Re: Freeradius + Mysql Issues! (Alexander Khoo)

2004-05-29 Thread Dale Tan Lee Cheong
IMHO, 
If you are validating with MYSQL, the first thing you need to be sure of
is what type of password are u validate with? If you are validate it
with Unix-based password, the attribute in radcheck is Crypt-Password.
Not User-Password otherwise it will intrepret it as clear text. 
Your MySQL + Radius is working. Just need some refinement.

** I'm also new to this. Currently defining freeRADIUS for prepaid
system. And i would like some advice on Acct-Interim-Interval 
Framed-Pool. 

I'm using freeRADIUS version 0.9.3 running on FreeBSD 4.9. Using another
server (FreeBSD 4.9) as NAS running PPPoE. How do i configure the NAS to
perform the Acct-Interim-Interval  Framed-Pool. 

 
Thanks.

Regards,
Dale

 Message: 3
 Date: Fri, 28 May 2004 05:01:31 -0700 (PDT)
 From: Alexander Khoo [EMAIL PROTECTED]
 Subject: Re: Freeradius + Mysql Issues!
 To: [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 
 --0-1976051846-1085745691=:83443
 Content-Type: text/plain; charset=us-ascii
 
 Hi,
  
 Thanks, I change my value to jujai but it still give me the same error!
  
 Any Suggestion?
  
 Regards
 Alexander
 
 Kiran [EMAIL PROTECTED] wrote:
 You need to have jujai in your table.
 
 --- Alexander Khoo wrote:
  
  Hi all,
  
  My goal is to use Freeradius with the sql module for
  authenticating
  
  users. I'm using version 0.9.3 (installed from rpms
  i created with the
  
  specfile that came with the tarball).I've been
  working
  
  off of this tutorial: 
  http://www.frontios.com/freeradius.html
  
  
  
  I got but then I proceeded to follow the
  instructions for sql and have run in to some
  trouble. I followed all of the required steps and am
  unable to authenticate. I'm using the following
  command to test the server:
  
  radtest alexander jujai localhost 17 password
  
  and i get the following result:
  
  
  
  [EMAIL PROTECTED] root]# radtest alexander jujai localhost 17
  password
  
  Sending Access-Request of id 240 to 127.0.0.1:1812
  
  User-Name = alexander
  
  User-Password = jujai
  
  NAS-IP-Address = gk.orbit2000.net
  
  NAS-Port = 17
  
  rad_recv: Access-Reject packet from host
  127.0.0.1:1812, id=240, length=20
  
  
  
  Here is a snippet of the output produced when i run
  in debug mode:
  
  rad_recv: Access-Request packet from host
  127.0.0.1:32769, id=240, length=61
  
  User-Name = alexander
  
  User-Password = jujai
  
  NAS-IP-Address = 255.255.255.255
  
  NAS-Port = 17
  
  modcall: entering group authorize for request 0
  
  modcall[authorize]: module preprocess returns ok
  for request 0
  
  modcall[authorize]: module chap returns noop for
  request 0
  
  modcall[authorize]: module eap returns noop for
  request 0
  
  rlm_realm: No '@' in User-Name = alexander,
  looking up realm NULL
  
  rlm_realm: No such realm NULL
  
  modcall[authorize]: module suffix returns noop
  for request 0
  
  radius_xlat: 'alexander'
  
  rlm_sql (sql): sql_set_user escaped user --
  'alexander'
  
  radius_xlat: 'SELECT id,UserName,Attribute,Value,op
  FROM radcheck WHERE Username = 'alexander' ORDER BY
  id'
  
  rlm_sql (sql): Reserving sql socket id: 4
  
  radius_xlat: 'SELECT
 
 radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
  FROM radgroupcheck,usergroup WHERE
  
  usergroup.Username = 'alexander' AND
  usergroup.GroupName = radgroupcheck.GroupName ORDER
  BY radgroupcheck.id'
  
  radius_xlat: 'SELECT id,UserName,Attribute,Value,op
  FROM radreply WHERE Username = 'alexander' ORDER BY
  id'
  
  radius_xlat: 'SELECT
 
 radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
  FROM radgroupreply,usergroup WHERE
  
