Why my schema is not working?

Dmitry A. Sysoev snaut at snaut.ru
Fri Apr 4 11:29:26 CEST 2008


Good afternoon!
After upgrade 1.1.7 to 2.0.3+ freeradius
 
I have noticed, that that is brought in the table
has ceased to be processed
 
Select * from radgroupcheck where groupname='blackholed';
 
1 181 blackholed Auth-Type := Reject
2 182 blackholed Fall-Through = No
 
select * from usergroup where clid='250092020001115' and
groupname='blackholed';
1 17651  250092020001115 blackholed 10
 
radiusd -X:
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1 port 23903, id=228,
length=69
        User-Name = "mobile"
        User-Password = "internet"
        Calling-Station-Id = "250092020001115"
        NAS-IP-Address = 83.217.24.21
+- entering group authorize
        expand: simbirsk -> simbirsk
SIMBIRSK-ULN: Does not match: User-Name = mobile
++[SIMBIRSK-ULN] returns ok
        expand: uuuuuuuuuu -> uuuuuuuuuu
UUU: Does not match: User-Name = mobile
++[UUU] returns ok
        expand: %{Calling-Station-Id} -> 250092020001115
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
    rlm_realm: No '@' in User-Name = "mobile", looking up realm NULL
    rlm_realm: Found realm "NULL"
    rlm_realm: Proxying request from user mobile to realm NULL
    rlm_realm: Adding Realm = "NULL"
    rlm_realm: Authentication realm is LOCAL.
++[suffix] returns noop
    users: Matched entry DEFAULT at line 10
++[files] returns ok
        expand: %{User-Name} -> mobile
rlm_sql (sqlauth): sql_set_user escaped user --> 'mobile'
rlm_sql (sqlauth): Reserving sql socket id: 4
        expand: SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE
Username = '%{SQL-User-Name}' ORDER BY id -> SELECT
id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'mobile' ORDER
BY id
rlm_sql (sqlauth): User found in radcheck table
        expand: SELECT id,UserName,Attribute,Value,op FROM radreply WHERE
Username = '%{SQL-User-Name}' ORDER BY id -> SELECT
id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'mobile' ORDER
BY id
        expand: SELECT GroupName FROM usergroup WHERE
UserName='%{SQL-User-Name}' OR CLID='%{Calling-Station-Id}' order by
priority -> SELECT GroupName FROM usergroup WHERE UserName='mobile' OR
CLID='250092020001115' order by priority
        expand: SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche
ck.Value,radgroupcheck.op  FROM radgroupcheck,usergroup WHERE
(usergroup.Username = '%{SQL-User-Name}' or usergroup.CLID =
'%{Calling-Station-Id}') AND usergroup.GroupName = radgroupcheck.GroupName
ORDER BY usergroup.PRIORITY,radgroupcheck.id -> SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche
ck.Value,radgroupcheck.op  FROM radgroupcheck,usergroup WHERE
(usergroup.Username = 'mobile' or usergroup.CLID = '250092020001115') AND
usergroup.GroupName = radgroupcheck.GroupName ORDER BY
usergroup.PRIORITY,radgroupcheck.id
rlm_sql (sqlauth): User found in group mppc
        expand: SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep
ly.Value,radgroupreply.op  FROM radgroupreply,usergroup WHERE
(usergroup.Username = '%{SQL-User-Name}' OR usergroup.CLID =
'%{Calling-Station-Id}') AND usergroup.GroupName = radgroupreply.GroupName
ORDER BY radgroupreply.id -> SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep
ly.Value,radgroupreply.op  FROM radgroupreply,usergroup WHERE
(usergroup.Username = 'mobile' OR usergroup.CLID = '250092020001115') AND
usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id
rlm_sql (sqlauth): Released sql socket id: 4
++[sqlauth] returns ok
  rad_check_password:  Found Auth-Type Accept
  rad_check_password: Auth-Type = Accept, accepting the user
Login OK: [mobile/internet] (from client localhost port 0 cli
250092020001115)
Sending Access-Accept of id 228 to 127.0.0.1 port 23903
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Framed-Compression = Stac-LZS
        Framed-Compression += Van-Jacobson-TCP-IP
        Filter-Id = "fw-simbirsk.out"
Finished request 0.
Going to the next request
Waking up in 4.9 seconds.
Cleaning up request 0 ID 228 with timestamp +2
Ready to process requests.
 
Why radius say that Found Auth-Type Accept when Auth-Type := Reject?
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080404/14584521/attachment.html>


More information about the Freeradius-Users mailing list