freeradius 1.0.4 + mysql cannot authincate

Jonathan Carpenter jonathan.carpenter at gmail.com
Wed Jan 11 00:02:07 CET 2006


Here is the entry from my radius.conf

authenticate {
    Auth-Type PAP {
        pap
    }
    Auth-Type CHAP {
        chap
    }
}


#
#  Pre-accounting.  Decide which accounting type to use.
#
preacct {
    preprocess
    acct_unique
    suffix
    #files
}

#
#  Accounting.  Log the accounting data.
#
accounting {
    acct_unique
    detail
    unix
    sql
    radutmp
    sql
}


#  Session database, used for checking Simultaneous-Use. Either the radutmp
#  or rlm_sql module can handle this.
#  The rlm_sql module is *much* faster
session {
    radutmp
    sql
}


#  Post-Authentication
#  Once we KNOW that the user has been authenticated, there are
#  additional steps we can take.
post-auth {
    sql
}
}

Do I just add sql to the authincate like so?
authenticate {
    Auth-Type PAP {
        pap
    }
    Auth-Type CHAP {
        chap
    }
    sql <-------
}

               Thanks,

On 1/10/06, Dennis Skinner <dskinner at bluefrog.com> wrote:
>
> Jonathan Carpenter wrote:
> > Config:   including file: /etc/raddb/sql.conf
>
> That's good.
>
> > rad_recv: Access-Request packet from host 127.0.0.1:32784
> > <http://127.0.0.1:32784>, id=125, length=58
> >         User-Name = "scooby"
> >         User-Password = "scooby"
> >         NAS-IP-Address = 255.255.255.255 <http://255.255.255.255>
> >         NAS-Port = 10
> > rad_lowerpair:  User-Name now 'scooby'
> > rad_rmspace_pair:  User-Name now 'scooby'
> > rad_rmspace_pair:  User-Password now 'scooby'
> > auth: No authenticate method (Auth-Type) configuration found for the
> > request: Rejecting the user
> > auth: Failed to validate the user.
> > Login incorrect: [scooby/scooby] (from client localhost port 10)
>
> So, looks like it has all that info about how to login to your MySQL
> server and what queries to use, but you never told it to actually use it.
>
> Hint: look at the authorize section towards the bottom of your
> radius.conf.  There should be a line like:
>
> # sql
>
> Uncomment it.
>
> --
> Dennis Skinner
> Systems Administrator
> BlueFrog Internet
> http://www.bluefrog.com
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>



--
Jonathan Carpenter
Linux System Administrator
Windows System Administrator
<The Unix Geek>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20060110/1fed1839/attachment.html>


More information about the Freeradius-Users mailing list