  usergroup.Username = 'alexander' AND
  usergroup.GroupName = radgroupreply.GroupName ORDER
  BY radgroupreply.id'
  
  rlm_sql (sql): No matching entry in the database for
  request from user [alexander]
  
  rlm_sql (sql): Released sql socket id: 4
  
  modcall[authorize]: module sql returns notfound
  for request 0
  
  users: Matched DEFAULT at 152
  
  modcall[authorize]: module files returns ok for
  request 0
  
  modcall[authorize]: module mschap returns noop
  for request 0
  
  modcall: group authorize returns ok for request 0
  
  rad_check_password: Found Auth-Type System
  
  auth: type System
  
  modcall: entering group authenticate for request 0
  
  modcall[authenticate]: module unix returns
  notfound for request 0
  
  modcall: group authenticate returns notfound for
  request 0
  
  auth: Failed to validate the user.
  
  Delaying request 0 for 1 seconds
  
  Finished request 0
  
  Going to the next request
  
  --- Walking the entire request list ---
  
  Waking up in 1 seconds...
  
  --- Walking the entire request list ---
  
  Sending Access-Reject of id 240 to 127.0.0.1:32769
  
  Waking up in 4 seconds...
  
  --- Walking the entire request list ---
  
  Cleaning up request 0 ID 240 with timestamp 40b49ae9
  
  Nothing to do. Sleeping until we see

Re: Freeradius + Mysql Issues!

2004-05-28 Thread Alexander Khoo
Hi,

Thanks, I change my value to "jujai" but it still give me the same error!

Any Suggestion?

Regards
AlexanderKiran [EMAIL PROTECTED] wrote:
You need to have "jujai" in your table.--- Alexander Khoo <[EMAIL PROTECTED]>wrote:  Hi all,  My goal is to use Freeradius with the sql module for authenticating  users. I'm using version 0.9.3 (installed from rpms i created with the  specfile that came with the tarball).I've been working  off of this tutorial:  http://www.frontios.com/freeradius.htmlI got but then I proceeded to follow the instructions for sql and have run in to some trouble. I followed all of the required steps and am unable to authenticate. I'm using the following command to test the server:  radtest alexander jujai localhost 17 password  and i get the following result: 
   [EMAIL PROTECTED] root]# radtest alexander jujai localhost 17 password  Sending Access-Request of id 240 to 127.0.0.1:1812  User-Name = "alexander"  User-Password = "jujai"  NAS-IP-Address = gk.orbit2000.net  NAS-Port = 17  rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=240, length=20Here is a snippet of the output produced when i run in debug mode:  rad_recv: Access-Request packet from host 127.0.0.1:32769, id=240, length=61  User-Name = "alexander"  User-Password = "jujai"  NAS-IP-Address = 255.255.255.255  NAS-Port = 17  modcall: entering group authorize for request 0  modcall[authorize]: module "preprocess" returns ok for request 0  modcall[authorize]: module
 "chap" returns noop for request 0  modcall[authorize]: module "eap" returns noop for request 0  rlm_realm: No '@' in User-Name = "alexander", looking up realm NULL  rlm_realm: No such realm "NULL"  modcall[authorize]: module "suffix" returns noop for request 0  radius_xlat: 'alexander'  rlm_sql (sql): sql_set_user escaped user -- 'alexander'  radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'alexander' ORDER BY id'  rlm_sql (sql): Reserving sql socket id: 4  radius_xlat: 'SELECTradgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE  usergroup.Username = 'alexander' AND usergroup.GroupName = radgroupcheck.GroupName
 ORDER BY radgroupcheck.id'  radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'alexander' ORDER BY id'  radius_xlat: 'SELECTradgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE  usergroup.Username = 'alexander' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'  rlm_sql (sql): No matching entry in the database for request from user [alexander]  rlm_sql (sql): Released sql socket id: 4  modcall[authorize]: module "sql" returns notfound for request 0  users: Matched DEFAULT at 152  modcall[authorize]: module "files" returns ok for request 0  modcall[authorize]: module "mschap" returns noop for request 0
  modcall: group authorize returns ok for request 0  rad_check_password: Found Auth-Type System  auth: type "System"  modcall: entering group authenticate for request 0  modcall[authenticate]: module "unix" returns notfound for request 0  modcall: group authenticate returns notfound for request 0  auth: Failed to validate the user.  Delaying request 0 for 1 seconds  Finished request 0  Going to the next request  --- Walking the entire request list ---  Waking up in 1 seconds...  --- Walking the entire request list ---  Sending Access-Reject of id 240 to 127.0.0.1:32769  Waking up in 4 seconds...  --- Walking the entire request list ---  Cleaning up request 0 ID 240 with timestamp 40b49ae9 
 Nothing to do. Sleeping until we see a request.  And here's the only entry in my radcheck table:++--+---++-+  | id | UserName | Attribute | op | Value |  ++--+---++-+  | 1 | alexander| Password | == | password|  ++--+---++-+Any suggestions would be greatly appreciated. I've been working on this  for several days now and haven't made much progress. I hope I've done  enough footwork on my own to keep away the flames :)  Thanks in advance,- Do you Yahoo!? Friends. Fun. Try the all-new Yahoo! Messenger
 Yahoo! Messenger - Communicate instantly..."Ping" your friends today! Download Messenger Now http://uk.messenger.yahoo.com/download/index.html- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
		Do you Yahoo!?Friends.  Fun. Try the all-new Yahoo! Messenger

