Would you please assist me to get rid of this problem, When I am forwarding request from my NAS/router to radius server, getting below error, attached is complete logs. Thanks in advance for the kind help. (31) sql: ERROR: Error fetching row (31) sql: ERROR: rlm_sql_oracle: ORA-01403: no data found (31) sql: EXPAND SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}' (31) sql: --> SELECT GroupName FROM usergroup WHERE UserName='' (31) sql: Executing select query: SELECT GroupName FROM usergroup WHERE UserName='' (31) sql: ERROR: Error fetching row (31) sql: ERROR: rlm_sql_oracle: ORA-01403: no data found (31) sql: User not found in any groups rlm_sql (sql): Released connection (9) (31) [sql] = notfound (31) [expiration] = noop (31) [logintime] = noop (31) pap: WARNING: No "known good" password found for the user. Not setting Auth-Type (31) pap: WARNING: Authentication will fail unless a "known good" password is available (31) [pap] = noop (31) } # authorize = ok (31) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (31) Failed to authenticate the user (31) Using Post-Auth-Type Reject (31) # Executing group from file /usr/local/freeradius3/etc/raddb/sites-enabled/default
Hi,
Would you please assist me to get rid of this problem,
you need to fix your SQL config the debug clearly shows what is happening.....so you need to work with that. look:
(31) sql: ERROR: Error fetching row (31) sql: ERROR: rlm_sql_oracle: ORA-01403: no data found
so thats thwe error. lets look to see why (debug tells us!)
(31) sql: EXPAND SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'
(31) sql: --> SELECT GroupName FROM usergroup WHERE UserName=''
there. SELECT GroupName FROM usergroup WHERE UserName='' I bet if you go onto the database server and run that query, you will get the same result. no answers. so, why is UserName='' ? well, look a couple of lines up and the server debug tells you what it is doing EXPAND SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}' so, obviously, UserName='%{SQL-User-Name}' enumerated to '' - so, you need to fix your sql config in FreeRADIUS to ensure that %{SQL-User-Name} is mapped to something that actually exists....so you need to go through the debug - and not just look at the error bit...go back a few more dozen lines and you'll see what the request looks like...and therefore what happens to the values.... eg whether Stripped-User-Name is actually populated etc etc. alan
SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'
Do you mean we don’t have any data in usergroup table?? alternative option is in "sql" file, the table name should be as is in oracle database where that table contents users info ?? Thank you so much for your help. -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+mejaz=cyberia.net.sa@lists.freeradius.org] On Behalf Of A.L.M.Buxey@lboro.ac.uk Sent: Sunday, November 6, 2016 2:49 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: rad-error Hi,
Would you please assist me to get rid of this problem,
you need to fix your SQL config the debug clearly shows what is happening.....so you need to work with that. look:
(31) sql: ERROR: Error fetching row (31) sql: ERROR: rlm_sql_oracle: ORA-01403: no data found
so thats thwe error. lets look to see why (debug tells us!)
(31) sql: EXPAND SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'
(31) sql: --> SELECT GroupName FROM usergroup WHERE UserName=''
there. SELECT GroupName FROM usergroup WHERE UserName='' I bet if you go onto the database server and run that query, you will get the same result. no answers. so, why is UserName='' ? well, look a couple of lines up and the server debug tells you what it is doing EXPAND SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}' so, obviously, UserName='%{SQL-User-Name}' enumerated to '' - so, you need to fix your sql config in FreeRADIUS to ensure that %{SQL-User-Name} is mapped to something that actually exists....so you need to go through the debug - and not just look at the error bit...go back a few more dozen lines and you'll see what the request looks like...and therefore what happens to the values.... eg whether Stripped-User-Name is actually populated etc etc. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi On 6 November 2016 13:56:49 GMT+00:00, Ejaz <mejaz@cyberia.net.sa> wrote:
SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'
Do you mean we don’t have any data in usergroup table??
Look at the query. Look how it got populated. SQL-User-Name was blank. So check in your freeradius sql config to see what it is supposed to represent.
alternative option is in "sql" file, the table name should be as is in oracle database where that table contents users info ??
Obviously the table name needs to be what you've actually chosen to call it. Either you use the table names that freeradius uses out of the box OR you reconfigure freeradius to use the table names that you have chosen to use. alan
thank you ________________________________ From: Freeradius-Users <freeradius-users-bounces+ejazrom=hotmail.com@lists.freeradius.org> on behalf of Alan Buxey <A.L.M.Buxey@lboro.ac.uk> Sent: Sunday, November 6, 2016 4:46:19 PM To: FreeRadius users mailing list; Ejaz; 'FreeRadius users mailing list' Subject: RE: rad-error Hi On 6 November 2016 13:56:49 GMT+00:00, Ejaz <mejaz@cyberia.net.sa> wrote:
SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'
Do you mean we don’t have any data in usergroup table??
Look at the query. Look how it got populated. SQL-User-Name was blank. So check in your freeradius sql config to see what it is supposed to represent.
alternative option is in "sql" file, the table name should be as is in oracle database where that table contents users info ??
Obviously the table name needs to be what you've actually chosen to call it. Either you use the table names that freeradius uses out of the box OR you reconfigure freeradius to use the table names that you have chosen to use. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan Buxey
-
Ejaz -
Ejaz Ahmed