Re: sqlippool - Duplicate IP
Neville wrote:
It's not as simple as your making it. Also, I am using %{NAS-Port} and
not %{Calling-Station-Id} due to the Lack of Calling-Station-Id.
Why didn't you say that in the first message? Giving out *part* of
the information is annoying.
I Understand, but I was trying to make the message SHORT.
pool-key = "%{NAS-Port}"
# pool-key = "%{Calling-Station-Id}"
$INCLUDE sql/mysql/ippool.conf
#$INCLUDE sql/postgresql/ippool.conf
if I use ippool module, it works fine so something wrong with the SQL.
Well, it's not using the "allocate-find" query, so something is wrong
with the configuration.
Are you able to provide some pointers please, e.g. where sqlippool should be
placed or what other files should I look into or order to track the error
down.
Thx
Nev
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: sqlippool - Duplicate IP
Neville wrote:
> It's not as simple as your making it. Also, I am using %{NAS-Port} and
> not %{Calling-Station-Id} due to the Lack of Calling-Station-Id.
Why didn't you say that in the first message? Giving out *part* of
the information is annoying.
> pool-key = "%{NAS-Port}"
> # pool-key = "%{Calling-Station-Id}"
>
> $INCLUDE sql/mysql/ippool.conf
> #$INCLUDE sql/postgresql/ippool.conf
>
> if I use ippool module, it works fine so something wrong with the SQL.
Well, it's not using the "allocate-find" query, so something is wrong
with the configuration.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: sqlippool - Duplicate IP
Neville wrote:
I've facing a problem since rebuild, where every user is being allocated
the same IP from the sqlippool, and I'm not sure why this is happening.
...
pppd does not pass back Client-IP-Address or Client-Station-Id
"Calling-Station-Id".
table structure for radipool is
Yes... we have access to the source code, too.
rad_recv: Access-Request packet from host NASIPHERE port 53621, id=117,
length=147
Service-Type = Framed-User
Framed-Protocol = PPP
User-Name = "TESTUSER"
MS-CHAP-Challenge = 0xe325bfbeb22fbbb7a33a21326e5ce18a
MS-CHAP2-Response =
0x51009da7f84750dd0f01bed231e11bab1f9a2b9f4dad6844332eaec4aabcc1d8f03911ff654b6a7a8e96
NAS-Identifier = "NASIPHERE"
NAS-Port = 0
OK. So how is the IP pool module supposed assign a unique IP for each
user? There's no MAC address in the request (i.e. Calling-Station-Id).
The SQL queries (if you read them) use Calling-Station-Id. How are
they supposed to work if there's no Calling-Station-Id?
Fix your PPPd so that it sends *useful* information.
Dear Alan,
It's not as simple as your making it. Also, I am using %{NAS-Port} and not
%{Calling-Station-Id} due to the Lack of Calling-Station-Id.
pool-key = "%{NAS-Port}"
# pool-key = "%{Calling-Station-Id}"
$INCLUDE sql/mysql/ippool.conf
#$INCLUDE sql/postgresql/ippool.conf
if I use ippool module, it works fine so something wrong with the SQL.
Please can you confirm in want sections I have to add sqlippool module in
order that I can test this again, but given the flakiness of sqlippool I
might just stick with ippool module.
Thx
Nev
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: sqlippool - Duplicate IP
Neville wrote: > I've facing a problem since rebuild, where every user is being allocated > the same IP from the sqlippool, and I'm not sure why this is happening. ... > pppd does not pass back Client-IP-Address or Client-Station-Id "Calling-Station-Id". > table structure for radipool is Yes... we have access to the source code, too. > rad_recv: Access-Request packet from host NASIPHERE port 53621, id=117, > length=147 > Service-Type = Framed-User > Framed-Protocol = PPP > User-Name = "TESTUSER" > MS-CHAP-Challenge = 0xe325bfbeb22fbbb7a33a21326e5ce18a > MS-CHAP2-Response = > 0x51009da7f84750dd0f01bed231e11bab1f9a2b9f4dad6844332eaec4aabcc1d8f03911ff654b6a7a8e96 > NAS-Identifier = "NASIPHERE" > NAS-Port = 0 OK. So how is the IP pool module supposed assign a unique IP for each user? There's no MAC address in the request (i.e. Calling-Station-Id). The SQL queries (if you read them) use Calling-Station-Id. How are they supposed to work if there's no Calling-Station-Id? Fix your PPPd so that it sends *useful* information. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
sqlippool - Duplicate IP
Hi,
I've facing a problem since rebuild, where every user is being allocated the
same IP from the sqlippool, and I'm not sure why this is happening.