Re: Freeradius + Mysql Issues!

2004-05-28 Thread Alexander Khoo
Hi,

I was sorry but i really do not know what u trying to say.

Can expain in more detail.

apprrciate you can do that.

AlexanderAlan DeKok [EMAIL PROTECTED] wrote:
Alexander Khoo <[EMAIL PROTECTED]>wrote: auth: type "System"  modcall: entering group authenticate for request 0  modcall[authenticate]: module "unix" returns notfound for request 0What part of that message is unclear? The user wasn't found in/etc/passwd.Alan DeKok.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
		Do you Yahoo!?Friends.  Fun. Try the all-new Yahoo! Messenger

Re: Freeradius + Mysql Issues!

2004-05-28 Thread Frédéric EVRARD
 Hi,

 I was sorry but i really do not know what u trying to say.

 Can expain in more detail.

 apprrciate you can do that.

Use a usual unix login/password to authenticate on Radius, and this
password is in /etc/passwd.

Fred



 Alexander

 Alan DeKok [EMAIL PROTECTED] wrote:
 Alexander Khoo wrote:
 auth: type System

 modcall: entering group authenticate for request 0

 modcall[authenticate]: module unix returns notfound for request 0

 What part of that message is unclear? The user wasn't found in
 /etc/passwd.

 Alan DeKok.


 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

 -
 Do you Yahoo!?
 Friends.  Fun. Try the all-new Yahoo! Messenger


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Freeradius + Mysql Issues!

2004-05-27 Thread Alan DeKok
Alexander Khoo [EMAIL PROTECTED] wrote:
 auth: type System
 
 modcall: entering group authenticate for request 0
 
   modcall[authenticate]: module unix returns notfound for request 0

  What part of that message is unclear?  The user wasn't found in
/etc/passwd.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Freeradius + Mysql Issues!

2004-05-27 Thread Guy Fraser

Alexander Khoo wrote:
Hi all,
My goal is to use Freeradius with the sql module for authenticating
users. I'm using version 0.9.3 (installed from rpms i created with the
specfile that came with the tarball).I've been working
off of this tutorial:  http://www.frontios.com/freeradius.html

I got but then I proceeded to follow the instructions for sql and have  

run in to some trouble. I followed all of the required steps and am unable 

to authenticate. I'm using the following command to test the server:
...snip...
radius_xlat:  'alexander'
rlm_sql (sql): sql_set_user escaped user -- 'alexander'
radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radcheck 
WHERE Username = 'alexander' ORDER BY id'

Checked for alexander in radcheck.
rlm_sql (sql): Reserving sql socket id: 4
radius_xlat:  'SELECT 
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op  
FROM radgroupcheck,usergroup WHERE

usergroup.Username = 'alexander' AND usergroup.GroupName = 
radgroupcheck.GroupName ORDER BY radgroupcheck.id'

