Weird huntgroup issue
Jonathan De Graeve
Jonathan.De.Graeve at imelda.be
Tue Sep 20 10:39:49 CEST 2005
Hello, I have a weird huntgroup issue.
I have users in a group 'artsen' with HuntgroupName => == ^(vpn|ras)$
I have users in group 'stagiars' with HuntgroupName => == hotspot
On the radiussystem itself I can successfully authenticate users from
group artsen but not from group stagiairs.
But I can login with a user from group stagiars from a nas with ip
194.8.52.37
My NASclients from SQL:
17 | localhost | localhost | other | 0 |...
Huntgroup file:
# VPN infrastructure
vpn NAS-IP-Address == 10.2.254.1
vpn NAS-IP-Address == 10.2.254.2
vpn NAS-IP-Address == localhost
#
ras NAS-IP-Address == 10.2.254.81
ras NAS-IP-Address == 10.2.254.82
ras NAS-IP-Address == localhost
#
hotspot NAS-IP-Address == x.y.z.37
hotspot NAS-IP-Address == x.y.z.38
hotspot NAS-IP-Address == localhost
This comes in the logging when I do a check on the radiusystem itself
with following arguments:
radtest lvanhoey0 password localhost:1812 0 passwordhere
radius_xlat: 'lvanhoey0'
rlm_sql (sql): sql_set_user escaped user --> 'lvanhoey0'
radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE
Username = 'lvanhoey0' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 3
radius_xlat: 'SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgrou
pcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE
usergroup.Username = 'lvanhoey0' AND usergroup.GroupName =
radgroupcheck.GroupName ORDER BY radgroupcheck.id'
radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE
Username = 'lvanhoey0' ORDER BY id'
radius_xlat: 'SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrou
preply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE
usergroup.Username = 'lvanhoey0' AND usergroup.GroupName =
radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql (sql): No matching entry in the database for request from user
[lvanhoey0]
rlm_sql (sql): Released sql socket id: 3
modcall[authorize]: module "sql" returns notfound for request 0
rlm_sqlcounter: Entering module authorize code
rlm_sqlcounter: Could not find Check item value pair
modcall[authorize]: module "uploadlimit" returns noop for request 0
rlm_sqlcounter: Entering module authorize code
rlm_sqlcounter: Could not find Check item value pair
modcall[authorize]: module "volumelimit" returns noop for request 0
rlm_sqlcounter: Entering module authorize code
rlm_sqlcounter: Could not find Check item value pair
modcall[authorize]: module "prepaidcounter" returns noop for request 0
modcall: group authorize returns ok for request 0
auth: No authenticate method (Auth-Type) configuration found for the
request: Rejecting the user
auth: Failed to validate the user.
Login incorrect: [lvanhoey0/jo0clni3] (from client localhost port 0)
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
--- Walking the entire request list ---
And logging when login in from nas-ipadress
modcall: entering group authorize for request 12
modcall[authorize]: module "preprocess" returns ok for request 12
modcall[authorize]: module "chap" returns noop for request 12
modcall[authorize]: module "mschap" returns noop for request 12
modcall[authorize]: module "digest" returns noop for request 12
rlm_realm: No '@' in User-Name = "lvanhoey0", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 12
rlm_eap: No EAP-Message, not doing EAP
modcall[authorize]: module "eap" returns noop for request 12
radius_xlat: 'lvanhoey0'
rlm_sql (sql): sql_set_user escaped user --> 'lvanhoey0'
radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE
Username = 'lvanhoey0' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 1
radius_xlat: 'SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgrou
pcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE
usergroup.Username = 'lvanhoey0' AND usergroup.GroupName =
radgroupcheck.GroupName ORDER BY radgroupcheck.id'
radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE
Username = 'lvanhoey0' ORDER BY id'
radius_xlat: 'SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrou
preply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE
usergroup.Username = 'lvanhoey0' AND usergroup.GroupName =
radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql (sql): Released sql socket id: 1
modcall[authorize]: module "sql" returns ok for request 12
rlm_sqlcounter: Entering module authorize code
rlm_sqlcounter: Could not find Check item value pair
modcall[authorize]: module "uploadlimit" returns noop for request 12
rlm_sqlcounter: Entering module authorize code
Any idea's???
--
Jonathan De Graeve
Network/System Administrator
Imelda vzw
Informatica Dienst
015/50.52.98
jonathan.de.graeve at imelda.be
---------
Always read the manual for the correct way to do things because the
number of incorrect ways to do things is almost infinite
---------
More information about the Freeradius-Users
mailing list