We are implementing 802.1x authentication with MAB (Mac Address Bypass) on our Cisco switches and are getting some freeradius errors. Just as a note, when using MAB the username and password given to radius is the MAC address of the device (workstation, server, printer, etc) that is attempting to connect to the network. The authentication succeeds, but I'm wondering what these errors mean and if they can be fixed. Here is a sample of the radius.log. Thu Mar 26 09:08:08 2009 : Error: rlm_sql_getvpdata: database query error Thu Mar 26 09:08:08 2009 : Error: rlm_sql_getvpdata: database query error Thu Mar 26 09:08:08 2009 : Auth: Login OK: [001b63933f59/001b63933f59] (from client technet port 50232 cli 00-1B-63-93-3F-59) Thu Mar 26 09:16:03 2009 : Error: rlm_sql_getvpdata: database query error Thu Mar 26 09:16:03 2009 : Error: rlm_sql_getvpdata: database query error Thu Mar 26 09:16:03 2009 : Auth: Login OK: [000c29604a22/000c29604a22] (from client technet port 50246 cli 00-0C-29-60-4A-22) Thu Mar 26 09:19:35 2009 : Error: rlm_sql_getvpdata: database query error Thu Mar 26 09:19:35 2009 : Error: rlm_sql_getvpdata: database query error Thu Mar 26 09:19:35 2009 : Auth: Login OK: [00188b0251ba/00188b0251ba] (from client technet port 50246 cli 00-18-8B-02-51-BA) Thanks in advance for any help I can get. Chris Delcamp
We are implementing 802.1x authentication with MAB (Mac Address Bypass) on our Cisco switches and are getting some freeradius errors. Just as a note, when using MAB the username and password given to radius is the MAC address of the device (workstation, server, printer, etc) that is attempting to connect to the network. The authentication succeeds, but I'm wondering what these errors mean and if they can be fixed. Here is a sample of the radius.log.
Which doesn't say a lot. Post the debug (radiusd -X). Ivan Kalik Kalik Informatika ISP
Here is the debug output with several authentications. Thanks, Chris Delcamp /usr/sbin/freeradius -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/freeradius/proxy.conf Config: including file: /etc/freeradius/clients.conf Config: including file: /etc/freeradius/snmp.conf Config: including file: /etc/freeradius/eap.conf Config: including file: /etc/freeradius/sql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/freeradius" main: libdir = "/usr/lib/freeradius" main: radacctdir = "/var/log/freeradius/radacct" main: hostname_lookups = off main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/freeradius/radius.log" main: log_auth = yes main: log_auth_badpass = no main: log_auth_goodpass = yes main: pidfile = "/var/run/freeradius/freeradius.pid" main: user = "freerad" main: group = "freerad" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib/freeradius Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "/etc/shadow" unix: group = "(null)" unix: radwtmp = "/var/log/freeradius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/freeradius/huntgroups" preprocess: hints = "/etc/freeradius/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded SQL sql: driver = "rlm_sql_mysql" sql: server = "akira" sql: port = "" sql: login = "radius" sql: password = "xxxxx" sql: radius_db = "radius" sql: nas_table = "nas" sql: sqltrace = no sql: sqltracefile = "/var/log/freeradius/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" sql: accounting_update_query = "UPDATE radacct SET FramedIPAddress = '%{Framed-IP-Address}', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Address}'" sql: accounting_update_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S',INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0')" sql: accounting_start_query = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0')" sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query = "UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" sql: postauth_query = "INSERT into radpostauth (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to radius@akira:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 Module: Instantiated sql (sql) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded files files: usersfile = "/etc/freeradius/users" files: acctusersfile = "/etc/freeradius/acct_users" files: preproxy_usersfile = "/etc/freeradius/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded detail detail: detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/var/log/freeradius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 10.50.50.104:1645, id=77, length=199 User-Name = "0021709d3d47" User-Password = "0021709d3d47" Service-Type = Call-Check Framed-MTU = 9000 Called-Station-Id = "00-15-F9-03-2C-1E" Calling-Station-Id = "00-21-70-9D-3D-47" Message-Authenticator = 0xc198aa97b07bf2f551e3e810f431157c NAS-Port-Type = Ethernet NAS-Port = 50230 NAS-Port-Id = "GigabitEthernet2/0/30" Called-Station-Id = "00-15-F9-03-2C-1E" Calling-Station-Id = "00-21-70-9D-3D-47" NAS-IP-Address = 10.50.50.104 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "0021709d3d47", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 radius_xlat: '0021709d3d47' rlm_sql (sql): sql_set_user escaped user --> '0021709d3d47' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '0021709d3d47' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '0021709d3d47' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: MYSQL check_error: 1146 received rlm_sql_getvpdata: