in the row.
> >
> > Multiple rows can use "default" for the virtual server column... which
> then tells it to use the "default" virtual server.
> >
> > The "nas" table in SQL defines a NAS. With IP address, shared secret,
> and virtual server.
> >
> >
> > I *did* point you to documentation. Did you read it? Because the
> question here makes it look like you don't know what a virtual server is,
> or what a NAS is, or what the purpose of each column is.
> >
> > Alan DeKok.
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html <http://www.freeradius.org/list/users.html>
> >
> > If you reply to this email, your message will be added to the discussion
> below:
> > http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-
> not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html <
> http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-
> not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html>
> > To unsubscribe from FreeRADIUS, click here <
> http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=
> unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMD
> IzMzk2NTk3>.
> > NAML <http://freeradius.1045715.n5.nabble.com/template/
> NamlServlet.jtp?macro=macro_viewer&id=instant_html%
> 21nabble%3Aemail.naml&base=nabble.naml.namespaces.
> BasicNamespace-nabble.view.web.template.NabbleNamespace-
> nabble.view.web.template.NodeNamespace&breadcrumbs=
> notify_subscribers%21nabble%3Aemail.naml-instant_emails%
> 21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
Hi Alan,
maybe i asked the wrong question or I’m totally confused.
I have a default freeeradius 3 installation on debian 9.
I have a virtual server default definition in the default site, configuration is unchanged.
in clients.conf i have the default definition for the client localhost:
client localhost {
ipaddr = 127.0.0.1
proto = *
secret = testing123
require_message_authenticator = no
nas_type = other # localhost isn't usually a NAS...
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
I want to move the client settings for locahost to the nas table and don't want to have it in the clients.conf.
nas table:
+----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+
| id | nasname | shortname | type | ports | secret | server | community | description |
+----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+
| 1 | 127.0.0.1 | localhost | other | NULL | testing123 | localhost | NULL | localhost RADIUS Client |
+----+-----------+-----------+-------+-------+------------+-----------+-----------+————————————+
what did i do wrong?
is there anything special with the entry for localhost?
TIA
.h
> Am 01.12.2017 um 09:29 schrieb Alan Buxey [via FreeRADIUS] <ml+s1045715n5748219h16@n5.nabble.com>:
>
> Server is the default virtual server to use. Eg default in a basic install.
> Do you have a virtual server named localhost ??
>
> alan
>
> On 1 Dec 2017 4:24 am, ".h" <[hidden email] <x-msg://23/user/SendEmail.jtp?type=node&node=5748219&i=0>> wrote:
>
> > Hi Alan,
> >
> > no worries, I know what a NAS is.
> > I’m using freeradius for quite a while, but not the sql version.
> >
> > I was able to transfer every setting to sql except the clients.conf.
> >
> > in the former config adding a new client was simple by adding a section to
> > clients.conf, i.e.:
> >
> > client client_xyz {
> > ipaddr = 10.0.0.1
> > secret = secret
> > }
> >
> > Now adding a line into the nas table is not giving me the same result.
> > +----+-----------+-----------+-------+-------+------------+-
> > ----------+-----------+-------------------------+
> > | id | nasname | shortname | type | ports | secret | server |
> > community | description |
> > +----+-----------+-----------+-------+-------+------------+-
> > ----------+-----------+-------------------------+
> > | 1 | 127.0.0.1 | localhost | other | NULL | testing123 | localhost |
> > NULL | localhost RADIUS Client |
> > +----+-----------+-----------+-------+-------+------------+-
> > ----------+-----------+-------------------------+
> >
> > This is whats unclear to me.
> >
> > what is the easiest way to transfer all clients from .conf to sql?
> >
> > TIA
> > .h
> >
> > > Am 30.11.2017 um 20:59 schrieb Alan DeKok-2 [via FreeRADIUS] <
> > [hidden email] <x-msg://23/user/SendEmail.jtp?type=node&node=5748219&i=1>>:
> > >
> > > On Nov 30, 2017, at 2:52 PM, .h <[hidden email]
> > <x-msg://5/user/SendEmail.jtp?type=node&node=5748215&i=0 <x-msg://5/user/SendEmail.jtp?type=node&node=5748215&i=0>>> wrote:
> > > >
> > > > is there any documentation on this section?
