Hello, Following this wiki: https://wiki.freeradius.org/guide/SQL%20HOWTO#before-you-start I see that sql.conf does not exist, I edited* /etc/freeradius/3.0/mods-available/sql. Is that correct?* The line database = "mysql" does not exist either, could somebody tell me where is it? Thank you very much in advance Regards
looks like debian/ubuntu - for v3 try: https://wiki.freeradius.org/guide/SQL-HOWTO-for-freeradius-3.x-on-Debian-Ubu... On 25 June 2018 at 21:40, Pedro Loupa <pedroloupa32@gmail.com> wrote:
Hello,
Following this wiki: https://wiki.freeradius.org/guide/SQL%20HOWTO#before-you-start
I see that sql.conf does not exist, I edited* /etc/freeradius/3.0/mods-available/sql. Is that correct?*
The line database = "mysql" does not exist either, could somebody tell me where is it?
Thank you very much in advance
Regards - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
Hello Alan,
I followed the tutorial, I configured everything as per it, and I get the
following errors when I use radtest:
Ready to process requests
(0) Received Access-Request Id 24 from 127.0.0.1:50116 to 127.0.0.1:1812
length 75
(0) User-Name = "fredf"
(0) User-Password = "wilma"
(0) NAS-IP-Address = 5.135.246.126
(0) NAS-Port = 0
(0) Message-Authenticator = 0x9f158964d9d6b8ef09a954ab469767e3
(0) # Executing section authorize from file
/etc/freeradius/3.0/sites-enabled/default
(0) authorize {
(0) [preprocess] = ok
(0) [chap] = noop
(0) [mschap] = noop
(0) suffix: Checking for suffix after "@"
(0) suffix: No '@' in User-Name = "fredf", looking up realm NULL
(0) suffix: No such realm "NULL"
(0) [suffix] = noop
(0) eap: No EAP-Message, not doing EAP
(0) [eap] = noop
(0) [files] = noop
(0) sql: EXPAND %{User-Name}
(0) sql: --> fredf
(0) sql: SQL-User-Name set to 'fredf'
rlm_sql (sql): Reserved connection (0)
(0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck
WHERE username = '%{SQL-User-Name}' ORDER BY id
(0) sql: --> SELECT id, username, attribute, value, op FROM radcheck
WHERE username = 'fredf' ORDER BY id
(0) sql: Executing select query: SELECT id, username, attribute, value, op
FROM radcheck WHERE username = 'fredf' ORDER BY id
(0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username =
'%{SQL-User-Name}' ORDER BY priority
(0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'fredf'
ORDER BY priority
(0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE
username = 'fredf' ORDER BY priority
(0) sql: User not found in any groups
rlm_sql (sql): Released connection (0)
Need 5 more connections to reach 10 spares
rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots used
(0) [sql] = notfound
(0) [expiration] = noop
(0) [logintime] = noop
(
*0) pap: WARNING: No "known good" password found for the user. Not setting
Auth-Type(0) pap: WARNING: Authentication will fail unless a "known good"
password is available(0) [pap] = noop(0) } # authorize = ok(0) ERROR:
No Auth-Type found: rejecting the user via Post-Auth-Type = Reject*
(0) Failed to authenticate the user
(0) Using Post-Auth-Type Reject
(0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default
(0) Post-Auth-Type REJECT {
(0) sql: EXPAND .query
(0) sql: --> .query
(0) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (1)
(0) sql: EXPAND %{User-Name}
(0) sql: --> fredf
(0) sql: SQL-User-Name set to 'fredf'
(0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate)
VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}',
' %{reply:Packet-Type}', '%S')
(0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate)
VALUES ( 'fredf', 'wilma', 'Access-Reject', '2018-06-26 00:39:13')
(0) sql: EXPAND /var/log/freeradius/sqllog.sql
(0) sql: --> /var/log/freeradius/sqllog.sql
(0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply,
authdate) VALUES ( 'fredf', 'wilma', 'Access-Reject', '2018-06-26
00:39 :13')
(0) sql: SQL query returned: success
(0) sql: 1 record(s) updated
rlm_sql (sql): Released connection (1)
(0) [sql] = ok
(0) attr_filter.access_reject: EXPAND %{User-Name}
(0) attr_filter.access_reject: --> fredf
(0) attr_filter.access_reject: Matched entry DEFAULT at line 11
(0) [attr_filter.access_reject] = updated
(0) [eap] = noop
(0) policy remove_reply_message_if_eap {
(0) if (&reply:EAP-Message && &reply:Reply-Message) {
(0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
(0) else {
(0) [noop] = noop
(0) } # else = noop
(0) } # policy remove_reply_message_if_eap = noop
(0) } # Post-Auth-Type REJECT = updated
(0) Delaying response for 1.000000 seconds
Waking up in 0.3 seconds.
