RE: Freeradius + Mysql Issues!

[Manjunath M Prabhu]

hi,

i think you have to modify sql.conf and add the table names correctly because your output suggests that radius server is not able to connect to sql server.

hence not able to retrieve the user credentials.

regards,

manjunath

-----Original Message-----
From: Alexander Khoo [mailto:[EMAIL PROTECTED]
Sent: Thursday, May 27, 2004 9:17 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Freeradius + Mysql Issues!

Hi all,
My goal is to use Freeradius with the sql module for authenticating
users. I'm using version 0.9.3 (installed from rpms i created with the
specfile that came with the tarball).I've been working
off of this tutorial:  http://www.frontios.com/freeradius.html
 
I got but then I proceeded to follow the instructions for sql and have  run in to some trouble. I followed all of the required steps and am unable to authenticate. I'm using the following command to test the server:
radtest alexander jujai localhost 17 password
and i get the following result:
 
[EMAIL PROTECTED] root]# radtest alexander jujai localhost 17 password

Sending Access-Request of id 240 to 127.0.0.1:1812

        User-Name = "alexander"

        User-Password = "jujai"

        NAS-IP-Address = gk.orbit2000.net

        NAS-Port = 17

rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=240, length=20

 
Here is a snippet of the output produced when i run in debug mode:

rad_recv: Access-Request packet from host 127.0.0.1:32769, id=240, length=61

        User-Name = "alexander"

        User-Password = "jujai"

        NAS-IP-Address = 255.255.255.255

        NAS-Port = 17

modcall: entering group authorize for request 0

  modcall[authorize]: module "preprocess" returns ok for request 0

  modcall[authorize]: module "chap" returns noop for request 0

  modcall[authorize]: module "eap" returns noop for request 0

    rlm_realm: No '@' in User-Name = "alexander", looking up realm NULL

    rlm_realm: No such realm "NULL"

  modcall[authorize]: module "suffix" returns noop for request 0

radius_xlat:  'alexander'

rlm_sql (sql): sql_set_user escaped user --> 'alexander'

radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'alexander' ORDER BY id'

rlm_sql (sql): Reserving sql socket id: 4

radius_xlat:  'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op  FROM radgroupcheck,usergroup WHERE

usergroup.Username = 'alexander' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'

radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'alexander' ORDER BY id'

radius_xlat:  'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op  FROM radgroupreply,usergroup WHERE

usergroup.Username = 'alexander' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'

rlm_sql (sql): No matching entry in the database for request from user [alexander]

rlm_sql (sql): Released sql socket id: 4

  modcall[authorize]: module "sql" returns notfound for request 0

    users: Matched DEFAULT at 152

  modcall[authorize]: module "files" returns ok for request 0

  modcall[authorize]: module "mschap" returns noop for request 0

modcall: group authorize returns ok for request 0

  rad_check_password:  Found Auth-Type System

auth: type "System"

modcall: entering group authenticate for request 0

  modcall[authenticate]: module "unix" returns notfound for request 0

modcall: group authenticate returns notfound for request 0

auth: Failed to validate the user.

Delaying request 0 for 1 seconds

Finished request 0

Going to the next request

--- Walking the entire request list ---

Waking up in 1 seconds...

--- Walking the entire request list ---

Sending Access-Reject of id 240 to 127.0.0.1:32769

Waking up in 4 seconds...

--- Walking the entire request list ---

Cleaning up request 0 ID 240 with timestamp 40b49ae9

Nothing to do.  Sleeping until we see a request.

 
 
And here's the only entry in my radcheck table:
 
+----+----------+-----------+----+---------+
| id | UserName | Attribute | op | Value   |
+----+----------+-----------+----+---------+
|  1 | alexander| Password  | == | password|
+----+----------+-----------+----+---------+
 
Any suggestions would be greatly appreciated. I've been working on this
for several days now and haven't made much progress. I hope I've done
enough footwork on my own to keep away the flames :)
 
 
Thanks in advance,

---

Do you Yahoo!?
Friends. Fun. Try the all-new Yahoo! Messenger