> > >
> > > On what section?
> > >
> > > The queries.conf file describes what each column should contain.
> > >
> > > > do i have to add a virtual server for every nas that will be used?
> > >
> > > You need to populate each column in the row.
> > >
> > > Multiple rows can use "default" for the virtual server column... which
> > then tells it to use the "default" virtual server.
> > >
> > > The "nas" table in SQL defines a NAS. With IP address, shared secret,
> > and virtual server.
> > >
> > >
> > > I *did* point you to documentation. Did you read it? Because the
> > question here makes it look like you don't know what a virtual server is,
> > or what a NAS is, or what the purpose of each column is.
> > >
> > > Alan DeKok.
> > >
> > >
> > > -
> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ <http://www.freeradius.org/>
> > list/users.html <http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>>
> > >
> > > If you reply to this email, your message will be added to the discussion
> > below:
> > > http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql- <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql->
> > not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html <
> > http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql- <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql->
> > not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html>
> > > To unsubscribe from FreeRADIUS, click here <
> > http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro= <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=>
> > unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMD
> > IzMzk2NTk3>.
> > > NAML <http://freeradius.1045715.n5.nabble.com/template/ <http://freeradius.1045715.n5.nabble.com/template/>
> > NamlServlet.jtp?macro=macro_viewer&id=instant_html%
> > 21nabble%3Aemail.naml&base=nabble.naml.namespaces.
> > BasicNamespace-nabble.view.web.template.NabbleNamespace-
> > nabble.view.web.template.NodeNamespace&breadcrumbs=
> > notify_subscribers%21nabble%3Aemail.naml-instant_emails%
> > 21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/ <http://www.freeradius.org/>
> > list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
>
> If you reply to this email, your message will be added to the discussion below:
> http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748219.html <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748219.html>
> To unsubscribe from FreeRADIUS, click here <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMDIzMzk2NTk3>.
> NAML <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
Hi Alan,
I tried it with another client, no luck.
I always get:
rlm_sql (sql): Adding client 192.168.35.158 (debian9) to 192.168.35.158 clients list
Failed to find virtual server 192.168.35.158
why is it looking for a virtual server?
i want to have a client.
TIA
.h
> Am 02.12.2017 um 12:52 schrieb .h <h@alf.world>:
>
> Hi Alan,
>
> maybe i asked the wrong question or I’m totally confused.
>
> I have a default freeeradius 3 installation on debian 9.
>
> I have a virtual server default definition in the default site, configuration is unchanged.
>
> in clients.conf i have the default definition for the client localhost:
>
> client localhost {
> ipaddr = 127.0.0.1
> proto = *
> secret = testing123
> require_message_authenticator = no
> nas_type = other # localhost isn't usually a NAS...
> limit {
> max_connections = 16
> lifetime = 0
> idle_timeout = 30
> }
> }
>
> I want to move the client settings for locahost to the nas table and don't want to have it in the clients.conf.
>
> nas table:
> +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+
> | id | nasname | shortname | type | ports | secret | server | community | description |
> +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+
> | 1 | 127.0.0.1 | localhost | other | NULL | testing123 | localhost | NULL | localhost RADIUS Client |
> +----+-----------+-----------+-------+-------+------------+-----------+-----------+————————————+
>
> what did i do wrong?
> is there anything special with the entry for localhost?
>
> TIA
> .h
>
>> Am 01.12.2017 um 09:29 schrieb Alan Buxey [via FreeRADIUS] <ml+s1045715n5748219h16@n5.nabble.com <mailto:ml+s1045715n5748219h16@n5.nabble.com>>:
>>
>> Server is the default virtual server to use. Eg default in a basic install.
>> Do you have a virtual server named localhost ??
>>
>> alan
>>
>> On 1 Dec 2017 4:24 am, ".h" <[hidden email] <x-msg://23/user/SendEmail.jtp?type=node&node=5748219&i=0>> wrote:
>>
>> > Hi Alan,
>> >
>> > no worries, I know what a NAS is.
