Re[2]: problem with postgresql 7.2 + freeradius (latest cvs)

2003-01-29 Thread Pavel S. Shirshov
Hello Alan,

Tuesday, January 28, 2003, 3:29:12 PM, you wrote:

AD>   The SQL module doesn't do authentication, and it isn't rejecting the
AD> user.

AD>   Read the log message you posted to the list.  The Unix module is
AD> doing the authentication, and is rejecting the user.

Ok. Thx. But auth configuration is very complex for me.


-- 
Best regards,
 Pavelmailto:[EMAIL PROTECTED]


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: Re[2]: problem with postgresql 7.2 + freeradius (latest cvs)

2003-01-28 Thread Alan DeKok
Pavel Shirshov <[EMAIL PROTECTED]> wrote:
> I read, but if i'm removing 'files' from authorize section, i get
> 'User-Accept' from sql module!

  No, you do not.

  The SQL module does not authenticate the user.  It tells the next
stage HOW to authenticate the user.

>  If back files to authorize section - again "Accept-Reject"!

  Yes, because you put 'files' after 'sql' in the 'authorize'
section.

  One of the entries in the 'users' file is:

DEFAULT  Auth-Type := System
 ...

  So any 'Auth-Type' set by the SQL module will be thrown away by this
entry.

  Change that entry in the 'users' file to:

DEFAULT  Auth-Type = System
 ...


  And the server will also authenticate when using the 'files' module.

> Shall i must to do, for authentication from sql base, and then if user
> not found in base, authentication from users file!

  Authentication is NOT done by the SQL module.  Authentication is NOT
done by the 'users' file.

  Please read 'doc/rlm_sql' in the latest CVS snapshot.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re[2]: problem with postgresql 7.2 + freeradius (latest cvs)

2003-01-28 Thread Pavel Shirshov
Çäðàâñòâóéòå, Alan.

Âû ïèñàëè 28 ÿíâàðÿ 2003 ã., 15:29:12:

AD> "Pavel S. Shirshov" <[EMAIL PROTECTED]> wrote:
>> Problem with auth from sql base - user rejected every time!

AD>   The SQL module doesn't do authentication, and it isn't rejecting the
AD> user.

AD>   Read the log message you posted to the list.  The Unix module is
AD> doing the authentication, and is rejecting the user.

I read, but if i'm removing 'files' from authorize section, i get
'User-Accept' from sql module! If back files to authorize section -
again "Accept-Reject"!

Shall i must to do, for authentication from sql base, and then if user
not found in base, authentication from users file!

Sorry for bad English! English grammar is very complex for me. :(

-- 
Ñ óâàæåíèåì,
 Pavel  mailto:[EMAIL PROTECTED]


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html