--
 Mark P. Hennessy                                             [EMAIL PROTECTED]

I am trying to set up authentication through MySQL for freeradius.
I'm unable to get successful authentication, but I'm not sure how to
interpret the debug data returned when watching the debug output.  I was
wondering if someone might be able to see what is missing.

Check Values for the user in question:
+-----+----------+----------------+------------+------+
| id  | UserName | Attribute      | Value      | op   |
+-----+----------+----------------+------------+------+
| 151 | FOO      | Auth-Type      | Local      | :=   |
| 152 | FOO      | User-Password  | "BAR"      | ==   |
| 153 | FOO      | Huntgroup-Name | "redback"  | ==   |
+-----+----------+----------------+------------+------+

Reply Values for the user in question:
+-----+----------+-------------------+-----------------+------+
| id  | UserName | Attribute         | Value           | op   |
+-----+----------+-------------------+-----------------+------+
| 183 | FOO      | Framed-IP-Address | 192.168.20.52   | ==   |
| 184 | FOO      | Framed-IP-Netmask | 255.255.255.255 | ==   |
+-----+----------+-------------------+-----------------+------+

When I try to move my authentication from flat users file to mysql, i'm
getting the following output from my freeradius server:

rad_recv: Access-Request packet from host 192.168.1.20:1812, id=188,
length=102
        User-Name = "FOO"
        User-Password = "<snipped>"
        NAS-Identifier = "redback.host"
        NAS-IP-Address = 192.168.1.20
        NAS_Real_Port = 671351090
        Service-Type = Framed-User
        Framed-Protocol = PPP
        NAS-Port = 117443262
modcall: entering group authorize
  modcall[authorize]: module "preprocess" returns ok
    rlm_realm: Looking up realm NULL for User-Name = "FOO"
    rlm_realm: Found realm NULL
    rlm_realm: Adding Stripped-User-Name = "FOO"
  rlm_realm: Proxying request from user FOO to realm NULL
    rlm_realm: Adding Realm = "NULL"
rlm_realm:  Authentication realm is LOCAL.
rlm_realm:  auth_port is not set.  proxy cancelled
  modcall[authorize]: module "suffix" returns noop
radius_xlat:  'FOO'
sql_set_user:  escaped user --> 'FOO'
radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE
Username = 'FOO' ORDER BY id'
rlm_sql: Reserving sql socket id: 3
radius_xlat:  'SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
FROM radgroupcheck,usergroup WHERE usergroup.Username = 'FOO' AND
usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE
Username = 'FOO' ORDER BY id'
radius_xlat:  'SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
FROM radgroupreply,usergroup WHERE usergroup.Username = 'FOO' AND
usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql: Pairs do not match [FOO]
rlm_sql: Released sql socket id: 3
  modcall[authorize]: module "sql" returns notfound
  huntgroups: Matched redback at 64
    users: Matched DEFAULT at 36
  modcall[authorize]: module "files" returns ok
modcall: group authorize returns ok
  rad_check_password:  Found Auth-Type Local
auth: type Local
auth: No password configured for the user
auth: Failed to validate the user.
rad_lowerpair:  Stripped-User-Name now 'FOO'
rad_rmspace_pair:  Stripped-User-Name now 'FOO'
rad_rmspace_pair:  User-Password now 'BAR'
modcall: entering group authorize
  modcall[authorize]: module "preprocess" returns ok
    rlm_realm: Request already proxied.  Ignoring.
  modcall[authorize]: module "suffix" returns noop
radius_xlat:  'FOO'
sql_set_user:  escaped user --> 'FOO'
radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE
Username = 'FOO' ORDER BY id'
rlm_sql: Reserving sql socket id: 2
radius_xlat:  'SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
FROM radgroupcheck,usergroup WHERE usergroup.Username = 'FOO' AND
usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE
Username = 'FOO' ORDER BY id'
radius_xlat:  'SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
FROM radgroupreply,usergroup WHERE usergroup.Username = 'FOO' AND
usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql: Pairs do not match [FOO]
rlm_sql: Released sql socket id: 2
  modcall[authorize]: module "sql" returns notfound
  huntgroups: Matched redback at 64
    users: Matched DEFAULT at 36
  modcall[authorize]: module "files" returns ok
modcall: group authorize returns ok
  rad_check_password:  Found Auth-Type Local
auth: type Local
auth: No password configured for the user
auth: Failed to validate the user.
Delaying request 13 for 1 seconds
Finished request 13
Going to the next request



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to