#radiusd -X
Starting - reading configuration files ...
reread_config:  reading radiusd.conf
Config:   including file: /etc/raddb/proxy.conf
Config:   including file: /etc/raddb/clients.conf
Config:   including file: /etc/raddb/snmp.conf
Config:   including file: /etc/raddb/postgresql.conf
main: prefix = "/usr"
main: localstatedir = "/var"
main: logdir = "/var/log/radius"
main: libdir = "/usr/lib"
main: radacctdir = "/var/log/radius/radacct"
main: hostname_lookups = no
main: max_request_time = 30
main: cleanup_delay = 5
main: max_requests = 1024
main: delete_blocked_requests = 0
main: port = 0
main: allow_core_dumps = yes
main: log_stripped_names = no
main: log_file = "/var/log/radius/radius.log"
main: log_auth = yes
main: log_auth_badpass = yes
main: log_auth_goodpass = yes
main: pidfile = "/var/run/radiusd/radiusd.pid"
main: user = "radiusd"
main: group = "radiusd"
main: usercollide = no
main: lower_user = "no"
main: lower_pass = "no"
main: nospace_user = "no"
main: nospace_pass = "no"
main: checkrad = "/usr/sbin/checkrad"
main: proxy_requests = yes
proxy: retry_delay = 5
proxy: retry_count = 3
proxy: synchronous = no
proxy: default_fallback = yes
proxy: dead_time = 120
proxy: post_proxy_authorize = yes
proxy: wake_all_if_all_dead = no
security: max_attributes = 200
security: reject_delay = 1
security: status_server = no
main: debug_level = 0
read_config_files:  reading dictionary
read_config_files:  reading naslist
Using deprecated naslist file.  Support for this will go away soon.
read_config_files:  reading clients
Using deprecated clients file.  Support for this will go away soon.
read_config_files:  reading realms
Using deprecated realms file.  Support for this will go away soon.
radiusd:  entering modules setup
Module: Library search path is /usr/lib
Module: Loaded expr
Module: Instantiated expr (expr)
Module: Loaded PAP
pap: encryption_scheme = "crypt"
Module: Instantiated pap (pap)
Module: Loaded CHAP
Module: Instantiated chap (chap)
Module: Loaded MS-CHAP
mschap: use_mppe = yes
mschap: require_encryption = no
mschap: require_strong = no
mschap: passwd = "(null)"
mschap: authtype = "MS-CHAP"
Module: Instantiated mschap (mschap)
Module: Loaded System
unix: cache = no
unix: passwd = "(null)"
unix: shadow = "/etc/shadow"
unix: group = "(null)"
unix: radwtmp = "/var/log/radius/radwtmp"
unix: usegroup = no
unix: cache_reload = 600
Module: Instantiated unix (unix)
Module: Loaded eap
eap: default_eap_type = "md5"
eap: timer_expire = 60
rlm_eap: Loaded and initialized the type md5
rlm_eap: Loaded and initialized the type leap
Module: Instantiated eap (eap)
Module: Loaded preprocess
preprocess: huntgroups = "/etc/raddb/huntgroups"
preprocess: hints = "/etc/raddb/hints"
preprocess: with_ascend_hack = no
preprocess: ascend_channels_per_line = 23
preprocess: with_ntdomain_hack = no
preprocess: with_specialix_jetstream_hack = no
preprocess: with_cisco_vsa_hack = no
Module: Instantiated preprocess (preprocess)
Module: Loaded detail
detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d"
detail: detailperm = 384
detail: dirperm = 493
detail: locking = no
Module: Instantiated detail (auth_log)
detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d"
detail: detailperm = 384
detail: dirperm = 493
detail: locking = no
Module: Instantiated detail (reply_log)
Module: Loaded SQL
sql: driver = "rlm_sql_postgresql"
sql: server = "localhost"
sql: port = ""
sql: login = "radius"
sql: password = "123456"
sql: radius_db = "radius"
sql: acct_table = "radacct"
sql: acct_table2 = "radacct"
sql: authcheck_table = "radcheck"
sql: authreply_table = "radreply"
sql: groupcheck_table = "radgroupcheck"
sql: groupreply_table = "radgroupreply"
sql: usergroup_table = "usergroup"
sql: nas_table = "nas"
sql: dict_table = "dictionary"
sql: sqltrace = yes
sql: sqltracefile = "/var/log/radius/sqltrace.sql"
sql: deletestalesessions = yes
sql: num_sql_socks = 5
sql: sql_user_name = "%{User-Name}"
sql: default_user_profile = ""
sql: query_on_not_found = no
sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id"
sql: authorize_reply_query = ""
sql: authorize_group_check_query = ""
sql: authorize_group_reply_query = ""
sql: accounting_onoff_query = ""
sql: accounting_update_query = ""
sql: accounting_start_query = ""
sql: accounting_start_query_alt = ""
sql: accounting_stop_query = ""
sql: accounting_stop_query_alt = ""
sql: group_membership_query = ""
sql: connect_failure_retry_delay = 60
sql: simul_count_query = ""
sql: simul_verify_query = ""
rlm_sql (sql): Driver rlm_sql_postgresql (module rlm_sql_postgresql) loaded and linked
rlm_sql (sql): Attempting to connect to [EMAIL PROTECTED]:/radius
rlm_sql (sql): starting 0
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #0
rlm_sql (sql): Connected new DB handle, #0
rlm_sql (sql): starting 1
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #1
rlm_sql (sql): Connected new DB handle, #1
rlm_sql (sql): starting 2
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #2
rlm_sql (sql): Connected new DB handle, #2
rlm_sql (sql): starting 3
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #3
rlm_sql (sql): Connected new DB handle, #3
rlm_sql (sql): starting 4
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #4
rlm_sql (sql): Connected new DB handle, #4
Module: Instantiated sql (sql)
Module: Loaded realm
realm: format = "suffix"
realm: delimiter = "@"
Module: Instantiated realm (suffix)
Module: Loaded files
files: usersfile = "/etc/raddb/users"
files: acctusersfile = "/etc/raddb/acct_users"
files: preproxy_usersfile = "/etc/raddb/preproxy_users"
files: compat = "no"
Module: Instantiated files (files)
Module: Loaded Acct-Unique-Session-Id
acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port-Id"
Module: Instantiated acct_unique (acct_unique)
detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"
detail: detailperm = 384
detail: dirperm = 493
detail: locking = no
Module: Instantiated detail (detail)
Module: Loaded radutmp
radutmp: filename = "/var/log/radius/radutmp"
radutmp: username = "%{User-Name}"
