Hi all! I'm using freeradius2 as a radius-server and dhcp-server. When I connect to freeradius by defined user in /etc/raddb/users , it is successful. But I wanna define users in mysql's radcheck table. I inserted userID and password in radcheck table then following messages were displaied and connection failed. it seems to be failed to find pool-name How should I define pool-name in radcheck table or somewhere? Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 10.0.5.200 port 50000, id=10, length=207 User-Password = "test123" User-Name = "test123@test.or.jp" Acct-Session-Id = "erx FastEthernet 1/6:0014680074" Service-Type = Framed-User Framed-Protocol = PPP ERX-Pppoe-Description = "pppoe 00:1d:72:c6:7b:d5" Calling-Station-Id = "#ERX-40-b0-7a#E16#0" NAS-Port-Type = Ethernet NAS-Port = 369098752 NAS-Port-Id = "FastEthernet 1/6" NAS-IP-Address = 10.0.5.200 NAS-Identifier = "ERX-40-b0-7a" # Executing section authorize from file /etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] Looking up realm "test.or.jp" for User-Name = "test123@test.or.jp" [suffix] No such realm "test.or.jp" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [sql] expand: %{User-Name} -> test123@test.or.jp [sql] sql_set_user escaped user --> 'test123@test.or.jp' rlm_sql (sql): Reserving sql socket id: 13 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test123@test.or.jp' ORDER BY id WARNING: Found User-Password == "...". WARNING: Are you sure you don't mean Cleartext-Password? WARNING: See "man rlm_pap" for more information. [sql] User found in radcheck table [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test123@test.or.jp' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'test123@test.or.jp' ORDER BY priority rlm_sql (sql): Released sql socket id: 13 ++[sql] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated Found Auth-Type = PAP !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! Replacing User-Password in config items with Cleartext-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! Please update your configuration so that the "known good" !!! !!! clear text password is in Cleartext-Password, and not in User-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! # Executing group from file /etc/raddb/sites-enabled/default +- entering group PAP {...} [pap] login attempt with password "test123" [pap] Using clear text password "test123" [pap] User authenticated successfully ++[pap] returns ok Login OK: [test123@test.or.jp] (from client GGSN1 port 369098752 cli #ERX-40-b0-7a#E16#0) # Executing section post-auth from file /etc/raddb/sites-enabled/default +- entering group post-auth {...} [sqlippool] No Pool-Name defined. [sqlippool] expand: No Pool-Name defined (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name}) -> No Pool-Name defined (did cli #ERX-40-b0-7a#E16#0 port 369098752 user test123@test.or.jp) No Pool-Name defined (did cli #ERX-40-b0-7a#E16#0 port 369098752 user test123@test.or.jp) ++[sqlippool] returns noop ++[exec] returns noop Sending Access-Accept of id 10 to 10.0.5.200 port 50000 Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Accounting-Request packet from host 10.0.5.200 port 50016, id=108, length=248 Acct-Status-Type = Stop User-Name = "test123@test.or.jp" Event-Timestamp = "Apr 29 2014 14:20:16 PDT" Acct-Delay-Time = 0 NAS-Identifier = "ERX-40-b0-7a" Acct-Session-Id = "erx FastEthernet 1/6:0014680074" NAS-IP-Address = 10.0.5.200 Service-Type = Framed-User Calling-Station-Id = "#ERX-40-b0-7a#E16#0" Acct-Input-Gigawords = 0 Acct-Input-Octets = 0 Acct-Output-Gigawords = 0 Acct-Output-Octets = 0 ERX-Input-Gigapkts = 0 Acct-Input-Packets = 0 ERX-Output-Gigapkts = 0 Acct-Output-Packets = 0 NAS-Port-Type = Ethernet NAS-Port = 369098752 NAS-Port-Id = "FastEthernet 1/6" Acct-Authentic = RADIUS Acct-Session-Time = 0 Acct-Terminate-Cause = NAS-Request # Executing section preacct from file /etc/raddb/sites-enabled/default +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 369098752,Client-IP-Address = 10.0.5.200,NAS-IP-Address = 10.0.5.200,Acct-Session-Id = "erx FastEthernet 1/6:0014680074",User-Name = "test123@test.or.jp"' [acct_unique] Acct-Unique-Session-ID = "4abb92629c9787a0". ++[acct_unique] returns ok [suffix] Looking up realm "test.or.jp" for User-Name = "test123@test.or.jp" [suffix] No such realm "test.or.jp" ++[suffix] returns noop ++[files] returns noop # Executing section accounting from file /etc/raddb/sites-enabled/default +- entering group accounting {...