Checked for alexander in radgroupcheck and usergroup.
radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radreply 
WHERE Username = 'alexander' ORDER BY id'

Checked for alexander in radreply.
radius_xlat:  'SELECT 
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op  
FROM radgroupreply,usergroup WHERE

usergroup.Username = 'alexander' AND usergroup.GroupName = 
radgroupreply.GroupName ORDER BY radgroupreply.id'

Checked for alexander in radgroupreply and usergroup.
rlm_sql (sql): No matching entry in the database for request from user 
[alexander]

Did not find sufficient information in db.
...snip...
And here's the only entry in my radcheck table:

++--+---++-+
| id | UserName | Attribute | op | Value   |
++--+---++-+
|  1 | alexander| Password  | == | password|
++--+---++-+
I think you need an entry in usergroup.
This is the sample data I use for testing:
NOTE: The delete lines will EMPTY your tables.
NOTE: The encrypted password for troll is skunk in MD5.
---8 cuthere 8---
delete from usergroup ;
insert into usergroup (username,groupname) values('fredf','ppp-unlimited');
insert into usergroup (username,groupname) values('barneyr','ppp-static');
insert into usergroup (username,groupname) values('troll','ppp-unlimited');
insert into usergroup (username,groupname) values('frog','nas-prompt');
delete from radcheck ;
insert into radcheck (username,attribute,op,value) 
values('fredf','User-Password','==','wilma');
insert into radcheck (username,attribute,op,value) 
values('barneyr','User-Password','==','betty');
insert into radcheck (username,attribute,op,value) 
values('troll','Crypt-Password','==','$1$A8BotTi4$UTg2XL.fSStI2RFENUfnR.');
insert into radcheck (username,attribute,op,value) 
values('frog','User-Password','==','kermit');
delete from radreply ;
insert into radreply (username,attribute,op,value) 
values('barneyr','Framed-IP-Address',':=','10.19.65.38');
insert into radreply (username,attribute,op,value) 
values('barneyr','Framed-IP-Netmask',':=','255.255.255.252');
delete from radgroupcheck ;
delete from radgroupreply ;
insert into radgroupreply (groupname,attribute,op,value) 
values('ppp-unlimited','Framed-Compression',':=','Van-Jacobsen-TCP-IP');
insert into radgroupreply (groupname,attribute,op,value) 
values('ppp-unlimited','Framed-Protocol',':=','PPP');
insert into radgroupreply (groupname,attribute,op,value) 
values('ppp-unlimited','Service-Type',':=','Framed-User');
insert into radgroupreply (groupname,attribute,op,value) 
values('ppp-unlimited','Framed-MTU',':=','1500');
insert into radgroupreply (groupname,attribute,op,value) 
values('ppp-static','Framed-Compression',':=','Van-Jacobsen-TCP-IP');
insert into radgroupreply (groupname,attribute,op,value) 
values('ppp-static','Framed-Protocol',':=','PPP');
insert into radgroupreply (groupname,attribute,op,value) 
values('ppp-static','Service-Type',':=','Framed-User');
insert into radgroupreply (groupname,attribute,op,value) 
values('ppp-static','Framed-MTU',':=','1500');
insert into radgroupreply (groupname,attribute,op,value) 
values('nas-prompt','Framed-MTU',':=','1500');
insert into radgroupreply (groupname,attribute,op,value) 
values('nas-prompt','Framed-Compression',':=','Van-Jacobson-TCP-IP');
insert into radgroupreply (groupname,attribute,op,value) 
values('nas-prompt','Service-Type',':=','NAS-Prompt');
---8 cuthere 8---
Hope this helps.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Freeradius + Mysql Issues!

2004-05-27 Thread Kiran
You need to have jujai in your table.

