Hello List,
I am on FreeRadius 1.1.6-1 on debian etch.
I have a user that belongs to both DSL and DIAL groups.
mysql> select * from usergroup;
+------------------------------+-----------+----------+
| UserName | GroupName | priority |
+------------------------------+-----------+----------+
| [EMAIL PROTECTED]@dsl | DSL | 1 |
| [EMAIL PROTECTED]@dsl | DIAL | 2 |
+------------------------------+-----------+----------+
2 rows in set (0.16 sec)
mysql> select * from radreply;
+----+------------------------------+--------------+----+-------+
| id | UserName | Attribute | op | Value |
+----+------------------------------+--------------+----+-------+
| 1 | [EMAIL PROTECTED]@dsl | Fall-Through | = | Yes |
+----+------------------------------+--------------+----+-------+
1 row in set (2.26 sec)
mysql> select * from radcheck;
+----+------------------------------+----------------------------+----+------------------------------------+
| id | UserName | Attribute | op |
Value |
+----+------------------------------+----------------------------+----+------------------------------------+
| 1 | [EMAIL PROTECTED]@dsl | Crypt-Password | := |
$1$54Bzhv&gsrta^ysgahTaWiUN7dNbxUp/UZ. |
| 2 | [EMAIL PROTECTED]@dsl | Allow-Access-Blended | := |
1 |
| 3 | [EMAIL PROTECTED]@dsl | Max-Monthly-Octets-Blended | := |
1073741824 |
+----+------------------------------+----------------------------+----+------------------------------------+
3 rows in set (1.07 sec)
mysql> select * from radgroupcheck;
+----+-----------+----------------------------+----+--------+
| id | GroupName | Attribute | op | Value |
+----+-----------+----------------------------+----+--------+
| 1 | DISABLED | Auth-Type | := | Reject |
| 2 | DSL | Service-Access-Type | == | DSL |
| 3 | DSL | Allow-Access-Blended | := | 0 |
| 4 | DSL | Allow-Access-Local | := | 0 |
| 5 | DSL | Max-Monthly-Octets-Blended | := | 0 |
| 6 | DSL | Max-Monthly-Octets-Local | := | 0 |
| 7 | DIAL | Service-Access-Type | == | DIAL |
+----+-----------+----------------------------+----+--------+
7 rows in set (0.08 sec)
Here is the debug log:
rad_recv: Access-Request packet from host XXX.XXX.XXX.XXX:37839, id=33,
length=80
User-Name = "[EMAIL PROTECTED]@dsl"
User-Password = "<some-password>"
Service-Access-Type = "DIAL"
<cut>
radius_xlat: '[EMAIL PROTECTED]@dsl'
rlm_sql (sql): sql_set_user escaped user --> '[EMAIL PROTECTED]@dsl'
radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM
radcheck WHERE Username = '[EMAIL PROTECTED]@dsl'
ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 37
radius_xlat: 'SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
FROM radgroupcheck,usergroup WHERE usergroup.Username =
'[EMAIL PROTECTED]@dsl' AND usergroup.GroupName =
radgroupcheck.GroupName ORDER BY radgroupcheck.id'
radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM
radreply WHERE Username = '[EMAIL PROTECTED]@dsl'
ORDER BY id'
radius_xlat: 'SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
FROM radgroupreply,usergroup WHERE usergroup.Username =
'[EMAIL PROTECTED]@dsl' AND usergroup.GroupName =
radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql (sql): Released sql socket id: 37
rlm_sql (sql): No matching entry in the database for request from user
[EMAIL PROTECTED]@dsl]
modcall[authorize]: module "sql" returns notfound for request 1
Can someone please explain why the entry is not found. When I perform
each quey all the groups are shown but rlm_sql only ever finds the user
when asking for DSL group and then it returns all the attributes from
all the groups...
--
Kind Regards
Etienne Pretorius
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