} rlm_sql (sql): Reserving sql socket id: 12 [sqlippool] expand: %{User-Name} -> test123@test.or.jp [sqlippool] sql_set_user escaped user --> 'test123@test.or.jp' [sqlippool] expand: START TRANSACTION -> START TRANSACTION [sqlippool] expand: UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '%{Nas-IP-Address}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}' -> UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '10.0.5.200' AND pool_key = '369098752' AND username = 'test123@test.or.jp' AND callingstationid = '=23ERX-40-b0-7a=23E16=230' AND framedipaddress = '' [sqlippool] expand: COMMIT -> COMMIT [sqlippool] expand: Released IP %{Framed-IP-Address} (did %{Called-Station-Id} cli %{Calling-Station-Id} user %{User-Name}) -> Released IP (did cli #ERX-40-b0-7a#E16#0 user test123@test.or.jp) Released IP (did cli #ERX-40-b0-7a#E16#0 user test123@test.or.jp) rlm_sql (sql): Released sql socket id: 12 ++[sqlippool] returns ok [sql] expand: %{User-Name} -> test123@test.or.jp [sql] sql_set_user escaped user --> 'test123@test.or.jp' [sql] expand: %{Acct-Input-Gigawords} -> 0 [sql] expand: %{Acct-Input-Octets} -> 0 [sql] expand: %{Acct-Output-Gigawords} -> 0 [sql] expand: %{Acct-Output-Octets} -> 0 [sql] expand: %{Acct-Delay-Time} -> 0 [sql] expand: UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET acctstoptime = '2014-04-29 22:49:42', acctsessiontime = '0', acctinputoctets = '0' << 32 | '0', acctoutputoctets = '0' << 32 | rlm_sql (sql): Reserving sql socket id: 11 [sql] expand: stop packet with zero session length. [user '%{User-Name}', nas '%{NAS-IP-Address}'] -> stop packet with zero session length. [user 'test123@test.or.jp', nas '10.0.5.200'] [sql] stop packet with zero session length. [user 'test123@test.or.jp', nas '10.0.5.200'] rlm_sql (sql): Released sql socket id: 11 ++[sql] returns noop ++[exec] returns noop [attr_filter.accounting_response] expand: %{User-Name} -> test123@test.or.jp attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 108 to 10.0.5.200 port 50016 Finished request 1. Cleaning up request 1 ID 108 with timestamp +7 Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 10 with timestamp +7 Ready to process requests. If you need more information, please let me know. Thanks.
yata wrote:
I'm using freeradius2 as a radius-server and dhcp-server. When I connect to freeradius by defined user in /etc/raddb/users , it is successful. But I wanna define users in mysql's radcheck table. I inserted userID and password in radcheck table then following messages were displaied and connection failed.
You need to follow the instructions. Do NOT put "User-Password" into the radcheck table. Put "Cleartext-Password".
it seems to be failed to find pool-name How should I define pool-name in radcheck table or somewhere?
You define it just like any other attribute. You've already put a password entry into the radcheck table. Add another row for the Pool-Name. It's exactly the same. Alan DeKok.
Hi Alan I wrote Pool-Name and Fall-Through as below. But it doesn't work. Is there any wrong ? mysql> select * from radcheck; +----+---------------------+--------------------+----+--------+ | id | username | attribute | op | value | +----+---------------------+--------------------+----+--------+ | 1 | test123@test.or.jp | Cleartext-Password | := | test123| | 2 | test123@test.or.jp | Pool-Name | := | pool1 | | 3 | test123@test.or.jp | Fall-Through | = | yes | +----+---------------------+--------------------+----+--------+ 3 rows in set (0.00 sec) 2014-04-30 22:50 GMT+09:00 Alan DeKok <aland@deployingradius.com>:
yata wrote:
I'm using freeradius2 as a radius-server and dhcp-server. When I connect to freeradius by defined user in /etc/raddb/users , it is successful. But I wanna define users in mysql's radcheck table. I inserted userID and password in radcheck table then following messages were displaied and connection failed.
You need to follow the instructions. Do NOT put "User-Password" into the radcheck table. Put "Cleartext-Password".
it seems to be failed to find pool-name How should I define pool-name in radcheck table or somewhere?
You define it just like any other attribute. You've already put a password entry into the radcheck table. Add another row for the Pool-Name. It's exactly the same.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Alan I removed Fall-Through row. then it works fine! Thanks! 2014-05-01 13:05 GMT+09:00 lucky <aurens.memuro02@gmail.com>:
Hi Alan
I wrote Pool-Name and Fall-Through as below. But it doesn't work. Is there any wrong ?
mysql> select * from radcheck; +----+---------------------+--------------------+----+--------+ | id | username | attribute | op | value | +----+---------------------+--------------------+----+--------+ | 1 | test123@test.or.jp | Cleartext-Password | := | test123| | 2 | test123@test.or.jp | Pool-Name | := | pool1 | | 3 | test123@test.or.jp | Fall-Through | = | yes | +----+---------------------+--------------------+----+--------+ 3 rows in set (0.00 sec)
2014-04-30 22:50 GMT+09:00 Alan DeKok <aland@deployingradius.com>:
yata wrote:
I'm using freeradius2 as a radius-server and dhcp-server. When I connect to freeradius by defined user in /etc/raddb/users , it is successful. But I wanna define users in mysql's radcheck table. I inserted userID and password in radcheck table then following messages were displaied and connection failed.
You need to follow the instructions. Do NOT put "User-Password" into the radcheck table. Put "Cleartext-Password".
it seems to be failed to find pool-name How should I define pool-name in radcheck table or somewhere?
You define it just like any other attribute. You've already put a password entry into the radcheck table. Add another row for the Pool-Name. It's exactly the same.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
lucky -
yata