>> > I’m using freeradius for quite a while, but not the sql version.
>> >
>> > I was able to transfer every setting to sql except the clients.conf.
>> >
>> > in the former config adding a new client was simple by adding a section to
>> > clients.conf, i.e.:
>> >
>> > client client_xyz {
>> > ipaddr = 10.0.0.1
>> > secret = secret
>> > }
>> >
>> > Now adding a line into the nas table is not giving me the same result.
>> > +----+-----------+-----------+-------+-------+------------+-
>> > ----------+-----------+-------------------------+
>> > | id | nasname | shortname | type | ports | secret | server |
>> > community | description |
>> > +----+-----------+-----------+-------+-------+------------+-
>> > ----------+-----------+-------------------------+
>> > | 1 | 127.0.0.1 | localhost | other | NULL | testing123 | localhost |
>> > NULL | localhost RADIUS Client |
>> > +----+-----------+-----------+-------+-------+------------+-
>> > ----------+-----------+-------------------------+
>> >
>> > This is whats unclear to me.
>> >
>> > what is the easiest way to transfer all clients from .conf to sql?
>> >
>> > TIA
>> > .h
>> >
>> > > Am 30.11.2017 um 20:59 schrieb Alan DeKok-2 [via FreeRADIUS] <
>> > [hidden email] <x-msg://23/user/SendEmail.jtp?type=node&node=5748219&i=1>>:
>> > >
>> > > On Nov 30, 2017, at 2:52 PM, .h <[hidden email]
>> > <x-msg://5/user/SendEmail.jtp?type=node&node=5748215&i=0 <x-msg://5/user/SendEmail.jtp?type=node&node=5748215&i=0>>> wrote:
>> > > >
>> > > > is there any documentation on this section?
>> > >
>> > > On what section?
>> > >
>> > > The queries.conf file describes what each column should contain.
>> > >
>> > > > do i have to add a virtual server for every nas that will be used?
>> > >
>> > > You need to populate each column in the row.
>> > >
>> > > Multiple rows can use "default" for the virtual server column... which
>> > then tells it to use the "default" virtual server.
>> > >
>> > > The "nas" table in SQL defines a NAS. With IP address, shared secret,
>> > and virtual server.
>> > >
>> > >
>> > > I *did* point you to documentation. Did you read it? Because the
>> > question here makes it look like you don't know what a virtual server is,
>> > or what a NAS is, or what the purpose of each column is.
>> > >
>> > > Alan DeKok.
>> > >
>> > >
>> > > -
>> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ <http://www.freeradius.org/>
>> > list/users.html <http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>>
>> > >
>> > > If you reply to this email, your message will be added to the discussion
>> > below:
>> > > http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql- <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql->
>> > not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html <
>> > http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql- <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql->
>> > not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html>
>> > > To unsubscribe from FreeRADIUS, click here <
>> > http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro= <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=>
>> > unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMD
>> > IzMzk2NTk3>.
>> > > NAML <http://freeradius.1045715.n5.nabble.com/template/ <http://freeradius.1045715.n5.nabble.com/template/>
>> > NamlServlet.jtp?macro=macro_viewer&id=instant_html%
>> > 21nabble%3Aemail.naml&base=nabble.naml.namespaces.
>> > BasicNamespace-nabble.view.web.template.NabbleNamespace-
>> > nabble.view.web.template.NodeNamespace&breadcrumbs=
>> > notify_subscribers%21nabble%3Aemail.naml-instant_emails%
>> > 21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
>> > -
>> > List info/subscribe/unsubscribe? See http://www.freeradius.org/ <http://www.freeradius.org/>
>> > list/users.html
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
>>
>> If you reply to this email, your message will be added to the discussion below:
>> http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748219.html <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748219.html>
>> To unsubscribe from FreeRADIUS, click here <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMDIzMzk2NTk3>.
