Digest using an external database for the Password

Mike Brennan mbrennan at thrupoint.com
Thu Apr 25 17:53:07 CEST 2013

Hi Alan

Did as you suggested - the error has gone
I did put in the correct text in the sql statement (just did not want  to
rewrite in e-mail) and it was not this that was failing.
The error was because I overwrote in the sql.conf file the radius_db with
my database name - I commented out this and the error disappeared.

Thx for your help


-----Original Message-----
From: freeradius-users-bounces+mbrennan=thrupoint.com at lists.freeradius.org
[mailto:freeradius-users-bounces+mbrennan=thrupoint.com at lists.freeradius.o
rg] On Behalf Of Alan DeKok
Sent: 25 April 2013 16:20
To: FreeRadius users mailing list
Subject: Re: Digest using an external database for the Password

Mike Brennan wrote:
> Hi Alan
> Thx for your input I did the following:
> In radiusd.conf file, within the instantiate section the following was
> added:
> sql
> authorize {
> 	...
> 	update control {
> 		Cleartext-Password := "%{sql: SELECT password FROM fusion
> 	}
> 	...
> }

  That is *not* what I said to do.  Some amount of independent thought is

  List "sql" in the "instantiate" section.  DON'T put the rest of the text

  DO edit the "inner-tunnel" file.  Look for the "authorize" section.
The text above shows an EXAMPLE of what you put in the "authorize"
section.  That's why it uses the word "authorize"

  DON'T put the "..." text in the config files.  That was meant to show
that OTHER text was also in the "authorize" section.

  DON'T put the "..." text in the SQL query.  That was meant to show the
REST of the SQL query

  DO think about what you're doing.

  DO put the ENTIRE sql SELECT statement into the example text I showed

> In the inner-tunnel file I commented out the sql in the authorize
> It seemed to work - see attached small snippet from my debug. In the
> attached file there is still a rlm_sql_mysql: MYSQL check_error: 1146
> received message I have missed something else?


  That error is a MySQL error.  You've mis-typed the query.  Go read MySQL
documentation to see how to create a correct query.

  Alan DeKok.
List info/subscribe/unsubscribe? See
Note: The information contained in this message may be privileged and confidential 
and protected from disclosure. If the reader of this message is not the intended 
recipient, or an employee or agent responsible for delivering this message to the 
intended recipient, you are hereby notified that any dissemination, distribution or 
copying of this communication is strictly prohibited. If you have received this 
communication in error, please notify us immediately by replying to the message and 
deleting it from your computer. Thank you. Thrupoint, Inc.

More information about the Freeradius-Users mailing list