Config FreeRadius (3.0.16) to work with SQL: The Guide is outdated - please helps
Alan DeKok
aland at deployingradius.com
Fri Sep 28 20:27:41 CEST 2018
On Sep 28, 2018, at 2:12 PM, James Ngo <james.ngobui at gmail.com> wrote:
>
> Hi Alan,
> You are absolutely right about the log file and I am sorry to be bothering
> you again. I copy the content of my system log file of the issue below for
> your reference (My other test user which use the "user" file works OK).
...
> (7) eap_peap: Got tunneled request
> (7) eap_peap: EAP-Message =
> 0x022300411a0223003c31cc0432c71245051a187bd13655a9e34a0000000000000000721615e15d5ae620467f9822441958a6f7be55128b39b716006a616d65736e
> (7) eap_peap: Setting User-Name to jamesn
> (7) eap_peap: Sending tunneled request to inner-tunnel
That's the MS-CHAP stuff from PEAP, inside of the TLS tunnel.
> (7) sql: EXPAND %{User-Name}
> (7) sql: --> testuser1
> (7) sql: SQL-User-Name set to 'testuser1'
> rlm_sql (sql): Reserved connection (1)
> (7) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck
> WHERE username = '%{SQL-User-Name}' ORDER BY id
> (7) sql: --> SELECT id, username, attribute, value, op FROM radcheck
> WHERE username = 'testuser1' ORDER BY id
> (7) sql: Executing select query: SELECT id, username, attribute, value, op
> FROM radcheck WHERE username = 'testuser1' ORDER BY id
> (7) sql: EXPAND SELECT groupname FROM radusergroup WHERE username =
> '%{SQL-User-Name}' ORDER BY priority
> (7) sql: --> SELECT groupname FROM radusergroup WHERE username =
> 'testuser1' ORDER BY priority
> (7) sql: Executing select query: SELECT groupname FROM radusergroup WHERE
> username = 'testuser1' ORDER BY priority
> (7) sql: User not found in any groups
> rlm_sql (sql): Released connection (1)
> Need 4 more connections to reach 10 spares
> rlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots used
> (7) [sql] = notfound
That's definitive.
The "testuser1" isn't in SQL.
Run the queries manually to see what they return.
Alan DeKok.
More information about the Freeradius-Users
mailing list