>> NAML <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
On Dec 2, 2017, at 7:42 AM, .h <h@alf.world> wrote:
I always get: rlm_sql (sql): Adding client 192.168.35.158 (debian9) to 192.168.35.158 clients list Failed to find virtual server 192.168.35.158
The problem is that you've been told about four times what the "server" field is for, what you should put in it, and what documentation explains this. Despite that, you're still having problems.
why is it looking for a virtual server?
I asked you if you knew what a virtual server was, and you ignore my question. THAT is why I asked the question. If you know what a virtual server is, you would know that client packets get processed through virtual servers. If you had read the replies to your questions, you would know what to put in the "server" column. If you had read the documentation I pointed you to, you would know what to put in the "server" column. Despite all that, you're still putting the client IP into the "server" column, EVEN THOUGH YOU KNOW ITS WRONG AND IT DOESN'T WORK.
i want to have a client.
You're so focussed on what you want, that you're ignoring all attempts to help you. I've already told you *exactly* what to put in the "server" column. Don't blame me if you're not reading my messages. Alan DeKok.
Hi Alan, finally I got it running. Looks like i messed up my config by playing around with it. i did a complete new installation following the docs here: https://wiki.freeradius.org/guide/SQL-HOWTO-for-freeradius-3.x-on-Debian-Ubu... <https://wiki.freeradius.org/guide/SQL-HOWTO-for-freeradius-3.x-on-Debian-Ubuntu> and setup the nas entris like i learned from you. voila it’s running. thx and sorry for not listening earlier salut .h
Am 02.12.2017 um 13:51 schrieb Alan DeKok-2 [via FreeRADIUS] <ml+s1045715n5748230h57@n5.nabble.com>:
On Dec 2, 2017, at 7:42 AM, .h <[hidden email] <x-msg://24/user/SendEmail.jtp?type=node&node=5748230&i=0>> wrote:
I always get: rlm_sql (sql): Adding client 192.168.35.158 (debian9) to 192.168.35.158 clients list Failed to find virtual server 192.168.35.158
The problem is that you've been told about four times what the "server" field is for, what you should put in it, and what documentation explains this.
Despite that, you're still having problems.
why is it looking for a virtual server?
I asked you if you knew what a virtual server was, and you ignore my question. THAT is why I asked the question.
If you know what a virtual server is, you would know that client packets get processed through virtual servers.
If you had read the replies to your questions, you would know what to put in the "server" column. If you had read the documentation I pointed you to, you would know what to put in the "server" column.
Despite all that, you're still putting the client IP into the "server" column, EVEN THOUGH YOU KNOW ITS WRONG AND IT DOESN'T WORK.
i want to have a client.
You're so focussed on what you want, that you're ignoring all attempts to help you.
I've already told you *exactly* what to put in the "server" column. Don't blame me if you're not reading my messages.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
If you reply to this email, your message will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-na... <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748230.html> To unsubscribe from FreeRADIUS, click here <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMDIzMzk2NTk3>. NAML <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
On Dec 5, 2017, at 5:41 AM, .h <h@alf.world> wrote:
finally I got it running. Looks like i messed up my config by playing around with it.
And then not saying what you did.
i did a complete new installation following the docs here: https://wiki.freeradius.org/guide/SQL-HOWTO-for-freeradius-3.x-on-Debian-Ubu... <https://wiki.freeradius.org/guide/SQL-HOWTO-for-freeradius-3.x-on-Debian-Ubuntu>
and setup the nas entris like i learned from you.
voila it’s running.
i.e. the default configuration works. Following instructions works.
thx and sorry for not listening earlier
Thanks. That *is* the cause of most major problems people have. And, the reason why people think I'm being mean. After 4 repetitions of "No, the default configuration works, follow instructions", it starts to get frustrating. Alan DeKok.
Hi Alan,
i think i’m one step further:
rlm_sql (sql): Adding client 192.168.35.158 (192.168.35.158) to default clients list
rlm_sql (192.168.35.158): Client "192.168.35.158" (sql) added
now i know where to put the virtual server…. i think i need more sleep ;)
but I still get:
Ignoring request to auth address * port 1812 bound to server default from unknown client 192.168.35.158 port 44987 proto udp
any other sugestion?