Waking up in 0.6 seconds.
(0) Sending delayed response
(0) Sent Access-Reject Id 24 from 127.0.0.1:1812 to 127.0.0.1:50116 length
20
Waking up in 3.9 seconds.
(0) Cleaning up request packet ID 24 with timestamp +17
Ready to process requests
Any clue how to fix it?
Thanks!
Best
On Mon, Jun 25, 2018 at 11:57 PM, Alan Buxey <alan.buxey@gmail.com> wrote:
> looks like debian/ubuntu - for v3 try:
>
> https://wiki.freeradius.org/guide/SQL-HOWTO-for-freeradius-3.x-on-Debian-
> Ubuntu
>
>
> On 25 June 2018 at 21:40, Pedro Loupa <pedroloupa32@gmail.com> wrote:
>
> > Hello,
> >
> > Following this wiki:
> > https://wiki.freeradius.org/guide/SQL%20HOWTO#before-you-start
> >
> > I see that sql.conf does not exist, I edited*
> > /etc/freeradius/3.0/mods-available/sql. Is that correct?*
> >
> >
> > The line database = "mysql" does not exist either, could somebody tell me
> > where is it?
> >
> > Thank you very much in advance
> >
> > Regards
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
Hello,
One more question, is it a problem if I use the data base from my 2.x
radius? I guess the structure is the same, right?
Thanks in advance
Best
On Tue, Jun 26, 2018 at 12:42 AM, Pedro Loupa <pedroloupa32@gmail.com>
wrote:
> Hello Alan,
>
> I followed the tutorial, I configured everything as per it, and I get the
> following errors when I use radtest:
>
> Ready to process requests
> (0) Received Access-Request Id 24 from 127.0.0.1:50116 to 127.0.0.1:1812
> length 75
> (0) User-Name = "fredf"
> (0) User-Password = "wilma"
> (0) NAS-IP-Address = 5.135.246.126
> (0) NAS-Port = 0
> (0) Message-Authenticator = 0x9f158964d9d6b8ef09a954ab469767e3
> (0) # Executing section authorize from file /etc/freeradius/3.0/sites-
> enabled/default
> (0) authorize {
> (0) [preprocess] = ok
> (0) [chap] = noop
> (0) [mschap] = noop
> (0) suffix: Checking for suffix after "@"
> (0) suffix: No '@' in User-Name = "fredf", looking up realm NULL
> (0) suffix: No such realm "NULL"
> (0) [suffix] = noop
> (0) eap: No EAP-Message, not doing EAP
> (0) [eap] = noop
> (0) [files] = noop
> (0) sql: EXPAND %{User-Name}
> (0) sql: --> fredf
> (0) sql: SQL-User-Name set to 'fredf'
> rlm_sql (sql): Reserved connection (0)
> (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck
> WHERE username = '%{SQL-User-Name}' ORDER BY id
> (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck
> WHERE username = 'fredf' ORDER BY id
> (0) sql: Executing select query: SELECT id, username, attribute, value, op
> FROM radcheck WHERE username = 'fredf' ORDER BY id
> (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username =
> '%{SQL-User-Name}' ORDER BY priority
> (0) sql: --> SELECT groupname FROM radusergroup WHERE username =
> 'fredf' ORDER BY priority
> (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE
> username = 'fredf' ORDER BY priority
> (0) sql: User not found in any groups
> rlm_sql (sql): Released connection (0)
> Need 5 more connections to reach 10 spares
> rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots
> used
> (0) [sql] = notfound
> (0) [expiration] = noop
> (0) [logintime] = noop
> (
>
>
>
> *0) pap: WARNING: No "known good" password found for the user. Not
> setting Auth-Type(0) pap: WARNING: Authentication will fail unless a "known
> good" password is available(0) [pap] = noop(0) } # authorize = ok(0)
> ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject*
> (0) Failed to authenticate the user
> (0) Using Post-Auth-Type Reject
> (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default
> (0) Post-Auth-Type REJECT {
> (0) sql: EXPAND .query
> (0) sql: --> .query
> (0) sql: Using query template 'query'
> rlm_sql (sql): Reserved connection (1)
> (0) sql: EXPAND %{User-Name}
> (0) sql: --> fredf
> (0) sql: SQL-User-Name set to 'fredf'
> (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate)
> VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}',
> ' %{reply:Packet-Type}', '%S')
> (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate)
> VALUES ( 'fredf', 'wilma', 'Access-Reject', '2018-06-26 00:39:13')
> (0) sql: EXPAND /var/log/freeradius/sqllog.sql
> (0) sql: --> /var/log/freeradius/sqllog.sql
> (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply,
> authdate) VALUES ( 'fredf', 'wilma', 'Access-Reject', '2018-06-26
> 00:39 :13')
> (0) sql: SQL query returned: success
> (0) sql: 1 record(s) updated
> rlm_sql (sql): Released connection (1)
> (0) [sql] = ok
> (0) attr_filter.access_reject: EXPAND %{User-Name}
> (0) attr_filter.access_reject: --> fredf
> (0) attr_filter.access_reject: Matched entry DEFAULT at line 11
> (0) [attr_filter.access_reject] = updated
> (0) [eap] = noop
> (0) policy remove_reply_message_if_eap {
> (0) if (&reply:EAP-Message && &reply:Reply-Message) {
> (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
> (0) else {
> (0) [noop] = noop
> (0) } # else = noop
> (0) } # policy remove_reply_message_if_eap = noop
> (0) } # Post-Auth-Type REJECT = updated
> (0) Delaying response for 1.000000 seconds
> Waking up in 0.3 seconds.
