AAA Services with multiple SQL

[tnt at kalik.co.yu]

There is an entry in users file setting Auth-Type System. Comment it out.

Ivan Kalik
Kalik Informatika ISP


Dana 19/11/2007, "Paolo Serafino Via" <paolo.via at halservice.it> piše:

>
>my authorize section has "files" entry too...sorry for this lack....
>
>ok i've used freeradius -X   it seems to give me other info...but still
>problems to understand:
>why gives me an error on processing password using Auth-Type := System,
>i'have no entry with that!
>
>here is the flow for this request:
>
>rad_recv: Access-Request packet from host 192.168.1.159:1026, id=2,
>length=208
>        NAS-Port-Type = Wireless-802.11
>        Calling-Station-Id = "00:15:00:4A:1E:DB"
>        Called-Station-Id = "hotspot1"
>        NAS-Port-Id = "wlan1"
>        User-Name = "paolo"
>        NAS-Port = 2159017987
>        Acct-Session-Id = "80b00003"
>        Framed-IP-Address = 172.20.20.126
>        Mikrotik-Attr-10 = 0xac14147e
>        CHAP-Challenge = 0x693b0be4addb3334aa2f339ffdf81223
>        CHAP-Password = 0x5d5b150a3b83260c74b7a73469f21de54f
>        Service-Type = Login-User
>        WISPr-Logoff-URL = "http://172.20.20.1/logout"
>        NAS-Identifier = "HOTTEST"
>        NAS-IP-Address = 192.168.1.159
>        Mikrotik-Realm = "novara"
>  Processing the authorize section of radiusd.conf
>modcall: entering group authorize for request 2
>  modcall[authorize]: module "preprocess" returns ok for request 2
>    rlm_realm: No '@' in User-Name = "paolo", looking up realm NULL
>    rlm_realm: No such realm "NULL"
>  modcall[authorize]: module "suffix" returns noop for request 2
>  rlm_eap: No EAP-Message, not doing EAP
>  modcall[authorize]: module "eap" returns noop for request 2
>    users: Matched entry DEFAULT at line 152
>    users: Matched entry DEFAULT at line 202
>  modcall[authorize]: module "files" returns ok for request 2
>modcall: leaving group authorize (returns ok) for request 2
>  Found Autz-Type no
>  Processing the authorize section of radiusd.conf
>modcall: entering group no for request 2
>radius_xlat:  'paolo'
>rlm_sql (no): sql_set_user escaped user --> 'paolo'
>radius_xlat:  'SELECT id, UserName, Attribute, Value, op           FROM
>radcheck           WHERE Username = 'paolo'           ORDER BY id'
>rlm_sql (no): Reserving sql socket id: 1
>rlm_sql_mysql: query:  SELECT id, UserName, Attribute, Value, op
>FROM radcheck           WHERE Username = 'paolo'           ORDER BY id
>radius_xlat:  'SELECT
>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
>FROM radgroupcheck,usergroup WHERE usergroup.Username = 'paolo' AND
>usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
>rlm_sql_mysql: query:  SELECT
>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
>FROM radgroupcheck,usergroup WHERE usergroup.Username = 'paolo' AND
>usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id
>radius_xlat:  'SELECT id, UserName, Attribute, Value, op           FROM
>radreply           WHERE Username = 'paolo'           ORDER BY id'
>rlm_sql_mysql: query:  SELECT id, UserName, Attribute, Value, op
>FROM radreply           WHERE Username = 'paolo'           ORDER BY id
>radius_xlat:  'SELECT
>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
>FROM radgroupreply,usergroup WHERE usergroup.Username = 'paolo' AND
>usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
>rlm_sql_mysql: query:  SELECT
>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
>FROM radgroupreply,usergroup WHERE usergroup.Username = 'paolo' AND
>usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id
>rlm_sql (no): Released sql socket id: 1
>  modcall[authorize]: module "no" returns ok for request 2
>modcall: leaving group no (returns ok) for request 2
>  rad_check_password:  Found Auth-Type System
>auth: type "System"
>  ERROR: Unknown value specified for Auth-Type.  Cannot perform requested
>action.
>auth: Failed to validate the user.
>Login incorrect: [paolo] (from client HOTTEST port 2159017987 cli
>00:15:00:4A:1E:DB)
>Delaying request 2 for 1 seconds
>Finished request 2
>Going to the next request
>--- Walking the entire request list ---
>Waking up in 1 seconds...
>rad_recv: Access-Request packet from host 192.168.1.159:1026, id=2,
>length=208
>Sending Access-Reject of id 2 to 192.168.1.159 port 1026
>--- Walking the entire request list ---
>Waking up in 5 seconds...
>--- Walking the entire request list ---
>Cleaning up request 2 ID 2 with timestamp 47418827
>Nothing to do.  Sleeping until we see a request.
>
>--
>View this message in context: http://www.nabble.com/AAA-Services-with-multiple-SQL-tf4835226.html#a13835831
>Sent from the FreeRadius - User mailing list archive at Nabble.com.
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>