Re: Freeradius mysql (problem)
Hi, i have the exact same problem here with a Linksys access point. The Access list to the AP works fine allowing the client to connect. But the authentication fails. When i enter the client with it's login in the users file like this myclientuser Cleartext-Password := myclientspassword it works fine. As soon as i try this on the mysql System i do not get the access. The Allowd hosts access still works fine -- View this message in context: http://freeradius.1045715.n5.nabble.com/Freeradius-mysql-problem-tp4638453p4643540.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Help with Freeradius + MySQL Problem....
hi, got sql defined in your authenticate section of the inner-tunnel (where EAP packets by default get proxied to) ? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Freeradius Mysql problem
Hi All, I'm using mysql server 5.1.30 for storing radius accounting details. The system works fine and accounting is done to log file and to mysql server installed in a separate machine. But the problem arises when the mysql server is not working. When the radius accounting server lost the connectivity to the mysql server it does not report any kind of error. The radius daemon is working fine in the radius accounting server. But it does not respond to any requests. Is there any way for me to recognize whether the mysql server is offline from the radius server? Thanks Asin New Email addresses available on Yahoo! Get the Email name you#39;ve always wanted on the new @ymail and @rocketmail. Hurry before someone else does! http://mail.promotions.yahoo.com/newdomains/aa/- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius Mysql problem
But the problem arises when the mysql server is not working. When the radius accounting server lost the connectivity to the mysql server it does not report any kind of error. The radius daemon is working fine in the radius accounting server. But it does not respond to any requests. So it isn't working fine. It's not responding because it hasn't (better said can't) complete processing of the request (sql is failing). Is there any way for me to recognize whether the mysql server is offline from the radius server? You can use buffered-sql virtual server to deal with this - when database goes down NAS will get the response and accounting data will keep on piling up in the detail file until database is back on line. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Freeradius + MySQL problem
hi, first of all, i thank all people who are giving thier time to help.
before i subscribe here and post my email, i am searching around in
internet since a week
and trying my best to solve it, i have learned many things,but there is one
problem i cannot get it solved.
i am trying to make hotspot for some building, i choosed:
Freeradius + Mysql = running on 1 computer (ubuntu server 8.10) as backend
server
and CoovaAP on WRT54GL sending user credentials to backend server for
authentication
my configs (default settings not showed, lines i changed showed)
freeradius radiusd.conf
.
. all default
.
log {
.
.
#at the end of log{
auth = yes
auth_badpass = yes
auth_goodpass = yes
}
modules {
.
.
.
$INCLUDE sql.conf #already there
$INCLUDE sql/mysql/counter.conf #already there
.
.
.
}
authorize{
preprocess
chap
mschap
suffix
eap
sql #if i comment out sql and use file, it works, i recive
Packet-Accept, with SQL see the pap warning in debug text
pap
}
accounting{
detail
sql
}
session{
sql
}
==
clients.conf
client localhost {
ipaddr = 127.0.0.1
secret = clientradsec36365
require_message_authenticator = no
nastype = other
}
==
sql.conf
sql {
database = mysql
driver = rlm_sql_${database}
server = localhost
login = radius
password = frsqldblogin36365
radius_db = radius
.
.
.
sqltrace = yes
sqltracefile = ${logdir}/sqltrace.sql
.
.
}
@@@
/etc/freeradius/sql/mysql/schema.sql and nas.sql has been imported into
mysql radius database, rad...@localhost user granted all on radius.*
dummy data in tables:
mysql SELECT * FROM radcheck;
++--+++---+
| id | username | attribute | op | value |
++--+++---+
| 1 | obaid| Cleartext-Password | := | 36365 |
++--+++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radusergroup;
+--+---+--+
| username | groupname | priority |
+--+---+--+
| obaid| hotspot |0 |
+--+---+--+
1 row in set (0.01 sec)
mysql SELECT * FROM radgroupcheck;
++---+---++---+
| id | groupname | attribute | op | value |
++---+---++---+
| 2 | hotspot | Auth-Type | := | Local |
++---+---++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radreply;
++--+---++---+
| id | username | attribute | op | value |
++--+---++---+
| 1 | obaid| Reply-Message | := | Hello |
++--+---++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radgroupreply;
++---+-++-+
| id | groupname | attribute | op | value |
++---+-++-+
| 1 | hotspot | Framed-Protocol | := | PPP |
| 2 | hotspot | Service-Type| := | Framed-User |
++---+-++-+
2 rows in set (0.00 sec)
@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#$
now when running /usr/sbin/freeradius -X and send auth request with radtest
i get
radtest obaid 36365 localhost 1812 clientradsec36365
Sending Access-Request of id 96 to 127.0.0.1 port 1812
User-Name = obaid
User-Password = 36365
NAS-IP-Address = 192.168.1.100
NAS-Port = 1812
rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=96,
length=20
freeradius -X:
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1 port 40386, id=96,
length=57
User-Name = obaid
User-Password = 36365
NAS-IP-Address = 192.168.1.100
NAS-Port = 1812
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = obaid, looking up realm NULL
[suffix] No such realm NULL
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No known good password found for the user. Authentication
may fail because of this.