radutmp: case_sensitive = yes
radutmp: check_with_nas = yes
radutmp: perm = 384
radutmp: callerid = yes
Module: Instantiated radutmp (radutmp)
Listening on IP address *, ports 1812/udp and 1813/udp, with proxy on 1814/udp.
Ready to process requests.
######################################### ---- HERE IS THE CLIENT TURNED ON
rad_recv: Access-Request packet from host 172.16.0.10:6001, id=2, length=69
        User-Name = "00-20-e0-8d-05-94"
        User-Password = "123456"
        NAS-IP-Address = 172.16.0.10
        NAS-Port = 0
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok for request 0
radius_xlat:  '/var/log/radius/radacct/172.16.0.10/auth-detail-20040714'
rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.16.0.10/auth-detail-20040714
  modcall[authorize]: module "auth_log" returns ok for request 0
radius_xlat:  '/var/log/radius/radacct/172.16.0.10/reply-detail-20040714'
rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/radius/radacct/172.16.0.10/reply-detail-20040714
  modcall[authorize]: module "reply_log" returns ok for request 0
radius_xlat:  '00-20-e0-8d-05-94'
rlm_sql (sql): sql_set_user escaped user --> '00-20-e0-8d-05-94'
radius_xlat:  'SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE username = '00-20-e0-8d-05-94' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE username = '00-20-e0-8d-05-94' ORDER BY id
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: affected rows =
radius_xlat:  ''
radius_xlat:  ''
radius_xlat:  ''
rlm_sql (sql): No matching entry in the database for request from user [00-20-e0-8d-05-94]
rlm_sql (sql): Released sql socket id: 4
  modcall[authorize]: module "sql" returns notfound for request 0
modcall: group authorize returns ok for request 0
auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user
auth: Failed to validate the user.
Login incorrect: [00-20-e0-8d-05-94/123456] (from client testap1 port 0)
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
rad_recv: Access-Request packet from host 172.16.0.10:6001, id=1, length=69
        User-Name = "00-20-e0-8d-05-9f"
        User-Password = "123456"
        NAS-IP-Address = 172.16.0.10
        NAS-Port = 0
modcall: entering group authorize for request 1
  modcall[authorize]: module "preprocess" returns ok for request 1
radius_xlat:  '/var/log/radius/radacct/172.16.0.10/auth-detail-20040714'
rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.16.0.10/auth-detail-20040714
  modcall[authorize]: module "auth_log" returns ok for request 1
radius_xlat:  '/var/log/radius/radacct/172.16.0.10/reply-detail-20040714'
rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/radius/radacct/172.16.0.10/reply-detail-20040714
  modcall[authorize]: module "reply_log" returns ok for request 1
radius_xlat:  '00-20-e0-8d-05-9f'
rlm_sql (sql): sql_set_user escaped user --> '00-20-e0-8d-05-9f'
radius_xlat:  'SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE username = '00-20-e0-8d-05-9f' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 3
rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE username = '00-20-e0-8d-05-9f' ORDER BY id
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: affected rows =
rlm_sql (sql): User 00-20-e0-8d-05-9f not found in radcheck
radius_xlat:  ''
radius_xlat:  ''
rlm_sql (sql): Released sql socket id: 3
  modcall[authorize]: module "sql" returns ok for request 1
modcall: group authorize returns ok for request 1
auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user
auth: Failed to validate the user.
Login incorrect: [00-20-e0-8d-05-9f/123456] (from client testap1 port 0)
Delaying request 1 for 1 seconds
Finished request 1
Going to the next request
--- Walking the entire request list ---
Sending Access-Reject of id 2 to 172.16.0.10:6001
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 1 to 172.16.0.10:6001
Waking up in 2 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 2 with timestamp 40f4d556
Waking up in 2 seconds...
--- Walking the entire request list ---
Cleaning up request 1 ID 1 with timestamp 40f4d558
Nothing to do.  Sleeping until we see a request.
rad_recv: Access-Request packet from host 172.16.0.10:6001, id=3, length=69
        User-Name = "00-20-e0-8d-05-94"
        User-Password = "123456"
        NAS-IP-Address = 172.16.0.10
        NAS-Port = 0
modcall: entering group authorize for request 2
  modcall[authorize]: module "preprocess" returns ok for request 2
radius_xlat:  '/var/log/radius/radacct/172.16.0.10/auth-detail-20040714'
rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.16.0.10/auth-detail-20040714
  modcall[authorize]: module "auth_log" returns ok for request 2
radius_xlat:  '/var/log/radius/radacct/172.16.0.10/reply-detail-20040714'
rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/radius/radacct/172.16.0.10/reply-detail-20040714
  modcall[authorize]: module "reply_log" returns ok for request 2
radius_xlat:  '00-20-e0-8d-05-94'
rlm_sql (sql): sql_set_user escaped user --> '00-20-e0-8d-05-94'
radius_xlat:  'SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE username = '00-20-e0-8d-05-94' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 2
rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE username = '00-20-e0-8d-05-94' ORDER BY id
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: affected rows =
radius_xlat:  ''
radius_xlat:  ''
radius_xlat:  ''
rlm_sql (sql): No matching entry in the database for request from user [00-20-e0-8d-05-94]
rlm_sql (sql): Released sql socket id: 2
  modcall[authorize]: module "sql" returns notfound for request 2
modcall: group authorize returns ok for request 2
auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user
auth: Failed to validate the user.
Login incorrect: [00-20-e0-8d-05-94/123456] (from client testap1 port 0)
Delaying request 2 for 1 seconds
Finished request 2
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 3 to 172.16.0.10:6001
Waking up in 4 seconds...
--- Walking the entire request list ---
Cleaning up request 2 ID 3 with timestamp 40f4d563
Nothing to do.  Sleeping until we see a request.



