Attributes Bandwidth in radgrouprepy table

"Belén Colmenar (Grupo GOWEX)" bcolmenar at gowex.com
Mon Dec 22 17:18:42 CET 2008



tnt at kalik.net escribió:
>> I'm coming back with this problem.
>>
>> When I change "User-Password" for "Cleartext-Password", my NAS can't 
>> connect with the Radius because NAS is sendig in CHAP mode
>>
>>     
>
> That makes no sense. Cleartext-Password works with every authentication
> method. Encrypted ones don't.
>   
I don't know why didn't work but in the next times yes. Now I have put 
Cleartext-Password.
>   
>> [chap] login attempt by "belen at host.com" with CHAP password
>> [chap] Using clear text password "pass" for user belen at host.com 
>> authentication.
>> [chap] Password check failed
>>     
> ..
>   
>> When I set "User-Password" in the data base, again, I can connect but 
>> with the "mistake":
>>
>> Found Auth-Type = CHAP
>> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
>> !!!    Replacing User-Password in config items with 
>> Cleartext-Password.     !!!
>> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
>> !!! Please update your configuration so that the "known 
>> good"               !!!
>> !!! clear text password is in Cleartext-Password, and not in 
>> User-Password. !!!
>> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
>> +- entering group CHAP {...}
>> [chap] login attempt by "belen at host.com" with CHAP password
>> [chap] Using clear text password "pass" for user belen at hostcom 
>> authentication.
>> [chap] chap user belen at seasuntel.com authenticated succesfully
>>     
>
> You have doctored the username (at least) in second output so there is no
> way to see is it the same user and password. It is critical that you
> provide debug with usernames and passwords. Use temporary test users,
> not real ones. Also it woud help if both debugs were complete. If you
> don't trust the list ...
>
>   
Yes, both usernames are the same and I guess I haven't show all the 
debug by space and long where important data is shown
>> It is really wrong????
>>
>>     
>
> Can't say when you have altered the debug.
>
>   
>> Besides, this could be affecting to my SQL query in radgroupreply?
>>
>>     
>
> No. Have you made changes to sql.conf apart from connection details?
> Groups are read as default.
>   
Yes, I've changed SQL queries in dialup.conf and now are like that:

    authorize_group_reply_query = "SELECT ${groupreply_table}.id, 
${groupreply_table}.GroupName,${groupreply_table}.Attribute, 
${groupreply_table}.Value,${groupreply_table}.op FROM 
${groupreply_table},${usergroup_table} WHERE ${usergroup_table}.Username 
= '%{SQL-User-Name}' AND ${usergroup_table}.GroupName = 
${groupreply_table}.GroupName ORDER BY ${groupreply_table}.id"

    authorize_group_check_query = "SELECT 
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op  
FROM radgroupcheck,usergroup WHERE usergroup.Username = 
'%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName 
ORDER BY radgroupcheck.id"




More information about the Freeradius-Users mailing list