On Wed, Apr 4, 2012 at 4:01 PM, Glen Harris <[email protected]> wrote: > Replaying the SQL query from the debug manually: > > mysql> SELECT id, username, attribute, value, op FROM radcheck WHERE > username = 'user01' ORDER BY id; > +----+----------+--------------------+-------------------+----+ > | id | username | attribute | value | op | > +----+----------+--------------------+-------------------+----+ > | 1 | user01 | Cleartext-Password | pass01 | := | > | 2 | user01 | Calling-Station-Id | 98-4B-4A-F5-BF-40 | == | > +----+----------+--------------------+-------------------+----+ > > So, there's something wrong with how I'm doing my check items - they're not > matching and the Cleartext-Password attribute is not being set.
If it doesn't find Calling-Station-Id with value '98-4B-4A-F5-BF-40' in the request, the cleartext-password won't be set. Can you paste the debug log? I'm guessing that the request to the inner tunnel probably don't have Calling-Station-Id attribute. -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

