Marcin S. wrote:
> I have add to my sql.conf lines that give something like this when there
> is no such user in databese:
>
> authorize_check_query = "call rad1('%{User-Name}');" gives
> +-----+----------+-----------+--------+----+
> | id | UserName | Attribute | Value | op |
> +-----+----------+-----------+--------+----+
> | 001 | someone | Auth-Type | Accept | == |
> +-----+----------+-----------+--------+----+
Read doc/rlm_sql for the meaning of the operators.
> in radius logs a get:
Could you explain why you're not using debug mode?
> Wed Feb 10 15:29:15 2010 : Auth: Login OK: [someone/<via Auth-Type =
> mschap>] (from client router port 307 cli 00:21:00:11:90:58)
> but in windows I get error 778 cannot verify server identity
>
> Can you send me a clue? What I do wrong?
You haven't given the debug log which contains the authentication
protocol.
My *guess* is that you're doing MS-CHAP. You CANNOT just return
Access-Accept. The Windows machine won't like it. It's impossible.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