Here is what my log says:
Jul 14 08:40:35 linux postgres[23869]: [6-1] LOG:  00000: duration: 5.201 ms  statement: SELECT id, UserName, Attribute, Va
lue, Op FROM radcheck WHERE username =
Jul 14 08:40:35 linux postgres[23869]: [6-2]  '00-20-e0-8d-05-94' ORDER BY id
Jul 14 08:40:35 linux postgres[23869]: [6-3] LOCATION:  exec_simple_query, postgres.c:974
Jul 14 08:43:35 linux postgres[23868]: [4-1] LOG:  00000: statement: SELECT id, UserName, Attribute, Value, Op FROM radchec
k WHERE username = '00-20-e0-8d-05-9f' ORDER BY id
Jul 14 08:43:35 linux postgres[23868]: [4-2] LOCATION:  pg_parse_query, postgres.c:464
Jul 14 08:43:35 linux postgres[23868]: [5-1] LOG:  00000: duration: 5.143 ms
Jul 14 08:43:35 linux postgres[23868]: [5-2] LOCATION:  exec_simple_query, postgres.c:960
Jul 14 08:43:35 linux postgres[23868]: [6-1] LOG:  00000: duration: 5.143 ms  statement: SELECT id, UserName, Attribute, Va
lue, Op FROM radcheck WHERE username =
Jul 14 08:43:35 linux postgres[23868]: [6-2]  '00-20-e0-8d-05-9f' ORDER BY id
Jul 14 08:43:35 linux postgres[23868]: [6-3] LOCATION:  exec_simple_query, postgres.c:974