TIA
.h
> Am 02.12.2017 um 13:42 schrieb .h <h@alf.world>:
>
> Hi Alan,
>
> I tried it with another client, no luck.
>
> I always get:
> rlm_sql (sql): Adding client 192.168.35.158 (debian9) to 192.168.35.158 clients list
> Failed to find virtual server 192.168.35.158
>
> why is it looking for a virtual server?
> i want to have a client.
>
> TIA
> .h
>
>> Am 02.12.2017 um 12:52 schrieb .h <h@alf.world <mailto:h@alf.world>>:
>>
>> Hi Alan,
>>
>> maybe i asked the wrong question or I’m totally confused.
>>
>> I have a default freeeradius 3 installation on debian 9.
>>
>> I have a virtual server default definition in the default site, configuration is unchanged.
>>
>> in clients.conf i have the default definition for the client localhost:
>>
>> client localhost {
>> ipaddr = 127.0.0.1
>> proto = *
>> secret = testing123
>> require_message_authenticator = no
>> nas_type = other # localhost isn't usually a NAS...
>> limit {
>> max_connections = 16
>> lifetime = 0
>> idle_timeout = 30
>> }
>> }
>>
>> I want to move the client settings for locahost to the nas table and don't want to have it in the clients.conf.
>>
>> nas table:
>> +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+
>> | id | nasname | shortname | type | ports | secret | server | community | description |
>> +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+
>> | 1 | 127.0.0.1 | localhost | other | NULL | testing123 | localhost | NULL | localhost RADIUS Client |
>> +----+-----------+-----------+-------+-------+------------+-----------+-----------+————————————+
>>
>> what did i do wrong?
>> is there anything special with the entry for localhost?
>>
>> TIA
>> .h
>>
>>> Am 01.12.2017 um 09:29 schrieb Alan Buxey [via FreeRADIUS] <ml+s1045715n5748219h16@n5.nabble.com <mailto:ml+s1045715n5748219h16@n5.nabble.com>>:
>>>
>>> Server is the default virtual server to use. Eg default in a basic install.
>>> Do you have a virtual server named localhost ??
>>>
>>> alan
>>>
>>> On 1 Dec 2017 4:24 am, ".h" <[hidden email] <x-msg://23/user/SendEmail.jtp?type=node&node=5748219&i=0>> wrote:
>>>
>>> > Hi Alan,
>>> >
>>> > no worries, I know what a NAS is.
>>> > I’m using freeradius for quite a while, but not the sql version.
>>> >
>>> > I was able to transfer every setting to sql except the clients.conf.
>>> >
>>> > in the former config adding a new client was simple by adding a section to
>>> > clients.conf, i.e.:
>>> >
>>> > client client_xyz {
>>> > ipaddr = 10.0.0.1
>>> > secret = secret
>>> > }
>>> >
>>> > Now adding a line into the nas table is not giving me the same result.
>>> > +----+-----------+-----------+-------+-------+------------+-
>>> > ----------+-----------+-------------------------+
>>> > | id | nasname | shortname | type | ports | secret | server |
>>> > community | description |
>>> > +----+-----------+-----------+-------+-------+------------+-
>>> > ----------+-----------+-------------------------+
>>> > | 1 | 127.0.0.1 | localhost | other | NULL | testing123 | localhost |
>>> > NULL | localhost RADIUS Client |
>>> > +----+-----------+-----------+-------+-------+------------+-
>>> > ----------+-----------+-------------------------+
>>> >
>>> > This is whats unclear to me.
>>> >
>>> > what is the easiest way to transfer all clients from .conf to sql?
>>> >
>>> > TIA
>>> > .h
>>> >
>>> > > Am 30.11.2017 um 20:59 schrieb Alan DeKok-2 [via FreeRADIUS] <
>>> > [hidden email] <x-msg://23/user/SendEmail.jtp?type=node&node=5748219&i=1>>:
>>> > >
>>> > > On Nov 30, 2017, at 2:52 PM, .h <[hidden email]
>>> > <x-msg://5/user/SendEmail.jtp?type=node&node=5748215&i=0 <x-msg://5/user/SendEmail.jtp?type=node&node=5748215&i=0>>> wrote:
>>> > > >
>>> > > > is there any documentation on this section?