 --- Alexander Khoo [EMAIL PROTECTED] wrote:
 
 Hi all,
 
 My goal is to use Freeradius with the sql module for
 authenticating
 
 users. I'm using version 0.9.3 (installed from rpms
 i created with the
 
 specfile that came with the tarball).I've been
 working
 
 off of this tutorial: 
 http://www.frontios.com/freeradius.html
 
  
 
 I got but then I proceeded to follow the
 instructions for sql and have  run in to some
 trouble. I followed all of the required steps and am
 unable to authenticate. I'm using the following
 command to test the server:
 
 radtest alexander jujai localhost 17 password
 
 and i get the following result:
 
  
 
 [EMAIL PROTECTED] root]# radtest alexander jujai localhost 17
 password
 
 Sending Access-Request of id 240 to 127.0.0.1:1812
 
 User-Name = alexander
 
 User-Password = jujai
 
 NAS-IP-Address = gk.orbit2000.net
 
 NAS-Port = 17
 
 rad_recv: Access-Reject packet from host
 127.0.0.1:1812, id=240, length=20
 
  
 
 Here is a snippet of the output produced when i run
 in debug mode:
 
 rad_recv: Access-Request packet from host
 127.0.0.1:32769, id=240, length=61
 
 User-Name = alexander
 
 User-Password = jujai
 
 NAS-IP-Address = 255.255.255.255
 
 NAS-Port = 17
 
 modcall: entering group authorize for request 0
 
   modcall[authorize]: module preprocess returns ok
 for request 0
 
   modcall[authorize]: module chap returns noop for
 request 0
 
   modcall[authorize]: module eap returns noop for
 request 0
 
 rlm_realm: No '@' in User-Name = alexander,
 looking up realm NULL
 
 rlm_realm: No such realm NULL
 
   modcall[authorize]: module suffix returns noop
 for request 0
 
 radius_xlat:  'alexander'
 
 rlm_sql (sql): sql_set_user escaped user --
 'alexander'
 
 radius_xlat:  'SELECT id,UserName,Attribute,Value,op
 FROM radcheck WHERE Username = 'alexander' ORDER BY
 id'
 
 rlm_sql (sql): Reserving sql socket id: 4
 
 radius_xlat:  'SELECT

radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
  FROM radgroupcheck,usergroup WHERE
 
 usergroup.Username = 'alexander' AND
 usergroup.GroupName = radgroupcheck.GroupName ORDER
 BY radgroupcheck.id'
 
 radius_xlat:  'SELECT id,UserName,Attribute,Value,op
 FROM radreply WHERE Username = 'alexander' ORDER BY
 id'
 
 radius_xlat:  'SELECT

radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
  FROM radgroupreply,usergroup WHERE
 
 usergroup.Username = 'alexander' AND
 usergroup.GroupName = radgroupreply.GroupName ORDER
 BY radgroupreply.id'
 
 rlm_sql (sql): No matching entry in the database for
 request from user [alexander]
 
 rlm_sql (sql): Released sql socket id: 4
 
   modcall[authorize]: module sql returns notfound
 for request 0
 
 users: Matched DEFAULT at 152
 
   modcall[authorize]: module files returns ok for
 request 0
 
   modcall[authorize]: module mschap returns noop
 for request 0
 
 modcall: group authorize returns ok for request 0
 
   rad_check_password:  Found Auth-Type System
 
 auth: type System
 
 modcall: entering group authenticate for request 0
 
   modcall[authenticate]: module unix returns
 notfound for request 0
 
 modcall: group authenticate returns notfound for
 request 0
 
 auth: Failed to validate the user.
 
 Delaying request 0 for 1 seconds
 
 Finished request 0
 
 Going to the next request
 
 --- Walking the entire request list ---
 
 Waking up in 1 seconds...
 
 --- Walking the entire request list ---
 
 Sending Access-Reject of id 240 to 127.0.0.1:32769
 
 Waking up in 4 seconds...
 
 --- Walking the entire request list ---
 
 Cleaning up request 0 ID 240 with timestamp 40b49ae9
 
 Nothing to do.  Sleeping until we see a request.
 
  
 
  
 
 And here's the only entry in my radcheck table:
 
  
 
 ++--+---++-+
 
 | id | UserName | Attribute | op | Value   |
 
 ++--+---++-+
 
 |  1 | alexander| Password  | == | password|
 
 ++--+---++-+
 
  
 
 Any suggestions would be greatly appreciated. I've
 been working on this
 
 for several days now and haven't made much progress.
 I hope I've done
 
 enough footwork on my own to keep away the flames :)
 
  
 
  
 
 Thanks in advance,
 
 
   
 -
 Do you Yahoo!?
 Friends.  Fun. Try the all-new Yahoo! Messenger 






Yahoo! Messenger - Communicate instantly...Ping 
your friends today! Download Messenger Now 
http://uk.messenger.yahoo.com/download/index.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Freeradius + Mysql Issues!

