Issue when login name and password configured in UTF-8 format

Elayaraja Prabhakaran Elayaraja.Prabhakaran at aricent.com
Mon Dec 22 16:15:55 CET 2008


Dear freeradius-users list members,

I am testing on freeradius server with X-Supplicant and PostgreSQL. The client_encoding in DB is set to UTF-8 by default.

When configuring login name and password in english text, authentication is successfully completed. However, when i use UTF-8 characters as login name, freeradius server is dropping the packets and the error message i found in server is login name is incorrect. But the loginname configured in xsupplicant and freeradius are same (UTF-8 format). I guess the FreeRadius does not support UTF-8 chars and hence, passes some junk (letters converted into DECIMAL with "=" prefix).

Below is the log of Freeradius when run in DEBUG mode.

**********************************************************************************************
Mon Dec 22 19:46:38 2008 : Debug:   modsingle[authorize]: calling sql (rlm_sql) for request 19
Mon Dec 22 19:46:38 2008 : Debug:   expand: %{User-Name} -> ã??ã?¹ã??ã??èµ·ã??ã?£ã?¦ã??ã??
Mon Dec 22 19:46:38 2008 : Debug: rlm_sql (sql): sql_set_user escaped user --> 'ã??ã?¹ã??ã??èµ·ã??ã?£ã?¦ã??ã??'
Mon Dec 22 19:46:38 2008 : Debug: rlm_sql (sql): Reserving sql socket id: 0
Mon Dec 22 19:46:38 2008 : Debug:   expand: SELECT id, UserName, Attribute, Value, Op       FROM radcheck       WHERE Username = '%{SQL-User-Name}'         ORDER BY id -> SELECT id, UserName, Attribute, Value, Op        FROM radcheck       WHERE Username = '=EF=BB=BF=E3=83=86=E3=82=B9=E3=83=88=E3=81=8C=E8=B5=B7=E3=81=93=E3=81=A3=E3=81=A6=E3=81=84=E3=82=8B'      ORDER BY id
Mon Dec 22 19:46:38 2008 : Debug: rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op      FROM radcheck       WHERE Username = '=EF=BB=BF=E3=83=86=E3=82=B9=E3=83=88=E3=81=8C=E8=B5=B7=E3=81=93=E3=81=A3=E3=81=A6=E3=81=84=E3=82=8B'      ORDER BY id
Mon Dec 22 19:46:38 2008 : Debug: rlm_sql_postgresql: Status: PGRES_TUPLES_OK
Mon Dec 22 19:46:38 2008 : Debug: rlm_sql_postgresql: query affected rows = 0 , fields = 5
Mon Dec 22 19:46:38 2008 : Debug:   expand: SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}' -> SELECT GroupName FROM usergroup WHERE UserName='=EF=BB=BF=E3=83=86=E3=82=B9=E3=83=88=E3=81=8C=E8=B5=B7=E3=81=93=E3=81=A3=E3=81=A6=E3=81=84=E3=82=8B'
Mon Dec 22 19:46:38 2008 : Debug: rlm_sql_postgresql: query: SELECT GroupName FROM usergroup WHERE UserName='=EF=BB=BF=E3=83=86=E3=82=B9=E3=83=88=E3=81=8C=E8=B5=B7=E3=81=93=E3=81=A3=E3=81=A6=E3=81=84=E3=82=8B'
Mon Dec 22 19:46:38 2008 : Debug: rlm_sql_postgresql: Status: PGRES_TUPLES_OK
Mon Dec 22 19:46:38 2008 : Debug: rlm_sql_postgresql: query affected rows = 0 , fields = 1
Mon Dec 22 19:46:38 2008 : Debug: rlm_sql (sql): Released sql socket id: 0
Mon Dec 22 19:46:38 2008 : Debug: rlm_sql (sql): User ã??ã?¹ã??ã??èµ·ã??ã?£ã?¦ã??ã?? not found
Mon Dec 22 19:46:38 2008 : Debug:   modsingle[authorize]: returned from sql (rlm_sql) for request 19
Mon Dec 22 19:46:38 2008 : Debug: ++[sql] returns notfound
**********************************************************************************************

Is there any way to achieve UTF-8 support only with postgresql queries (some kind of conversion to binary and then can be compared with radcheck and radreply) or is there any tweak with Freeradius?

Regards
Elayaraja P

________________________________
"DISCLAIMER: This message is proprietary to Aricent and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error,please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Aricent accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20081222/dd622e34/attachment.html>


More information about the Freeradius-Users mailing list