ons, 2004-07-14 kl. 01:13 skrev Gary McKinney:

Yes - if everything is configured properly in the radiusd.conf file then you should authenticate properly...
 
What does radiusd -X show??? (I had deleted the original message - DUH!)
 
gm.... too lazy to search the archives at the moment...
 
----- Original Message -----
From:
Christoffer Dahl Petersen
To: [EMAIL PROTECTED]
Sent: Tuesday, July 13, 2004 12:03 PM
Subject: Re: Freeradius+Postfresqk+MAC problem

Hi again....

1. It doesn't seem to be casesensitive.
2. I have tried to turn on the debug option on the pgsql, and I can see that the query is accepted and the db is returning a result set (with the information requested).

I'm not sure that I understand how the Freeradius works with a db as backend, could you (or anyone else) confirm that I'm on the right track:
As you can see in my earlier mail I have comment out authorize_reply_query and authenticate_query, which only leave the authorize_check_query back, when this query is tried against the db, it should return a result set, if the MAC is allowed to access my net.
So if result set != null    Access-Accept

Is that right?

- Christoffer




tir, 2004-07-13 kl. 12:46 skrev Gary McKinney:

Hmmm,
 
Looks like most everything is correct - from what you have sent here...
 
A couple of things:
 
1. Is postgresql case sensitive ( I play with MySQL)???  If so check the case (caps or lower case) of the record field names to make sure the schema's match for the database and queries.
 
2. Check the debug logs for the database to see exactly what is being done on the database side!
 
From what I see here it looks like the Freeradius is doing it's job properly...
 
As an aside note: When you had the users file setup and the Auth-Type := Accept you were basically telling Freeradius to "accept" any default caller unconditionally - that is what the "Accept" means {grin}...
 
 

gm...

Reply via email to