At 11:46 AM 3/18/2002 -0500, you wrote:
>I use freeradius on RH with mysql. I have a basic
>questions:
>
>1.      The user in mysql database should have an account
>on Linux too?

No, not necessarily.


>2.      I ran a test with user Bob in �users�, using
>�Ntradping� and the test was successfully. Can I use
>the same tool for test if I am connected to mysql?

Yes.


>Right now I have this message:
>**************************************
>rlm_sql: Released sql socket id: 4
>   modcall[authorize]: module "sql" returns ok
>     users: Matched DEFAULT at 148
>   modcall[authorize]: module "files" returns ok
>modcall: group authorize returns ok
>   rad_check_password:  Found Auth-Type System
>auth: type "System"
>auth: Failed to validate the user.
>Login incorrect: [fredf/wilma] (from nas workst port
>0)
>Sending Access-Reject of id 0 to 10.10.10.226:1845
>Finished request 0
>Going to the next request
>--- Walking the entire request list ---
>Waking up in 6 seconds...
>**************************************
>
>If the module are OK why the user was not validate, or
>the tool for test should be different?



Did you add 'sql' to the authorize block in 'radiusd.conf'?

The line 'auth: type "System" ', above, indicates that freeradius is 
authenticating this user against your system (ie passwd file) instead of 
the SQL server.

I think you may need to change your 'users' file to specify an Auth-Type of 
Local for accounts that should be looked up in SQL.



>3.      If I run a test from Radius server:
>-************************************************
>[root@localhost bin]# ./radtest barney betty localhost
>localhost testing234
>Sending Access-Request of id 80 to 127.0.0.1:1812
>         User-Name = "barney"
>         Password =
>"\225\266\311\037\0076b\276\030\032%8"z\363i"
>         NAS-IP-Address = localhost.localdomain
>         NAS-Port-Id = "localhost"
>rad_recv: Access-Reject packet from host
>127.0.0.1:1812, id=80, length=20
>rad_decode: Received Access-Reject packet from
>127.0.0.1 with invalid signature!
>-************************************************
>
>Here is my question, from where is coming this
>message: Invalid signature � from radius or mysql.

This means that the client secret you supplied "testing234" is wrong.  See 
'clients.conf'




>Thanks in advance.
>Jo
>
>
>
>
>
>______________________________________________________________________
>Find, Connect, Date! http://personals.yahoo.ca
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Randy Moore
Axion Information Technologies, Inc.

email     [EMAIL PROTECTED]
phone   301-408-1200
fax        301-445-3947


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to