Freeradius 3 sql not working with nas entries in nas table

Sat Dec 2 13:51:47 CET 2017

Hi Alan,

i think i’m one step further:

rlm_sql (sql): Adding client 192.168.35.158 (192.168.35.158) to default clients list
rlm_sql (192.168.35.158): Client "192.168.35.158" (sql) added

now i know where to put the virtual server….  i think i need more sleep ;)

but I still get:
Ignoring request to auth address * port 1812 bound to server default from unknown client 192.168.35.158 port 44987 proto udp

any other sugestion?

TIA
.h

> Am 02.12.2017 um 13:42 schrieb .h <h at alf.world>:
> 
> Hi Alan,
> 
> I tried it with another client, no luck.
> 
> I always get:
> rlm_sql (sql): Adding client 192.168.35.158 (debian9) to 192.168.35.158 clients list
> Failed to find virtual server 192.168.35.158
> 
> why is it looking for a virtual server?
> i want to have a client.
> 
> TIA
> .h
> 
>> Am 02.12.2017 um 12:52 schrieb .h <h at alf.world <mailto:h at alf.world>>:
>> 
>> Hi Alan,
>> 
>> maybe i asked the wrong question or I’m totally confused.
>> 
>> I have a default freeeradius 3 installation on debian 9.
>> 
>> I have a virtual server default definition in the default site, configuration is unchanged.
>> 
>> in clients.conf i have the default definition for the client localhost:
>> 
>> client localhost {
>>       ipaddr = 127.0.0.1
>>       proto = *
>>       secret = testing123
>>       require_message_authenticator = no
>>       nas_type         = other        # localhost isn't usually a NAS...
>>       limit {
>>               max_connections = 16
>>               lifetime = 0
>>               idle_timeout = 30
>>       }
>> }
>> 
>> I want to move the client settings for locahost to the nas table and don't want to have it in the clients.conf.
>> 
>> nas table:
>> +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+
>> | id | nasname   | shortname | type  | ports | secret     | server    | community | description             |
>> +----+-----------+-----------+-------+-------+------------+-----------+-----------+-------------------------+
>> |  1 | 127.0.0.1 | localhost | other |  NULL | testing123 | localhost | NULL      | localhost RADIUS Client |
>> +----+-----------+-----------+-------+-------+------------+-----------+-----------+————————————+
>> 
>> what did i do wrong?
>> is there anything special with the entry for localhost?
>> 
>> TIA
>> .h
>> 
>>> Am 01.12.2017 um 09:29 schrieb Alan Buxey [via FreeRADIUS] <ml+s1045715n5748219h16 at n5.nabble.com <mailto:ml+s1045715n5748219h16 at n5.nabble.com>>:
>>> 
>>> Server is the default virtual server to use. Eg default in a basic install. 
>>> Do you have a virtual server named localhost ?? 
>>> 
>>> alan 
>>> 
>>> On 1 Dec 2017 4:24 am, ".h" <[hidden email] <x-msg://23/user/SendEmail.jtp?type=node&node=5748219&i=0>> wrote: 
>>> 
>>> > Hi Alan, 
>>> > 
>>> > no worries, I know what a NAS is. 
>>> > I’m using freeradius for quite a while, but not the sql version. 
>>> > 
>>> > I was able to transfer every setting to sql except the clients.conf. 
>>> > 
>>> > in the former config adding a new client was simple by adding a section to 
>>> > clients.conf, i.e.: 
>>> > 
>>> > client client_xyz { 
>>> >       ipaddr          = 10.0.0.1 
>>> >       secret          = secret 
>>> > } 
>>> > 
>>> > Now adding a line into the nas table is not giving me the same result. 
>>> > +----+-----------+-----------+-------+-------+------------+- 
>>> > ----------+-----------+-------------------------+ 
>>> > | id | nasname   | shortname | type  | ports | secret     | server    | 
>>> > community | description             | 
>>> > +----+-----------+-----------+-------+-------+------------+- 
>>> > ----------+-----------+-------------------------+ 