>>> > >
>>> > > On what section?
>>> > >
>>> > > The queries.conf file describes what each column should contain.
>>> > >
>>> > > > do i have to add a virtual server for every nas that will be used?
>>> > >
>>> > > You need to populate each column in the row.
>>> > >
>>> > > Multiple rows can use "default" for the virtual server column... which
>>> > then tells it to use the "default" virtual server.
>>> > >
>>> > > The "nas" table in SQL defines a NAS. With IP address, shared secret,
>>> > and virtual server.
>>> > >
>>> > >
>>> > > I *did* point you to documentation. Did you read it? Because the
>>> > question here makes it look like you don't know what a virtual server is,
>>> > or what a NAS is, or what the purpose of each column is.
>>> > >
>>> > > Alan DeKok.
>>> > >
>>> > >
>>> > > -
>>> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ <http://www.freeradius.org/>
>>> > list/users.html <http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>>
>>> > >
>>> > > If you reply to this email, your message will be added to the discussion
>>> > below:
>>> > > http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql- <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql->
>>> > not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html <
>>> > http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql- <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql->
>>> > not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html>
>>> > > To unsubscribe from FreeRADIUS, click here <
>>> > http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro= <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=>
>>> > unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMD
>>> > IzMzk2NTk3>.
>>> > > NAML <http://freeradius.1045715.n5.nabble.com/template/ <http://freeradius.1045715.n5.nabble.com/template/>
>>> > NamlServlet.jtp?macro=macro_viewer&id=instant_html%
>>> > 21nabble%3Aemail.naml&base=nabble.naml.namespaces.
>>> > BasicNamespace-nabble.view.web.template.NabbleNamespace-
>>> > nabble.view.web.template.NodeNamespace&breadcrumbs=
>>> > notify_subscribers%21nabble%3Aemail.naml-instant_emails%
>>> > 21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
>>> > -
>>> > List info/subscribe/unsubscribe? See http://www.freeradius.org/ <http://www.freeradius.org/>
>>> > list/users.html
>>> -
>>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
>>>
>>> If you reply to this email, your message will be added to the discussion below:
>>> http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748219.html <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748219.html>
>>> To unsubscribe from FreeRADIUS, click here <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMDIzMzk2NTk3>.
>>> NAML <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
>
Hi Alan,
i think i’m one step further:
rlm_sql (sql): Adding client 192.168.35.158 (192.168.35.158) to default clients list
rlm_sql (192.168.35.158): Client "192.168.35.158" (sql) added
now i know where to put the virtual server…. i think i need more sleep ;)
but I still get:
Ignoring request to auth address * port 1812 bound to server default from unknown client 192.168.35.158 port 44987 proto udp
any other sugestion?
TIA
.h
> Am 01.12.2017 um 09:29 schrieb Alan Buxey [via FreeRADIUS] <ml+s1045715n5748219h16@n5.nabble.com>:
>
> Server is the default virtual server to use. Eg default in a basic install.
> Do you have a virtual server named localhost ??
>
> alan
>
> On 1 Dec 2017 4:24 am, ".h" <[hidden email] <x-msg://33/user/SendEmail.jtp?type=node&node=5748219&i=0>> wrote:
>
> > Hi Alan,
> >
> > no worries, I know what a NAS is.
> > I’m using freeradius for quite a while, but not the sql version.
> >
> > I was able to transfer every setting to sql except the clients.conf.
> >
> > in the former config adding a new client was simple by adding a section to
> > clients.conf, i.e.:
> >
> > client client_xyz {
> > ipaddr = 10.0.0.1
> > secret = secret
> > }
> >
> > Now adding a line into the nas table is not giving me the same result.
> > +----+-----------+-----------+-------+-------+------------+-
> > ----------+-----------+-------------------------+
> > | id | nasname | shortname | type | ports | secret | server |
> > community | description |
> > +----+-----------+-----------+-------+-------+------------+-
> > ----------+-----------+-------------------------+
> > | 1 | 127.0.0.1 | localhost | other | NULL | testing123 | localhost |
> > NULL | localhost RADIUS Client |
> > +----+-----------+-----------+-------+-------+------------+-
> > ----------+-----------+-------------------------+
> >
> > This is whats unclear to me.
