Hello, Andrew.

You wrote at 13.01.2003, :


AP> okay. i'm puzzled as to why you're using := and not ==, but it should
AP> still be a matching check item.

Changing this had no effect! But you are right: that was my error :(

AP> that said, does authentication work if you attempt to use pap or
AP> cleartext passwords in the mysql database? getting it working at all is
AP> probably your first step, also, perhaps you could show us what other
AP> check and reply attributes you're setting in the database...

I  don't  understand  one thing: when I add a user to /etc/passwd, for
example

>test:x:1000:65532::/dev/null:/dev/null

all  is going in order. Radius send Access-Accept packet with AV pairs
from  radreply  and  radgroupreply. So I think, that the problem is in
authentication. Here are these sections from radiusd.conf:


authorize {
        preprocess

        chap

        mschap

#       counter
#       attr_filter
#       eap
        suffix
        files
#       etc_smbpasswd
        sql
#       ldap
}
authenticate {
        authtype PAP {
                pap
        }
        authtype CHAP {
                chap
        }

        authtype MS-CHAP {
                mschap
        }

#       pam
        unix
#       authtype LDAP {
#               ldap
#       }
#       eap
}

If   I  commented  'unix'  module nothing was working! But I can't add
"sql" module to authenticate section(I have the 0.8 version of radius,
so I've heard that it is not needed, thought...)


AP> Andrew Pilley

-- 
Best regards,
 CEBKA                          mailto:[EMAIL PROTECTED]


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to