database query error radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '0021709d3d47' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '0021709d3d47' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: MYSQL check_error: 1146 received rlm_sql_getvpdata: database query error rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 auth: type Local auth: user supplied User-Password matches local User-Password Login OK: [0021709d3d47/0021709d3d47] (from client technet port 50230 cli 00-21-70-9D-3D-47) Sending Access-Accept of id 77 to 10.50.50.104 port 1645 Tunnel-Private-Group-Id:0 = "MEC_IPC_NOC" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Accounting-Request packet from host 10.50.50.104:1646, id=114, length=177 Acct-Session-Id = "0000027B" User-Name = "0021709d3d47" Acct-Session-Time = 185694 Acct-Input-Octets = 79506530 Acct-Output-Octets = 509257406 Acct-Input-Packets = 391524 Acct-Output-Packets = 1110089 Acct-Authentic = RADIUS Acct-Status-Type = Interim-Update NAS-Port-Type = Ethernet NAS-Port = 50230 NAS-Port-Id = "GigabitEthernet2/0/30" Called-Station-Id = "00-15-F9-03-2C-1E" Calling-Station-Id = "00-21-70-9D-3D-47" Service-Type = Framed-User NAS-IP-Address = 10.50.50.104 Acct-Delay-Time = 0 Processing the preacct section of radiusd.conf modcall: entering group preacct for request 1 modcall[preacct]: module "preprocess" returns noop for request 1 rlm_acct_unique: Hashing 'NAS-Port = 50230,Client-IP-Address = 10.50.50.104,NAS-IP-Address = 10.50.50.104,Acct-Session-Id = "0000027B",User-Name = "0021709d3d47"' rlm_acct_unique: Acct-Unique-Session-ID = "b1b375e4c0f1a5e6". modcall[preacct]: module "acct_unique" returns ok for request 1 rlm_realm: No '@' in User-Name = "0021709d3d47", looking up realm NULL rlm_realm: No such realm "NULL" modcall[preacct]: module "suffix" returns noop for request 1 modcall[preacct]: module "files" returns noop for request 1 modcall: leaving group preacct (returns ok) for request 1 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 1 radius_xlat: '/var/log/freeradius/radacct/10.50.50.104/detail-20090326' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/10.50.50.104/detail-20090326 modcall[accounting]: module "detail" returns ok for request 1 modcall[accounting]: module "unix" returns noop for request 1 radius_xlat: '/var/log/freeradius/radutmp' radius_xlat: '0021709d3d47' modcall[accounting]: module "radutmp" returns ok for request 1 radius_xlat: '0021709d3d47' rlm_sql (sql): sql_set_user escaped user --> '0021709d3d47' radius_xlat: 'UPDATE radacct SET FramedIPAddress = '', AcctSessionTime = '185694', AcctInputOctets = '79506530', AcctOutputOctets = '509257406' WHERE AcctSessionId = '0000027B' AND UserName = '0021709d3d47' AND NASIPAddress= '10.50.50.104'' rlm_sql (sql): Reserving sql socket id: 3 rlm_sql (sql): Released sql socket id: 3 modcall[accounting]: module "sql" returns ok for request 1 modcall: leaving group accounting (returns ok) for request 1 Sending Accounting-Response of id 114 to 10.50.50.104 port 1646 Finished request 1 Going to the next request --- Walking the entire request list --- Waking up in 5 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 77 with timestamp 49cbcb7e Waking up in 1 seconds... --- Walking the entire request list --- Cleaning up request 1 ID 114 with timestamp 49cbcb7f Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 10.50.50.104:1645, id=78, length=199 User-Name = "001b63933f59" User-Password = "001b63933f59" Service-Type = Call-Check Framed-MTU = 9000 Called-Station-Id = "00-15-F9-03-2C-20" Calling-Station-Id = "00-1B-63-93-3F-59" Message-Authenticator = 0x4ca6f19761939b05af9d7e1d33ea54d7 NAS-Port-Type = Ethernet NAS-Port = 50232 NAS-Port-Id = "GigabitEthernet2/0/32" Called-Station-Id = "00-15-F9-03-2C-20" Calling-Station-Id = "00-1B-63-93-3F-59" NAS-IP-Address = 10.50.50.104 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 modcall[authorize]: module "mschap" returns noop for request 2 rlm_realm: No '@' in User-Name = "001b63933f59", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 2 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 2 radius_xlat: '001b63933f59' rlm_sql (sql): sql_set_user escaped user --> '001b63933f59' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '001b63933f59' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 2 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '001b63933f59' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: MYSQL check_error: 1146 received rlm_sql_getvpdata: database query error radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '001b63933f59' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '001b63933f59' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: MYSQL check_error: 1146 received rlm_sql_getvpdata: database query error rlm_sql (sql): Released sql socket id: 2 modcall[authorize]: module "sql" returns ok for request 2 modcall: leaving group authorize (returns ok) for request 2 auth: type Local auth: user supplied User-Password matches local User-Password Login OK: [001b63933f59/001b63933f59] (from client technet port 50232 cli 00-1B-63-93-3F-59) Sending Access-Accept of id 78 to 10.50.50.104 port 1645 Tunnel-Private-Group-Id:0 = "MEC_IPC_NOC" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN Finished request 2 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Accounting-Request