FreeRadius using two SQL servers

Fernando Brito fbrito at lq.com.ar
Mon Nov 14 22:24:44 CET 2005


Hi Mike, I just made exactly what you told me, but the Radius gave me
the next output:


Radius -X -------------------

Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1:32805, id=128,
length=63
        User-Name = "fbrito at dhcp"
        Password = "fbrito"
        NAS-IP-Address = 255.255.255.255
        NAS-Port = 1812
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
    users: Matched entry DEFAULT at line 9
  modcall[authorize]: module "files" returns ok for request 0
radius_xlat:  '/home/fbrito/Radius/acct//auth-detail-20051114'
rlm_detail: /home/fbrito/Radius/acct/%{Client-IP-Address}/auth-detail-%Y
%m%d expands to /home/fbrito/Radius/acct//auth-detail-20051114
  modcall[authorize]: module "auth_log" returns ok for request 0
modcall: group authorize returns ok for request 0
auth: No authenticate method (Auth-Type) configuration found for the
request: Rejecting the user
auth: Failed to validate the user.
Login incorrect: [fbrito at dhcp/fbrito] (from client localhost port 1812)
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 128 to 127.0.0.1:32805
Waking up in 4 seconds...

-----------------------------


I think that I had already try this and the answer was the same. I
really don't know what is happening. Thanks a lot for your help!!


NanO






El mar, 15-11-2005 a las 08:02 +1100, Mike Mitchell escribió:
> Hi NanO,
> 
> You may want something like this. (there are probably other ways of
> detecting the realm, but it will depend of which modules you are using in
> authorize, and which order)..
> 
> 
> In users:
> 
> DEFAULT User-Name =~ "xxxx", Autz-Type := AUTZ_SQL1
> DEFAULT User-Name =~ "yyyy", Autz-Type := AUTZ_SQL2 
> 
> 
> and in radiusd.conf:
> 
> 
> authorize {
> 
>   files
> 
>   Autz-Type AUTZ_SQL1 {
>     SQL1
>   }
> 
>   Autz-Type AUTZ_SQL2 {
>     SQL2
>   }
> 
> }
> 
> 
> Hope that helps,
> Mike
> 
> 
> > -----Original Message-----
> > From: freeradius-users-bounces at lists.freeradius.org 
> > [mailto:freeradius-users-bounces at lists.freeradius.org] On 
> > Behalf Of Fernando Brito
> > Sent: Tuesday, 15 November 2005 2:43 AM
> > To: Freeradius-Users at lists.freeradius.org
> > Subject: FreeRadius using two SQL servers
> > 
> > Hi, my version of FreeRadius is 1.0.5 and what I'm trying to 
> > do is that when a radius client ask my freeradius, if the 
> > Realm is "xxxx" I want to autorize him with the first SQL 
> > server and if the Realm is "yyyy" with the second one.
> > 
> > I already have two diferent sql configuration files, 
> > sql1.conf and sql2.conf, with instance name SQL1 and SQL2.
> > 
> > I had been trying to do exactly what the Autz-Type Doc says, 
> > but I had no luck with it. I don't know what to do... Thanks
> > 
> > NanO
> > 
> > -
> > List info/subscribe/unsubscribe? See 
> > http://www.freeradius.org/list/users.html
> > 
> 
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html





More information about the Freeradius-Users mailing list