I have a DaloRadius / FreeRadius2.1.6 / Poptop (pptpd) 1.3.4 / ppp 2.4.4.-2 /
mysql 5.0.45
pppd does not pass back Client-IP-Address or Client-Station-Id
table structure for radipool is
( `id` int(11) unsigned NOT NULL auto_increment,
`pool_name` varchar(30) NOT NULL,
`framedipaddress` varchar(15) NOT NULL default '',
`nasipaddress` varchar(15) NOT NULL default '',
`calledstationid` varchar(30) NOT NULL,
`callingstationid` varchar(30) NOT NULL,
`expiry_time` datetime default NULL,
`username` varchar(64) NOT NULL default '',
`pool_key` varchar(30) NOT NULL, PRIMARY KEY (`id`) )
1st Login
Ready to process requests.
rad_recv: Access-Request packet from host NASIPHERE port 53621, id=117,
length=147
Service-Type = Framed-User
Framed-Protocol = PPP
User-Name = "TESTUSER"
MS-CHAP-Challenge = 0xe325bfbeb22fbbb7a33a21326e5ce18a
MS-CHAP2-Response =
0x51009da7f84750dd0f01bed231e11bab1f9a2b9f4dad6844332eaec4aabcc1d8f03911ff654b6a7a8e96
NAS-Identifier = "NASIPHERE"
NAS-Port = 0
+- entering group authorize {...}
++[preprocess] returns ok
[auth_log] expand:
/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d ->
/var/log/radius/radacct/NASIPHERE/auth-detail-20090831
[auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d
expands to /var/log/radius/radacct/NASIPHERE/auth-detail-20090831
[auth_log] expand: %t -> Mon Aug 31 22:47:05 2009
++[auth_log] returns ok
[mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap'
++[mschap] returns ok
[sql] expand: %{User-Name} -> TESTUSER
[sql] sql_set_user escaped user --> 'TESTUSER'
rlm_sql (sql): Reserving sql socket id: 3
[sql] expand: SELECT id, username, attribute, value, op FROM
radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id ->
SELECT id, username, attribute, value, op FROM radcheck
WHERE username = 'TESTUSER' ORDER BY id
[sql] User found in radcheck table
[sql] expand: SELECT id, username, attribute, value, op FROM
radreply WHERE username = '%{SQL-User-Name}' ORDER BY id ->
SELECT id, username, attribute, value, op FROM radreply
WHERE username = 'TESTUSER' ORDER BY id
[sql] expand: SELECT groupname FROM radusergroup WHERE
username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname
FROM radusergroup WHERE username = 'TESTUSER' ORDER
BY priority
[sql] expand: SELECT id, groupname, attribute, Value, op
FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER
BY id -> SELECT id, groupname, attribute, Value, op FROM
radgroupcheck WHERE groupname = 'USUKTV' ORDER BY id
[sql] User found in group USUKTV
[sql] expand: SELECT id, groupname, attribute, value, op
FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER
BY id -> SELECT id, groupname, attribute, value, op FROM
radgroupreply WHERE groupname = 'USUKTV' ORDER BY id
rlm_sql (sql): Released sql socket id: 3
++[sql] returns ok
++[expiration] returns noop
++[logintime] returns noop
Found Auth-Type = MSCHAP
+- entering group MS-CHAP {...}
[mschap] Told to do MS-CHAPv2 for TESTUSER with NT-Password
[mschap] adding MS-CHAPv2 MPPE keys
++[mschap] returns ok
+- entering group session {...}
++[sql] returns noop
Login OK: [TESTUSER/] (from client VPN1-UK port 0)
+- entering group post-auth {...}
rlm_sql (sql): Reserving sql socket id: 2
[sqlippool] expand: %{User-Name} -> TESTUSER
[sqlippool] sql_set_user escaped user --> 'TESTUSER'
[sqlippool] expand: START TRANSACTION -> START TRANSACTION
[sqlippool] expand: UPDATE radippool SET nasipaddress = '', pool_key = 0,
callingstationid = '', username = '', expiry_time = NULL WHERE
expiry_time <= NOW() - INTERVAL 1 SECOND AND nasipaddress =
'%{Nas-IP-Address}' -> UPDATE radippool SET nasipaddress = '', pool_key = 0,
callingstationid = '', username = '', expiry_time = NULL WHERE expiry_time
<= NOW() - INTERVAL 1 SECOND AND nasipaddress = 'NASIPHERE'
[sqlippool] expand: SELECT framedipaddress FROM radippool WHERE pool_name
= '%{control:Pool-Name}' AND (expiry_time < NOW() OR expiry_time IS NULL)
ORDER BY (username <> '%{User-Name}'), (callingstationid <>
'%{Calling-Station-Id}'), expiry_time LIMIT 1 FOR UPDATE -> SELECT
framedipaddress FROM radippool WHERE pool_name = 'tvpool' AND (expiry_time <
NOW() OR expiry_time IS NULL) ORDER BY (username <> 'TESTUSER'),
(callingstationid <> ''), expiry_time LIMIT 1 FOR UPDATE
[sqlippool] expand: UPDATE radippool SET nasipaddress =
'%{