2004-05-26 Thread Alexander Khoo
Hi all,My goal is to use Freeradius with the sql module for authenticatingusers. I'm using version 0.9.3 (installed from rpms i created with thespecfile that came with the tarball).I've been workingoff of this tutorial: http://www.frontios.com/freeradius.htmlI got but then I proceeded to follow the instructions for sql and have run in to some trouble. I followed all of the required steps and am unable to authenticate. I'm using the following command to test the server:radtest alexander jujai localhost 17 passwordand i get the following result:[EMAIL PROTECTED] root]# radtest alexander jujai localhost 17 password
Sending Access-Request of id 240 to 127.0.0.1:1812
 User-Name = "alexander"
 User-Password = "jujai"
 NAS-IP-Address = gk.orbit2000.net
 NAS-Port = 17
rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=240, length=20Here is a snippet of the output produced when i run in debug mode:
rad_recv: Access-Request packet from host 127.0.0.1:32769, id=240, length=61
 User-Name = "alexander"
 User-Password = "jujai"
 NAS-IP-Address = 255.255.255.255
 NAS-Port = 17
modcall: entering group authorize for request 0
 modcall[authorize]: module "preprocess" returns ok for request 0
 modcall[authorize]: module "chap" returns noop for request 0
 modcall[authorize]: module "eap" returns noop for request 0
 rlm_realm: No '@' in User-Name = "alexander", looking up realm NULL
 rlm_realm: No such realm "NULL"
 modcall[authorize]: module "suffix" returns noop for request 0
radius_xlat: 'alexander'
rlm_sql (sql): sql_set_user escaped user -- 'alexander'
radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'alexander' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 4
radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE
usergroup.Username = 'alexander' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'alexander' ORDER BY id'
radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE
usergroup.Username = 'alexander' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql (sql): No matching entry in the database for request from user [alexander]
rlm_sql (sql): Released sql socket id: 4
 modcall[authorize]: module "sql" returns notfound for request 0
 users: Matched DEFAULT at 152
 modcall[authorize]: module "files" returns ok for request 0
 modcall[authorize]: module "mschap" returns noop for request 0
modcall: group authorize returns ok for request 0
 rad_check_password: Found Auth-Type System
auth: type "System"
modcall: entering group authenticate for request 0
 modcall[authenticate]: module "unix" returns notfound for request 0
modcall: group authenticate returns notfound for request 0
auth: Failed to validate the user.
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 240 to 127.0.0.1:32769
Waking up in 4 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 240 with timestamp 40b49ae9
Nothing to do. Sleeping until we see a request.And here's the only entry in my radcheck table:++--+---++-+| id | UserName | Attribute | op | Value |++--+---++-+| 1 | alexander| Password | == | password|++--+---++-+Any suggestions would be greatly appreciated. I've been working on thisfor several days now and haven't made much progress. I hope I've doneenough footwork on my own to keep away the flames :)Thanks in advance,
		Do you Yahoo!?Friends.  Fun. Try the all-new Yahoo! Messenger

RE: Freeradius + Mysql Issues!

2004-05-26 Thread Manjunath M Prabhu



hi,
i 
think you have to modify sql.conf and add the table names correctly because your 
output suggests that radius server is not able to connect to sql 
server.
hence 
not able to retrieve the user credentials.
regards,
manjunath

