Freeradius doesn't detect EAP when authenticating against MySQL
Andrew Rowson
freeradius at growse.com
Sun Sep 16 23:08:22 CEST 2007
tnt at kalik.co.yu wrote:
> Comment it out anyway. You are setting Auth-Type Local in SQL database
> then. If not in radcheck then in radgroupcheck.
>
> Ivan Kalik
> Kalik Informatika ISP
I feel really stupid now. It was sitting there in radgroupcheck setting
the auth-type to local.
ARGH.
Ok, regroup. The new output is in the same place as before
(http://public.growse.com/radiusd.log) - it sets the auth-type to EAP
and seems to issue the attributes (my cisco priv ones are there) ok. My
laptop still doesn't get an IP address, but this may now be an issue
with the AP.
Can I safely now say that freeradius is behaving correctly and the issue
is now with the AP, or does the above output still point to a freeradius
issue?
Thanks for everyone's help so far.
Andrew
>
> Dana 16/9/2007, "Andrew Rowson" <freeradius at growse.com> piše:
>
>>>> Ok, I've upgraded to 1.1.7, and I get the auth-type local issue again.
>>>> The log is up at the same place as before,
>>>> http://public.growse.com/radiusd.log
>>>>
>>>> I'm at a bit of a loss. I can't be the only person who wants to put user
>>>> credentials for a PEAP setup into a mysql db?
>>>>
>>> modcall[authorize]: module "sql" returns ok for request 0
>>> users: Matched entry DEFAULT at line 155
>>> modcall[authorize]: module "files" returns ok for request 0
>>> modcall: leaving group authorize (returns updated) for request 0
>>> rad_check_password: Found Auth-Type Local
>>> auth: type Local
>>> auth: No User-Password or CHAP-Password attribute in the request]
>>>
>>> Remove whatever is on line 155 of the "users" file; it is setting
>>> Auth-Type (almost always a bad idea) to "Local" so FreeRadius thinks it
>>> should check the password; which it shouldn't, since this is an EAP
>>> conversation.
>> I had the following on line 155, which when commented out, seems to make
>> no difference.
>>
>> DEFAULT Auth-Type = System
>> Fall-Through = 1
>>
>>
>> Andrew
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>>
>>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
More information about the Freeradius-Users
mailing list