sql_postauth does not exec on failed logins

Duane Cox duanec at mail.illicom.net
Fri Mar 31 23:50:18 CEST 2006


List, Hello:

I've got the sql postauth working for Valid Logins, but rlm_sql does not
even call sql_postauth if the login fails.

Is this by design, or do I have a configuration error?


PROCESSES SQL_POSTAUTH:
Login OK: [intermapper] (from client intermapper port 0)
  Processing the post-auth section of radiusd.conf
modcall: entering group post-auth for request 14
rlm_sql (sql): Processing sql_postauth
radius_xlat:  'intermapper'
rlm_sql (sql): sql_set_user escaped user --> 'intermapper'
radius_xlat:  'insert into radauth (UserName, Password, RadReply,
NASIPAddress, NASIdentifier, NASPort, CalledStationId, CallingStationId)
values ('intermapper', 'password', 'Access-Accept', '10.15.1.15', '', '',
'', '')'
rlm_sql (sql) in sql_postauth: query is insert into radauth (UserName,
Password, RadReply, NASIPAddress, NASIdentifier, NASPort, CalledStationId,
CallingStationId) values ('intermapper', 'password', 'Access-Accept',
'10.15.1.15', '', '', '', '')
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql (sql): Released sql socket id: 4


DOESNT PROCESS SQL_POSTAUTH:
rlm_sql (sql): sql_set_user escaped user --> '00111AE0D100'
radius_xlat:  'select id, username, attribute, value, op from radcheck where
username = '00111AE0D100' order by id'
rlm_sql (sql): Reserving sql socket id: 0
rlm_sql (sql): User 00111AE0D100 not found in radcheck
radius_xlat:  ''
radius_xlat:  'select radgroupreply.id, radgroupreply.groupname,
radgroupreply.attribute, radgroupreply.value, radgroupreply.op from
radgroupreply, usergroup where usergroup.username = '00111AE0D100' and
usergroup.groupname = radgroupreply.groupname order by radgroupreply.id'
rlm_sql (sql): Released sql socket id: 0
  modcall[authorize]: module "sql" returns ok for request 6
  modcall[authorize]: module "files" returns notfound for request 6
modcall: leaving group authorize (returns ok) for request 6
auth: No authenticate method (Auth-Type) configuration found for the
request: Rejecting the user
auth: Failed to validate the user.
Login incorrect: [00111AE0D100/12810341630068900201] (from client ubr7223
port 60000)
Sending Access-Reject of id 222 to 63.252.228.2 port 21745
Finished request 6
Going to the next request
--- Walking the entire request list ---
Waking up in 5 seconds...




More information about the Freeradius-Users mailing list