  -Original Message-From: Alexander Khoo 
  [mailto:[EMAIL PROTECTED]Sent: Thursday, May 27, 2004 9:17 
  AMTo: [EMAIL PROTECTED]Cc: 
  [EMAIL PROTECTED]; [EMAIL PROTECTED]Subject: Freeradius + 
  Mysql Issues!
  Hi all,My goal is to use Freeradius with the sql module for authenticatingusers. I'm using version 0.9.3 (installed from rpms i created with thespecfile that came with the tarball).I've been workingoff of this tutorial: http://www.frontios.com/freeradius.htmlI got but then I proceeded to follow the instructions for sql and have <S! style="mso-spacerun: yes" PAN>run in to some trouble. I followed all of the required steps and am unable to authenticate. I'm using the following command to test the server:radtest alexander jujai localhost 17 passwordand i get the following result:[EMAIL PROTECTED] root]# radtest alexander jujai localhost 17 password
  Sending Access-Request of 
  id 240 to 127.0.0.1:1812
   
  User-Name = "alexander"
   User-Password = 
  "jujai"
   
  NAS-IP-Address = gk.orbit2000.net
   
  NAS-Port = 17
  rad_recv: Access-Reject 
  packet from host 127.0.0.1:1812, id=240, length=20Here is a snippet of the output produced when i run in debug mode:
  rad_recv: Access-Request 
  packet from host 127.0.0.1:32769, id=240, length=61
   
  User-Name = "alexander"
   User-Password = 
  "jujai"
   
  NAS-IP-Address = 255.255.255.255
   
  NAS-Port = 17
  modcall: entering group 
  authorize for request 0
   modcall[authorize]: module 
  "preprocess" returns ok for request 0
   modcall[authorize]: module "chap" 
  returns noop for request 0
   modcall[authorize]: module "eap" 
  returns noop for request 0
   rlm_realm: No '@' in 
  User-Name = "alexander", looking up realm NULL
   rlm_realm: No such realm 
  "NULL"
   modcall[authorize]: module "suffix" 
  returns noop for request 0
  radius_xlat: 'alexander'
  rlm_sql (sql): 
  sql_set_user escaped user -- 'alexander'
  radius_xlat: 'SELECT id,UserName,Attribute,Value,op 
  FROM radcheck WHERE Username = 'alexander' ORDER BY id'
  rlm_sql (sql): Reserving 
  sql socket id: 4
  radius_xlat: 'SELECT 
  radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup 
  WHERE
  usergroup.Username = 
  'alexander' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY 
  radgroupcheck.id'
  radius_xlat: 'SELECT id,UserName,Attribute,Value,op 
  FROM radreply WHERE Username = 'alexander' ORDER BY id'
  radius_xlat: 'SELECT 
  radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup 
  WHERE
  usergroup.Username = 
  'alexander' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY 
  radgroupreply.id'
  rlm_sql (sql): No matching 
  entry in the database for request from user [alexander]
  rlm_sql (sql): Released 
  sql socket id: 4
   modcall[authorize]: module "sql" 
  returns notfound for request 0
   users: Matched DEFAULT at 
  152
   modcall[authorize]: module "files" 
  returns ok for request 0
   modcall[authorize]: module "mschap" 
  returns noop for request 0
  modcall: group authorize 
  returns ok for request 0
   rad_check_password: Found Auth-Type 
  System
  auth: type 
  "System"
  modcall: entering group 
  authenticate for request 0
   modcall[authenticate]: module "unix" 
  returns notfound for request 0
  modcall: group 
  authenticate returns notfound for request 0
  auth: Failed to validate 
  the user.
  Delaying request 0 for 1 
  seconds
  Finished request 
  0
  Going to the next 
  request
  --- Walking the entire 
  request list ---
  Waking up in 1 
  seconds...
  --- Walking the entire 
  request list ---
  Sending Access-Reject of 
  id 240 to 127.0.0.1:32769
  Waking up in 4 
  seconds...
  --- Walking the entire 
  request list ---
  Cleaning up request 0 ID 
  240 with timestamp 40b49ae9
  Nothing to do. Sleeping until we see a 
  request.And here's the only entry in my radcheck table:++--+---++-+| id | UserName | Attribute | op | Value |++--+---++-+| 1 | alexander| Password | == | password|++--+---++-+Any suggestions would be greatly appreciated. I've been working on thisfor several days now and haven't made much progress. I hope I've doneenough footwork on my own to keep away the flames :)Thanks in advance,
  
  
  Do you Yahoo!?Friends. Fun. Try the all-new Yahoo! 
Messenger