Freeradius doesn't detect EAP when authenticating against MySQL

[tnt at kalik.co.yu]

Well, AP is not responding. Request is for wireless access and attributes
in the reply are for shell access. It might not like that.

Ivan Kalik
Kalik Informatika ISP


Dana 16/9/2007, "Andrew Rowson" <freeradius at growse.com> piše:

>
>
>tnt at kalik.co.yu wrote:
>> Comment it out anyway.  You are setting Auth-Type Local in SQL database
>> then. If not in radcheck then in radgroupcheck.
>> 
>> Ivan Kalik
>> Kalik Informatika ISP
>
>I feel really stupid now. It was sitting there in radgroupcheck setting 
>the auth-type to local.
>
>ARGH.
>
>Ok, regroup. The new output is in the same place as before 
>(http://public.growse.com/radiusd.log) - it sets the auth-type to EAP 
>and seems to issue the attributes (my cisco priv ones are there) ok. My 
>laptop still doesn't get an IP address, but this may now be an issue 
>with the AP.
>
>Can I safely now say that freeradius is behaving correctly and the issue 
>is now with the AP, or does the above output still point to a freeradius 
>issue?
>
>Thanks for everyone's help so far.
>
>Andrew
>
>> 
>> Dana 16/9/2007, "Andrew Rowson" <freeradius at growse.com> piše:
>> 
>>>>> Ok, I've upgraded to 1.1.7, and I get the auth-type local issue again.
>>>>> The log is up at the same place as before,
>>>>> http://public.growse.com/radiusd.log
>>>>>
>>>>> I'm at a bit of a loss. I can't be the only person who wants to put user
>>>>> credentials for a PEAP setup into a mysql db?
>>>>>
>>>> modcall[authorize]: module "sql" returns ok for request 0
>>>>     users: Matched entry DEFAULT at line 155
>>>>   modcall[authorize]: module "files" returns ok for request 0
>>>> modcall: leaving group authorize (returns updated) for request 0
>>>>   rad_check_password:  Found Auth-Type Local
>>>> auth: type Local
>>>> auth: No User-Password or CHAP-Password attribute in the request]
>>>>
>>>> Remove whatever is on line 155 of the "users" file; it is setting
>>>> Auth-Type (almost always a bad idea) to "Local" so FreeRadius thinks it
>>>> should check the password; which it shouldn't, since this is an EAP
>>>> conversation.
>>> I had the following on line 155, which when commented out, seems to make
>>> no difference.
>>>
>>> DEFAULT        Auth-Type = System
>>>        Fall-Through = 1
>>>
>>>
>>> Andrew
>>> -
>>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
>>>
>>>
>> 
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>