> Waking up in 0.6 seconds.
> (0) Sending delayed response
> (0) Sent Access-Reject Id 24 from 127.0.0.1:1812 to 127.0.0.1:50116
> length 20
> Waking up in 3.9 seconds.
> (0) Cleaning up request packet ID 24 with timestamp +17
> Ready to process requests
>
> Any clue how to fix it?
>
> Thanks!
>
> Best
>
> On Mon, Jun 25, 2018 at 11:57 PM, Alan Buxey <alan.buxey@gmail.com> wrote:
>
>> looks like debian/ubuntu - for v3 try:
>>
>> https://wiki.freeradius.org/guide/SQL-HOWTO-for-freeradius-
>> 3.x-on-Debian-Ubuntu
>>
>>
>> On 25 June 2018 at 21:40, Pedro Loupa <pedroloupa32@gmail.com> wrote:
>>
>> > Hello,
>> >
>> > Following this wiki:
>> > https://wiki.freeradius.org/guide/SQL%20HOWTO#before-you-start
>> >
>> > I see that sql.conf does not exist, I edited*
>> > /etc/freeradius/3.0/mods-available/sql. Is that correct?*
>> >
>> >
>> > The line database = "mysql" does not exist either, could somebody tell
>> me
>> > where is it?
>> >
>> > Thank you very much in advance
>> >
>> > Regards
>> > -
>> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
>> > list/users.html
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list
>> /users.html
>
>
>
On 25 Jun 2018, at 23:45, Pedro Loupa <pedroloupa32@gmail.com> wrote:
One more question, is it a problem if I use the data base from my 2.x radius? I guess the structure is the same, right?
It's similar, but different enough that it won't work without some changes. You're better off starting from scratch, as you'll miss out on improved capabilities. See raddb/README.rst for details on the changes: https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/README.rst Adam Bishop gpg: E75B 1F92 6407 DFDF 9F1C BF10 C993 2504 6609 D460 jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.
Hi Alan, Thanks, doing, I could realize of all these changes, nevertheless, thanks for the link, I'll document it. BR Javier Escalante Business Development Manager Javier.escalante@bwireless.eu 00 34 626 785 675 00 34 93 141 56 36 00 41 78 689 85 69 Skype: fruiz002 Do you know our IoT solutions? Have a look here: www.bsmart.global http://www.bwireless.eu Le informamos que, de conformidad con la Ley Orgánica 15/1999, de 13 de diciembre, de Protección de Datos de Carácter Personal, se informa que todos los datos personales que nos ha facilitado serán incorporados y tratados en los ficheros de B’W & TAKACS TELECOM, S.L. para las finalidades de su e-mail. Puede ejercer sus derechos de acceso, rectificación, cancelación y oposición mediante una comunicación a B’W & TAKACS TELECOM, S.L. con domicilio en Camil Oliveras, 26, 08032 Barcelona (España), o bien mediante una comunicación a la dirección de correo electrónico info@bwireless.eu. En ambos casos, deberá acompañar una copia de su documento nacional de identidad o documento válido que lo identifique. -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+javier.escalante=bwireless.eu@lists.freeradius.org] On Behalf Of Adam Bishop Sent: martes, 26 de junio de 2018 0:56 To: FreeRadius users mailing list Subject: Re: errors On 25 Jun 2018, at 23:45, Pedro Loupa <pedroloupa32@gmail.com> wrote:
One more question, is it a problem if I use the data base from my 2.x radius? I guess the structure is the same, right?
It's similar, but different enough that it won't work without some changes. You're better off starting from scratch, as you'll miss out on improved capabilities. See raddb/README.rst for details on the changes: https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/README.rst Adam Bishop gpg: E75B 1F92 6407 DFDF 9F1C BF10 C993 2504 6609 D460 jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Adam Bishop -
Alan Buxey -
Javier Escalante -
Pedro Loupa