> >
> > what is the easiest way to transfer all clients from .conf to sql?
> >
> > TIA
> > .h
> >
> > > Am 30.11.2017 um 20:59 schrieb Alan DeKok-2 [via FreeRADIUS] <
> > [hidden email] <x-msg://33/user/SendEmail.jtp?type=node&node=5748219&i=1>>:
> > >
> > > On Nov 30, 2017, at 2:52 PM, .h <[hidden email]
> > <x-msg://5/user/SendEmail.jtp?type=node&node=5748215&i=0>> wrote:
> > > >
> > > > is there any documentation on this section?
> > >
> > > On what section?
> > >
> > > The queries.conf file describes what each column should contain.
> > >
> > > > do i have to add a virtual server for every nas that will be used?
> > >
> > > You need to populate each column in the row.
> > >
> > > Multiple rows can use "default" for the virtual server column... which
> > then tells it to use the "default" virtual server.
> > >
> > > The "nas" table in SQL defines a NAS. With IP address, shared secret,
> > and virtual server.
> > >
> > >
> > > I *did* point you to documentation. Did you read it? Because the
> > question here makes it look like you don't know what a virtual server is,
> > or what a NAS is, or what the purpose of each column is.
> > >
> > > Alan DeKok.
> > >
> > >
> > > -
> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ <http://www.freeradius.org/>
> > list/users.html <http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>>
> > >
> > > If you reply to this email, your message will be added to the discussion
> > below:
> > > http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql- <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql->
> > not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html <
> > http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql- <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql->
> > not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html>
> > > To unsubscribe from FreeRADIUS, click here <
> > http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro= <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=>
> > unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMD
> > IzMzk2NTk3>.
> > > NAML <http://freeradius.1045715.n5.nabble.com/template/ <http://freeradius.1045715.n5.nabble.com/template/>
> > NamlServlet.jtp?macro=macro_viewer&id=instant_html%
> > 21nabble%3Aemail.naml&base=nabble.naml.namespaces.
> > BasicNamespace-nabble.view.web.template.NabbleNamespace-
> > nabble.view.web.template.NodeNamespace&breadcrumbs=
> > notify_subscribers%21nabble%3Aemail.naml-instant_emails%
> > 21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/ <http://www.freeradius.org/>
> > list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
>
> If you reply to this email, your message will be added to the discussion below:
> http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748219.html <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748219.html>
> To unsubscribe from FreeRADIUS, click here <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMDIzMzk2NTk3>.
> NAML <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
On Nov 30, 2017, at 11:23 PM, .h <h@alf.world> wrote:
no worries, I know what a NAS is.
It's not clear if you're trolling the list, or if you're just not paying attention. What *is* clear is that you're not reading my messages, and you're not reading the documentation I point you to.
I’m using freeradius for quite a while, but not the sql version.
So you know what a virtual server is, right? Clearly not.
I was able to transfer every setting to sql except the clients.conf.
in the former config adding a new client was simple by adding a section to clients.conf, i.e.:
client client_xyz { ipaddr = 10.0.0.1 secret = secret }
Now adding a line into the nas table is not giving me the same result. +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+ | id | nasname | shortname | type | ports | secret | server | community | description | +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+ | 1 | 127.0.0.1 | localhost | other | NULL | testing123 | localhost | NULL | localhost RADIUS Client | +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+
This is whats unclear to me.
Despite me explaining multiple times? And telling you EXACTLY WHAT YOU NEED TO PUT INTO THE "SERVER" FIELD? How is there any confusion?
what is the easiest way to transfer all clients from .conf to sql?
Read the documentation and follow instructions. Since you clearly can't do that, I'm done. Go back and read my messages until you understand what you're missing. Alan DeKok.
participants (4)
-
.h -
Alan Buxey -
Alan DeKok -
Matthew Newton