Hi Folks,
Can anyone suggest reasons why Auth-Type might be ignored in FR with postgresql
database?
I have this in radreply table:
Id UserName Attribute Op Value
1 test Session-Timeout = 86400
2 test Auth-Type := Reject
When I send an autrhentication request with NTRadPing utility (for example) the
Session-Timeout (and any other attribute that I
might put in there) is returned just fine, but the response always comes back
'Accept-Accept' so long as the correct password (and
other radcheck attributes) is supplied ok.
Freeradius -X doesn't help much:
==============================================================================================
rad_recv: Access-Request packet from host 203.208.92.121:2159, id=129, length=65
User-Name = "test"
User-Password = "test"
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request 0
modcall[authorize]: module "chap" returns noop for request 0
rlm_eap: No EAP-Message, not doing EAP
modcall[authorize]: module "eap" returns noop for request 0
rlm_realm: Looking up realm "" for User-Name = "test"
rlm_realm: No such realm ""
modcall[authorize]: module "suffix" returns noop for request 0
modcall[authorize]: module "mschap" returns noop for request 0
radius_xlat: 'test'
..
.. db stuff snipped for brevity
..
rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op ??FROM
radreply ??WHERE Username = '[EMAIL PROTECTED]'
??ORDER BY id
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: affected rows =
..
.. more db stuff snipped for brevity
..
rlm_sql (sql): Released sql socket id: 4
modcall[authorize]: module "sql" returns ok for request 0
modcall: group authorize returns ok for request 0
auth: type Local
auth: user supplied User-Password matches local User-Password
Login OK: [test] (from client myNAS port 0)
Sending Access-Accept of id 129 to 192.168.0.2:2159
Session-Timeout = 86400
Finished request 0
Going to the next request
==============================================================================================
Any tips on how to debug this?
Thanks in advance for any suggestions! :-)
Regards, Mike.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
