On Monday 09 December 2002 6:51, you wrote:

> [root@Psyche root]# radtest root emptar1
> Sending Access-Request of id 197 to
> 127.0.0.1:1812
>         User-Name = "root"
> rad_recv: Access-Accept packet from host

> [root@Psyche root]# radtest bob bobbob
> Sending Access-Request of id 201 to
> 127.0.0.1:1812
>         User-Name = "bob"
> rad_recv: Access-Reject packet from host

>
> The user bob has been set up on MySQL
> mysql> select * from radcheck;
> +----+----------+-----------+--------+------+
> | id | UserName | Attribute | Value  | op   |
> |  1 | bob      | password  | bobbob | NULL |
> 1 row in set (0.00 sec)

the op in radcheck should be == (though := < > and the others are valid)

> mysql> select * from radacct;

radacct is just an accounting table, radtest normally doesn't cause anything 
to show up here, nor do you normally manually add anything to it.


> mysql> select * from usergroup;
> +----+----------+-----------+
> | id | UserName | GroupName |
> |  1 | bob      | dynamic   |

is there anything setup in radgroupcheck or radgroupreply? if not, then there 
isn't much point in assigning groups.

though you could just do something like
MySQL> insert into radgroupreply values (null, 'dynamic', 'Framed-MTU', 
'576', ':=');

> modcall: entering group authenticate
>   modcall[authenticate]: module "unix"
> returns notfound

it says bob/bobbob is not a user on your machine, but since your trying to 
auth via MySQL you probably aren't looking to auth via real users.
if so then in radius.conf you should comment out the unix from the auth 
section. 

i've only been playing with FR for the past few month a few hours here and 
there. so don't assume i know what i'm talking about, but if it works for 
you, then great.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to