Why my schema is not working?
Good afternoon! After upgrade 1.1.7 to 2.0.3+ freeradius I have noticed, that that is brought in the table has ceased to be processed Select * from radgroupcheck where groupname='blackholed'; 1 181 blackholed Auth-Type := Reject 2 182 blackholed Fall-Through = No select * from usergroup where clid='250092020001115' and groupname='blackholed'; 1 17651 250092020001115 blackholed 10 radiusd -X: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 23903, id=228, length=69 User-Name = "mobile" User-Password = "internet" Calling-Station-Id = "250092020001115" NAS-IP-Address = 83.217.24.21 +- entering group authorize expand: simbirsk -> simbirsk SIMBIRSK-ULN: Does not match: User-Name = mobile ++[SIMBIRSK-ULN] returns ok expand: uuuuuuuuuu -> uuuuuuuuuu UUU: Does not match: User-Name = mobile ++[UUU] returns ok expand: %{Calling-Station-Id} -> 250092020001115 ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "mobile", looking up realm NULL rlm_realm: Found realm "NULL" rlm_realm: Proxying request from user mobile to realm NULL rlm_realm: Adding Realm = "NULL" rlm_realm: Authentication realm is LOCAL. ++[suffix] returns noop users: Matched entry DEFAULT at line 10 ++[files] returns ok expand: %{User-Name} -> mobile rlm_sql (sqlauth): sql_set_user escaped user --> 'mobile' rlm_sql (sqlauth): Reserving sql socket id: 4 expand: SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'mobile' ORDER BY id rlm_sql (sqlauth): User found in radcheck table expand: SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'mobile' ORDER BY id expand: SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}' OR CLID='%{Calling-Station-Id}' order by priority -> SELECT GroupName FROM usergroup WHERE UserName='mobile' OR CLID='250092020001115' order by priority expand: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE (usergroup.Username = '%{SQL-User-Name}' or usergroup.CLID = '%{Calling-Station-Id}') AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY usergroup.PRIORITY,radgroupcheck.id -> SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE (usergroup.Username = 'mobile' or usergroup.CLID = '250092020001115') AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY usergroup.PRIORITY,radgroupcheck.id rlm_sql (sqlauth): User found in group mppc expand: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE (usergroup.Username = '%{SQL-User-Name}' OR usergroup.CLID = '%{Calling-Station-Id}') AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id -> SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE (usergroup.Username = 'mobile' OR usergroup.CLID = '250092020001115') AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sqlauth): Released sql socket id: 4 ++[sqlauth] returns ok rad_check_password: Found Auth-Type Accept rad_check_password: Auth-Type = Accept, accepting the user Login OK: [mobile/internet] (from client localhost port 0 cli 250092020001115) Sending Access-Accept of id 228 to 127.0.0.1 port 23903 Service-Type = Framed-User Framed-Protocol = PPP Framed-Compression = Stac-LZS Framed-Compression += Van-Jacobson-TCP-IP Filter-Id = "fw-simbirsk.out" Finished request 0. Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 228 with timestamp +2 Ready to process requests. Why radius say that Found Auth-Type Accept when Auth-Type := Reject?
Hmm... And why: select * from usergroup where username='250092020001115@evdo.uln.skylink.ru'; 1 17652 250092020001115@evdo.uln.skylink.ru blackholed 10 rad_recv: Access-Request packet from host 127.0.0.1 port 23905, id=127, length=81 User-Name = "250092020001115@evdo.uln.skylink.ru" User-Password = "EBLAImXtaUidLnSa" NAS-IP-Address = 10.173.65.200 +- entering group authorize expand: simbirsk -> simbirsk SIMBIRSK-ULN: Does not match: User-Name = 250092020001115@evdo.uln.skylink.ru ++[SIMBIRSK-ULN] returns ok expand: uuuuuuuuuu -> uuuuuuuuuu UUU: Does not match: User-Name = 250092020001115@evdo.uln.skylink.ru ++[UUU] returns ok ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: Looking up realm "evdo.uln.skylink.ru" for User-Name = "250092020001115@evdo.uln.skylink.ru" rlm_realm: Found realm "evdo.uln.skylink.ru" rlm_realm: Proxying request from user 250092020001115 to realm evdo.uln.skylink.ru rlm_realm: Adding Realm = "evdo.uln.skylink.ru" rlm_realm: Authentication realm is LOCAL. ++[suffix] returns noop users: Matched entry DEFAULT at line 3 ++[files] returns ok expand: %{User-Name} -> 250092020001115@evdo.uln.skylink.ru rlm_sql (sqlauth): sql_set_user escaped user --> '250092020001115@evdo.uln.skylink.ru' rlm_sql (sqlauth): Reserving sql socket id: 1 expand: SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '250092020001115@evdo.uln.skylink.ru' ORDER BY id WARNING: Found User-Password == "...". WARNING: Are you sure you don't mean Cleartext-Password? WARNING: See "man rlm_pap" for more information. rlm_sql (sqlauth): User found in radcheck table expand: SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '250092020001115@evdo.uln.skylink.ru' ORDER BY id expand: SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}' OR CLID='%{Calling-Station-Id}' order by priority -> SELECT GroupName FROM usergroup WHERE UserName='250092020001115@evdo.uln.skylink.ru' OR CLID='' order by priority expand: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE (usergroup.Username = '%{SQL-User-Name}' or usergroup.CLID = '%{Calling-Station-Id}') AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY usergroup.PRIORITY,radgroupcheck.id -> SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE (usergroup.Username = '250092020001115@evdo.uln.skylink.ru' or usergroup.CLID = '') AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY usergroup.PRIORITY,radgroupcheck.id rlm_sql (sqlauth): Released sql socket id: 1 ++[sqlauth] returns ok rad_check_password: Found Auth-Type Local !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! !!! Replacing User-Password in config items with Cleartext-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! !!! Please update your configuration so that the "known good" !!! !!! clear text password is in Cleartext-Password, and not in User-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! auth: type Local auth: user supplied User-Password matches local User-Password Login OK: [250092020001115@evdo.uln.skylink.ru/EBLAImXtaUidLnSa] (from client localhost port 0) Sending Access-Accept of id 127 to 127.0.0.1 port 23905 Callback-Id == "0250092020001115" Finished request 3. Going to the next request Waking up in 4.9 seconds. Cleaning up request 3 ID 127 with timestamp +156 Ready to process requests. -----Original Message----- From: freeradius-users-bounces+snaut=snaut.ru@lists.freeradius.org [mailto:freeradius-users-bounces+snaut=snaut.ru@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Friday, April 04, 2008 1:43 PM To: freeradius-users@lists.freeradius.org Subject: Re: Why my schema is not working?
rlm_sql (sqlauth): User found in group mppc
He is a member of another group that has higher priority. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
WARNING: Found User-Password == "...". WARNING: Are you sure you don't mean Cleartext-Password? WARNING: See "man rlm_pap" for more information.
lets start getting rid of your errors and warnings. update your 1.1.x data so that operator is := and attribute is Cleartext-Password, not User-Password alan
Yes, I do it. But the my problem is still persent. -----Original Message----- From: A.L.M.Buxey@lboro.ac.uk [mailto:A.L.M.Buxey@lboro.ac.uk] Sent: Friday, April 04, 2008 2:20 PM To: snaut@snaut.ru; FreeRadius users mailing list Subject: Re: Why my schema is not working? Hi,
WARNING: Found User-Password == "...". WARNING: Are you sure you don't mean Cleartext-Password? WARNING: See "man rlm_pap" for more information.
lets start getting rid of your errors and warnings. update your 1.1.x data so that operator is := and attribute is Cleartext-Password, not User-Password alan
SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '250092020001115@evdo.uln.skylink.ru' ORDER BY id 1 4732 250092020001115@evdo.uln.skylink.ru Cleartext-Password EBLAImXtaUidLnSa := SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '250092020001115@evdo.uln.skylink.ru' ORDER BY id 1 4147 250092020001115@evdo.uln.skylink.ru Callback-Id 0250092020001115 == SELECT GroupName FROM usergroup WHERE UserName='250092020001115@evdo.uln.skylink.ru' OR CLID='' order by priority 1 blackholed SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE (usergroup.Username = '250092020001115@evdo.uln.skylink.ru' or usergroup.CLID = '') AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY usergroup.PRIORITY,radgroupcheck.id 1 181 blackholed Auth-Type Reject := 2 182 blackholed Fall-Through No = I'm see happy result :) but I'm not see this result in radius. -----Original Message----- From: A.L.M.Buxey@lboro.ac.uk [mailto:A.L.M.Buxey@lboro.ac.uk] Sent: Friday, April 04, 2008 5:11 PM To: snaut@snaut.ru; FreeRadius users mailing list Subject: Re: Why my schema is not working? Hi,
Yes, I do it. But the my problem is still persent.
