Re: user names and user passwords

[Dmitry Korzhevin]

I have users in database radius, table radcheck:

1. 19A7A770-CC08-B769-1894-6ED795DA2DB70 Cleartext-Password := pass
2. {19A7A770-CC08-B769-1894-6ED795DA2DB70} Cleartext-Password := pass
3. \{19A7A770-CC08-B769-1894-6ED795DA2DB70\} Cleartext-Password := pass

When i try test connection with radtest:



Sending Access-Request of id 73 to IP port 1812
        User-Name = "19A7A770-CC08-B769-1894-6ED795DA2DB70"
        User-Password = "pass"
        NAS-IP-Address = IP
        NAS-Port = 0
rad_recv: Access-Accept packet from host IP port 1812, id=73, length=20

So, auth without any problems for user (1).



radtest "{19A7A770-CC08-B769-1894-6ED795DA2DB70}" "pass" IP 0 psk

Sending Access-Request of id 112 to IP port 1812
        User-Name = "{19A7A770-CC08-B769-1894-6ED795DA2DB70}"
        User-Password = "pass"
        NAS-IP-Address = IP
        NAS-Port = 0
rad_recv: Access-Reject packet from host IP port 1812, id=112, length=20

On freeradius server side (with freeradius -X) i see:

------

[sql]   expand: %{User-Name} -> {19A7A770-CC08-B769-1894-6ED795DA2DB70}

rlm_sql (sql): Reserving sql socket id: 2

rlm_sql (sql): Released sql socket id: 2
[sql] User {19A7A770-CC08-B769-1894-6ED795DA2DB70} not found
++[sql] returns notfound

----------------



?

16.11.2012 17:58, Alan DeKok пишет:

radtest "19A7A770-CC08-B769-1894-6ED795DA2DB70" "pass" RADIUS_SERVER_IP 0 psk But, when i try to test with user, which login use "{}" characters (2) - it fails: [sql] sql_set_user escaped user --> '{19A7A770-CC08-B769-1894-6ED795DA2DB70}' [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = '=7B19A7A770-CC08-B769-1894-6ED795DA2DB70=7D' ORDER BY id rlm_sql_mysql: query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '=7B19A7A770-CC08-B769-1894-6ED795DA2DB70=7D' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = '=7B19A7A770-CC08-B769-1894-6ED795DA2DB70=7D' ORDER BY priority rlm_sql_mysql: query: SELECT groupname FROM radusergroup WHERE username = '=7B19A7A770-CC08-B769-1894-6ED795DA2DB70=7D' ORDER BY priority Why freeradius trying to search '=7B19A7A770-CC08-B769-1894-6ED795DA2DB70=7D' instead of correct username: '{19A7A770-CC08-B769-1894-6ED795DA2DB70}'

Dmitry Korzhevin wrote:

Guys, does anybody know something about maximum username length and user
password lengt?

   The RFCs say 253 octets for user name, and 128 for password.

I try to use next login passwords without success (checked with radtest):

http://dpaste.com/832115/

   Which is (a) pretty much self-evident.  And (b) not following the
daily instructions to post the full debug log.

   What does "User 19A7A770-CC08-B769-1894-6ED795DA2DB7 not found" mean
to you?

   Have you tried running the SQL qeuries manually?  That's why they're
printed out.  So you can USE THEM to DEBUG THE PROBLEM.

   Alan DeKok.

Best Regards,
Dmitry

---
Dmitry KORZHEVIN
System Administrator
STIDIA S.A. - Luxembourg

e: dmitry.korzhe...@stidia.com
m: +38 093 874 5453
w: http://www.stidia.com

smime.p7s
Description: ÐÑипÑогÑаÑиÑеÑÐºÐ°Ñ Ð¿Ð¾Ð´Ð¿Ð¸ÑÑ S/MIME

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html