packet from host 10.50.50.104:1646, id=115, length=177 Acct-Session-Id = "000002D5" User-Name = "001b63933f59" Acct-Session-Time = 23552 Acct-Input-Octets = 493684924 Acct-Output-Octets = 86317876 Acct-Input-Packets = 491494 Acct-Output-Packets = 309470 Acct-Authentic = RADIUS Acct-Status-Type = Interim-Update NAS-Port-Type = Ethernet NAS-Port = 50232 NAS-Port-Id = "GigabitEthernet2/0/32" Called-Station-Id = "00-15-F9-03-2C-20" Calling-Station-Id = "00-1B-63-93-3F-59" Service-Type = Framed-User NAS-IP-Address = 10.50.50.104 Acct-Delay-Time = 0 Processing the preacct section of radiusd.conf modcall: entering group preacct for request 3 modcall[preacct]: module "preprocess" returns noop for request 3 rlm_acct_unique: Hashing 'NAS-Port = 50232,Client-IP-Address = 10.50.50.104,NAS-IP-Address = 10.50.50.104,Acct-Session-Id = "000002D5",User-Name = "001b63933f59"' rlm_acct_unique: Acct-Unique-Session-ID = "82a1808da95f05e3". modcall[preacct]: module "acct_unique" returns ok for request 3 rlm_realm: No '@' in User-Name = "001b63933f59", looking up realm NULL rlm_realm: No such realm "NULL" modcall[preacct]: module "suffix" returns noop for request 3 modcall[preacct]: module "files" returns noop for request 3 modcall: leaving group preacct (returns ok) for request 3 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 3 radius_xlat: '/var/log/freeradius/radacct/10.50.50.104/detail-20090326' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/10.50.50.104/detail-20090326 modcall[accounting]: module "detail" returns ok for request 3 modcall[accounting]: module "unix" returns noop for request 3 radius_xlat: '/var/log/freeradius/radutmp' radius_xlat: '001b63933f59' modcall[accounting]: module "radutmp" returns ok for request 3 radius_xlat: '001b63933f59' rlm_sql (sql): sql_set_user escaped user --> '001b63933f59' radius_xlat: 'UPDATE radacct SET FramedIPAddress = '', AcctSessionTime = '23552', AcctInputOctets = '493684924', AcctOutputOctets = '86317876' WHERE AcctSessionId = '000002D5' AND UserName = '001b63933f59' AND NASIPAddress= '10.50.50.104'' rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 modcall[accounting]: module "sql" returns ok for request 3 modcall: leaving group accounting (returns ok) for request 3 Sending Accounting-Response of id 115 to 10.50.50.104 port 1646 Finished request 3 Going to the next request --- Walking the entire request list --- Waking up in 5 seconds... --- Walking the entire request list --- Cleaning up request 2 ID 78 with timestamp 49cbcc12 Waking up in 1 seconds... --- Walking the entire request list --- Cleaning up request 3 ID 115 with timestamp 49cbcc13 Nothing to do. Sleeping until we see a request.
Delcamp, Christopher D CTR SPAWAR SSC LANT, 50DE wrote:
Here is the debug output with several authentications. ... rlm_sql_mysql: MYSQL check_error: 1146 received
Ah... you're running an older version of the server, and using a MySQL stored procedure in the SELECT. MySQL requires some special handling for this. The changes were put into the server a while ago. Upgrade. Alan DeKok.
radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheckAttribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '0021709d3d47' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: MYSQL check_error: 1146 received rlm_sql_getvpdata: database query error radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '0021709d3d47' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreplyAttribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '0021709d3d47' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: MYSQL check_error: 1146 received rlm_sql_getvpdata: database query error
Hm, mysql error 1146 is - table does not exist. Do you have radgroupcheck, radgroupreply and usergroup tables in your radius database? Are the names correct? If you made them using script provided with the server this shouldn't happen. Ivan Kalik Kalik Informatika ISP
On Thu, Mar 26, 2009 at 3:30 PM, <tnt@kalik.net> wrote:
radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheckAttribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '0021709d3d47' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: MYSQL check_error: 1146 received rlm_sql_getvpdata: database query error radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '0021709d3d47' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreplyAttribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '0021709d3d47' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: MYSQL check_error: 1146 received rlm_sql_getvpdata: database query error
Hm, mysql error 1146 is - table does not exist. Do you have radgroupcheck, radgroupreply and usergroup tables in your radius database? Are the names correct? If you made them using script provided with the server this shouldn't happen.
Ivan Kalik Kalik Informatika ISP
I had table does not exist error. At first, I installed the freeradius server using the yum repository and ran the script to fill mysql with that. Then, following the suggestions here, I upgraded the server but forgot to re-run the scripts and ended up with missing tables. Maybe that's what happened here following the suggestion to upgrade. -- Philippe-Alexandre Lemelin
participants (4)
-
Alan DeKok -
Delcamp, Christopher D CTR SPAWAR SSC LANT, 50DE -
phil lemelin -
tnt@kalik.net