always received Access-Reject using mysql

Bogi Aditya bogi at imtelkom.ac.id
Mon Nov 28 02:29:06 CET 2011


thanks Alan

I found the problem was in the "attribute" field
where I put "Cleartext-Password" based on the wiki :
http://wiki.freeradius.org/SQL-HOWTO

after I changed the value to just "password"
it works fine now.

note:
I put "==" in "op" field because that was the default value
mysql> desc radcheck;
+-----------+------------------+------+-----+---------+----------------+
| Field     | Type             | Null | Key | Default | Extra          |
+-----------+------------------+------+-----+---------+----------------+
| id        | int(11) unsigned | NO   | PRI | NULL    | auto_increment |
| username  | varchar(64)      | NO   | MUL |         |                |
| attribute | varchar(64)      | NO   |     |         |                |
| op        | char(2)          | NO   |     | ==      |                |
| value     | varchar(253)     | NO   |     |         |                |
+-----------+------------------+------+-----+---------+----------------+

just like the radgroupreply, where the default value is "="
mysql> desc radgroupreply;
+-----------+------------------+------+-----+---------+----------------+
| Field     | Type             | Null | Key | Default | Extra          |
+-----------+------------------+------+-----+---------+----------------+
| id        | int(11) unsigned | NO   | PRI | NULL    | auto_increment |
| groupname | varchar(64)      | NO   | MUL |         |                |
| attribute | varchar(64)      | NO   |     |         |                |
| op        | char(2)          | NO   |     | =       |                |
| value     | varchar(253)     | NO   |     |         |                |
+-----------+------------------+------+-----+---------+----------------+

thanks again Alan.

On Sun, 27 Nov 2011 16:26:13 +0000, Alan Buxey wrote
> Hi,
> 
> > after I complete the installation, I tried to test it :
> > # radtest usertest passtest localhost:1812 0 testing123
> > Sending Access-Request of id 180 to 127.0.0.1 port 1812
> >         User-Name = "usertest"
> >         User-Password = "passtest"
> >         NAS-IP-Address = 10.1.1.28
> >         NAS-Port = 0
> > rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=180, 
> > length=20
> 
> dont really care about this - the 'radiusd -X' output is what is needed
> for this list.
> 
> > +----+----------+--------------------+----+----------+
> > | id | username | attribute          | op | value    |
> > +----+----------+--------------------+----+----------+
> > |  1 | usertest | Cleartext-Password | == | passtest |
> > +----+----------+--------------------+----+----------+
> 
> wrong 'op' value.  change that to   :=     rather than   ==
> 
> alan


-------------------------------
Bogi Aditya
Sisfo - IMTelkom
Telkom Institute of Management
http://bogi.blog.imtelkom.ac.id




More information about the Freeradius-Users mailing list