freeradius failed to authenticate the users against windos active directory

[Edward Xie]

Hello,

Thanks for your answer. However I don't want to use Mysql database to authenticate the user. That's why Mysql database was not turned on with Freeradius.  I just want to use Microsoft Active Directory to authenticate the user. However from the log,  I don't see the radius server ever tried querying AD server.  That is the issue which I want to figure out. 

Regards,

Edward Xie

-----Original Message-----
From: freeradius-users-bounces+edward.xie=guest-tek.com at lists.freeradius.org [mailto:freeradius-users-bounces+edward.xie=guest-tek.com at lists.freeradius.org] On Behalf Of Alan DeKok
Sent: February-25-14 4:31 PM
To: FreeRadius users mailing list
Subject: Re: freeradius failed to authenticate the users against windos active directory

Edward Xie wrote:
> Could you kindly to help me figure out why the freeradius server can’t 
> work with windows AD? Thanks so much in advance.

  It has nothing to do with AD.  Read the debug log.  Honestly, this isn't hard:

[sql]   expand: %{User-Name} -> host/NetEng-D410.NE.LOCAL
[sql] sql_set_user escaped user --> 'host/NetEng-D410.NE.LOCAL'
rlm_sql (sql): Ignoring unconnected handle 4..
rlm_sql (sql): Ignoring unconnected handle 3..
rlm_sql (sql): Ignoring unconnected handle 2..
rlm_sql (sql): Ignoring unconnected handle 1..
rlm_sql (sql): Ignoring unconnected handle 0..
rlm_sql (sql): There are no DB handles to use! skipped 5, tried to connect 0
++[sql] returns fail
Invalid user: [host/NetEng-D410.NE.LOCAL/<via Auth-Type = EAP>] (from client 0.0.0.0/0 port 3 cli 00-14-22-fd-dd-98)

  Your SQL server is down.  Fix it.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html