>>> > |  1 | 127.0.0.1 | localhost | other |  NULL | testing123 | localhost | 
>>> > NULL      | localhost RADIUS Client | 
>>> > +----+-----------+-----------+-------+-------+------------+- 
>>> > ----------+-----------+-------------------------+ 
>>> > 
>>> > This is whats unclear to me. 
>>> > 
>>> > what is the easiest way to transfer all clients from .conf to sql? 
>>> > 
>>> > TIA 
>>> > .h 
>>> > 
>>> > > Am 30.11.2017 um 20:59 schrieb Alan DeKok-2 [via FreeRADIUS] < 
>>> > [hidden email] <x-msg://23/user/SendEmail.jtp?type=node&node=5748219&i=1>>: 
>>> > > 
>>> > > On Nov 30, 2017, at 2:52 PM, .h <[hidden email] 
>>> > <x-msg://5/user/SendEmail.jtp?type=node&node=5748215&i=0 <x-msg://5/user/SendEmail.jtp?type=node&node=5748215&i=0>>> wrote: 
>>> > > > 
>>> > > > is there any documentation on this section? 
>>> > > 
>>> > >   On what section? 
>>> > > 
>>> > >   The queries.conf file describes what each column should contain. 
>>> > > 
>>> > > > do i have to add a virtual server for every nas that will be used? 
>>> > > 
>>> > >   You need to populate each column in the row. 
>>> > > 
>>> > >   Multiple rows can use "default" for the virtual server column... which 
>>> > then tells it to use the "default" virtual server. 
>>> > > 
>>> > >   The "nas" table in SQL defines a NAS.  With IP address, shared secret, 
>>> > and virtual server. 
>>> > > 
>>> > > 
>>> > >   I *did* point you to documentation.  Did you read it?  Because the 
>>> > question here makes it look like you don't know what a virtual server is, 
>>> > or what a NAS is, or what the purpose of each column is. 
>>> > > 
>>> > >   Alan DeKok. 
>>> > > 
>>> > > 
>>> > > - 
>>> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ <http://www.freeradius.org/>
>>> > list/users.html <http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>> 
>>> > > 
>>> > > If you reply to this email, your message will be added to the discussion 
>>> > below: 
>>> > > http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql- <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql->
>>> > not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html < 
>>> > http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql- <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql->
>>> > not-working-with-nas-entries-in-nas-table-tp5748186p5748215.html> 
>>> > > To unsubscribe from FreeRADIUS, click here < 
>>> > http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro= <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=>
>>> > unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMD 
>>> > IzMzk2NTk3>. 
>>> > > NAML <http://freeradius.1045715.n5.nabble.com/template/ <http://freeradius.1045715.n5.nabble.com/template/>
>>> > NamlServlet.jtp?macro=macro_viewer&id=instant_html% 
>>> > 21nabble%3Aemail.naml&base=nabble.naml.namespaces. 
>>> > BasicNamespace-nabble.view.web.template.NabbleNamespace- 
>>> > nabble.view.web.template.NodeNamespace&breadcrumbs= 
>>> > notify_subscribers%21nabble%3Aemail.naml-instant_emails% 
>>> > 21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml> 
>>> > - 
>>> > List info/subscribe/unsubscribe? See http://www.freeradius.org/ <http://www.freeradius.org/>
>>> > list/users.html
>>> - 
>>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html> 
>>> 
>>> If you reply to this email, your message will be added to the discussion below:
>>> http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748219.html <http://freeradius.1045715.n5.nabble.com/Freeradius-3-sql-not-working-with-nas-entries-in-nas-table-tp5748186p5748219.html>
>>> To unsubscribe from FreeRADIUS, click here <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=2740692&code=aEBhbGYud29ybGR8Mjc0MDY5MnwxMDIzMzk2NTk3>.
>>> NAML <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
> 