hello list, i have a litle problem here. I setup freeradius to work with mysql and an access point together. when i start the freeradius i have this: (a lot of output) rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to hotspot@localhost:/hotspot rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 Module: Instantiated sql (sql) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded detail detail: detailfile = "/var/log/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests.rad_recv: Access-Request packet from host 10.10.10.251:1812, id=61, length=71 User-Name = "x03" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0201000801783033 NAS-IP-Address = 10.10.10.251 Message-Authenticator = 0x85068ed9e75d7bde97669e3960e6342f Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 radius_xlat: 'x03' rlm_sql (sql): sql_set_user escaped user --> 'x03' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = BINARY 'x03' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = BINARY 'x03' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = BINARY 'x03' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = BINARY 'x03' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type Local auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 and the client cant authenticate. i think i dont need the MS-CHAP and Auth-Type local, but i have all of that commented in my radiusd.conf someone have a clue about this? thanks a lot if i ask for a test with radtest from a computer in lan i get success, but if i ask to ap auth me i get this in freeradius output:
x03ml wrote:
i have a litle problem here. I setup freeradius to work with mysql and an access point together.
You are using a very old version of the server. You should upgrade to the latest version. ...
Ready to process requests.rad_recv: Access-Request packet from host 10.10.10.251:1812, id=61, length=71 User-Name = "x03" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0201000801783033
Which is an EAP request.
NAS-IP-Address = 10.10.10.251 Message-Authenticator = 0x85068ed9e75d7bde97669e3960e6342f Processing the authorize section of radiusd.conf
...
modcall: leaving group authorize (returns ok) for request 0
And there is no reference to the "eap" module. This reference exists in the default configuration even in older versions of the server. You have edited the default configuration, and broken it. Don't do that.
someone have a clue about this?
Upgrade to the latest version. Don't edit the configuration files too much.
thanks a lot
if i ask for a test with radtest from a computer in lan i get success,
Yes, because that's not an EAP request. Alan DeKok.
Hello, Ok Alan i will try upgrade, but is the last freebsd port. But tks ;) Alan DeKok wrote:
x03ml wrote:
i have a litle problem here. I setup freeradius to work with mysql and an access point together.
You are using a very old version of the server. You should upgrade to the latest version. ...
Ready to process requests.rad_recv: Access-Request packet from host 10.10.10.251:1812, id=61, length=71 User-Name = "x03" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0201000801783033
Which is an EAP request.
NAS-IP-Address = 10.10.10.251 Message-Authenticator = 0x85068ed9e75d7bde97669e3960e6342f Processing the authorize section of radiusd.conf
...
modcall: leaving group authorize (returns ok) for request 0
And there is no reference to the "eap" module. This reference exists in the default configuration even in older versions of the server.
You have edited the default configuration, and broken it. Don't do that.
someone have a clue about this?
Upgrade to the latest version. Don't edit the configuration files too much.
thanks a lot
if i ask for a test with radtest from a computer in lan i get success,
Yes, because that's not an EAP request.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
x03ml