have you tried running exactly the same query that FreeRADIUS runs - as seen in your log - manually? do you get to see the same happy result? alan
1. That entry wasn't there whe server looked. 2. You are not looking into the same database as the server. Ivan Kalik Kalik Informatika ISP Dana 4/4/2008, "Dmitry A. Sysoev" <snaut@snaut.ru> piše:
Hmm... And why: select * from usergroup where username='250092020001115@evdo.uln.skylink.ru'; 1 17652 250092020001115@evdo.uln.skylink.ru blackholed 10
rad_recv: Access-Request packet from host 127.0.0.1 port 23905, id=127, length=81 User-Name = "250092020001115@evdo.uln.skylink.ru" User-Password = "EBLAImXtaUidLnSa" NAS-IP-Address = 10.173.65.200 +- entering group authorize expand: simbirsk -> simbirsk SIMBIRSK-ULN: Does not match: User-Name = 250092020001115@evdo.uln.skylink.ru ++[SIMBIRSK-ULN] returns ok expand: uuuuuuuuuu -> uuuuuuuuuu UUU: Does not match: User-Name = 250092020001115@evdo.uln.skylink.ru ++[UUU] returns ok ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: Looking up realm "evdo.uln.skylink.ru" for User-Name = "250092020001115@evdo.uln.skylink.ru" rlm_realm: Found realm "evdo.uln.skylink.ru" rlm_realm: Proxying request from user 250092020001115 to realm evdo.uln.skylink.ru rlm_realm: Adding Realm = "evdo.uln.skylink.ru" rlm_realm: Authentication realm is LOCAL. ++[suffix] returns noop users: Matched entry DEFAULT at line 3 ++[files] returns ok expand: %{User-Name} -> 250092020001115@evdo.uln.skylink.ru rlm_sql (sqlauth): sql_set_user escaped user --> '250092020001115@evdo.uln.skylink.ru' rlm_sql (sqlauth): Reserving sql socket id: 1 expand: SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '250092020001115@evdo.uln.skylink.ru' ORDER BY id WARNING: Found User-Password == "...". WARNING: Are you sure you don't mean Cleartext-Password? WARNING: See "man rlm_pap" for more information. rlm_sql (sqlauth): User found in radcheck table expand: SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '250092020001115@evdo.uln.skylink.ru' ORDER BY id expand: SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}' OR CLID='%{Calling-Station-Id}' order by priority -> SELECT GroupName FROM usergroup WHERE UserName='250092020001115@evdo.uln.skylink.ru' OR CLID='' order by priority expand: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE (usergroup.Username = '%{SQL-User-Name}' or usergroup.CLID = '%{Calling-Station-Id}') AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY usergroup.PRIORITY,radgroupcheck.id -> SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE (usergroup.Username = '250092020001115@evdo.uln.skylink.ru' or usergroup.CLID = '') AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY usergroup.PRIORITY,radgroupcheck.id rlm_sql (sqlauth): Released sql socket id: 1 ++[sqlauth] returns ok rad_check_password: Found Auth-Type Local !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! !!! Replacing User-Password in config items with Cleartext-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! !!! Please update your configuration so that the "known good" !!! !!! clear text password is in Cleartext-Password, and not in User-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! auth: type Local auth: user supplied User-Password matches local User-Password Login OK: [250092020001115@evdo.uln.skylink.ru/EBLAImXtaUidLnSa] (from client localhost port 0) Sending Access-Accept of id 127 to 127.0.0.1 port 23905 Callback-Id == "0250092020001115" Finished request 3. Going to the next request Waking up in 4.9 seconds. Cleaning up request 3 ID 127 with timestamp +156 Ready to process requests.
-----Original Message----- From: freeradius-users-bounces+snaut=snaut.ru@lists.freeradius.org [mailto:freeradius-users-bounces+snaut=snaut.ru@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Friday, April 04, 2008 1:43 PM To: freeradius-users@lists.freeradius.org Subject: Re: Why my schema is not working?
rlm_sql (sqlauth): User found in group mppc
He is a member of another group that has higher priority.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
When you do sample manually sql chooses all correctly. Why the radius does not fulfil it? Why it does not find, what auth-type is reject? In 1.1.7 all works fine. -----Original Message----- From: freeradius-users-bounces+snaut=snaut.ru@lists.freeradius.org [mailto:freeradius-users-bounces+snaut=snaut.ru@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Friday, April 04, 2008 2:31 PM To: freeradius-users@lists.freeradius.org Subject: RE: Why my schema is not working? 1. That entry wasn't there whe server looked. 2. You are not looking into the same database as the server. Ivan Kalik Kalik Informatika ISP sers.html
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Dmitry A. Sysoev -
Ivan Kalik