++[pap] returns noop
No authenticate method (Auth-Type) configuration found for the request:
Rejecting the user
Failed to authenticate the user.
Re: Freeradius + MySQL problem
Post the entire debug from start to finish and as well as some tests. The
first whack of debug tells you how freeradius is parsing your config.
Once you have that done we should be able to figure where the issue lie.
Take Care,
Leigh
On Fri, Jan 16, 2009 at 8:49 AM, obaid ghaznawi ona...@gmail.com wrote:
hi, first of all, i thank all people who are giving thier time to help.
before i subscribe here and post my email, i am searching around in
internet since a week
and trying my best to solve it, i have learned many things,but there is one
problem i cannot get it solved.
i am trying to make hotspot for some building, i choosed:
Freeradius + Mysql = running on 1 computer (ubuntu server 8.10) as backend
server
and CoovaAP on WRT54GL sending user credentials to backend server for
authentication
my configs (default settings not showed, lines i changed showed)
freeradius radiusd.conf
.
. all default
.
log {
.
.
#at the end of log{
auth = yes
auth_badpass = yes
auth_goodpass = yes
}
modules {
.
.
.
$INCLUDE sql.conf #already there
$INCLUDE sql/mysql/counter.conf #already there
.
.
.
}
authorize{
preprocess
chap
mschap
suffix
eap
sql #if i comment out sql and use file, it works, i recive
Packet-Accept, with SQL see the pap warning in debug text
pap
}
accounting{
detail
sql
}
session{
sql
}
==
clients.conf
client localhost {
ipaddr = 127.0.0.1
secret = clientradsec36365
require_message_authenticator = no
nastype = other
}
==
sql.conf
sql {
database = mysql
driver = rlm_sql_${database}
server = localhost
login = radius
password = frsqldblogin36365
radius_db = radius
.
.
.
sqltrace = yes
sqltracefile = ${logdir}/sqltrace.sql
.
.
}
@@@
/etc/freeradius/sql/mysql/schema.sql and nas.sql has been imported into
mysql radius database, rad...@localhost user granted all on radius.*
dummy data in tables:
mysql SELECT * FROM radcheck;
++--+++---+
| id | username | attribute | op | value |
++--+++---+
| 1 | obaid| Cleartext-Password | := | 36365 |
++--+++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radusergroup;
+--+---+--+
| username | groupname | priority |
+--+---+--+
| obaid| hotspot |0 |
+--+---+--+
1 row in set (0.01 sec)
mysql SELECT * FROM radgroupcheck;
++---+---++---+
| id | groupname | attribute | op | value |
++---+---++---+
| 2 | hotspot | Auth-Type | := | Local |
++---+---++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radreply;
++--+---++---+
| id | username | attribute | op | value |
++--+---++---+
| 1 | obaid| Reply-Message | := | Hello |
++--+---++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radgroupreply;
++---+-++-+
| id | groupname | attribute | op | value |
++---+-++-+
| 1 | hotspot | Framed-Protocol | := | PPP |
| 2 | hotspot | Service-Type| := | Framed-User |
++---+-++-+
2 rows in set (0.00 sec)
@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#$
now when running /usr/sbin/freeradius -X and send auth request with radtest
i get
radtest obaid 36365 localhost 1812 clientradsec36365
Sending Access-Request of id 96 to 127.0.0.1 port 1812
User-Name = obaid
User-Password = 36365
NAS-IP-Address = 192.168.1.100
NAS-Port = 1812
rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=96,
length=20
freeradius -X:
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1 port 40386, id=96,
length=57
User-Name = obaid
User-Password = 36365
NAS-IP-Address = 192.168.1.100
NAS-Port = 1812
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = obaid, looking up realm NULL
Re: Freeradius + MySQL problem
Just a stupid question.
Is your freeradius compiled with mysql support?
Do you have rlm_sql_mysql in your module dir?
Regards
Luciano
On Fri, Jan 16, 2009 at 11:49 AM, obaid ghaznawi ona...@gmail.com wrote:
hi, first of all, i thank all people who are giving thier time to help.
before i subscribe here and post my email, i am searching around in
internet since a week
and trying my best to solve it, i have learned many things,but there is one
problem i cannot get it solved.
i am trying to make hotspot for some building, i choosed:
Freeradius + Mysql = running on 1 computer (ubuntu server 8.10) as backend
server
and CoovaAP on WRT54GL sending user credentials to backend server for
authentication
my configs (default settings not showed, lines i changed showed)
freeradius radiusd.conf
.
. all default
.
log {
.
.
#at the end of log{
auth = yes
auth_badpass = yes
auth_goodpass = yes
}
modules {
.
.
.
$INCLUDE sql.conf #already there
$INCLUDE sql/mysql/counter.conf #already there
.
.
.
}
authorize{
preprocess
chap
mschap
suffix
eap
sql #if i comment out sql and use file, it works, i recive
Packet-Accept, with SQL see the pap warning in debug text
pap
}
accounting{
detail
sql
}
session{
sql
}
==
clients.conf
client localhost {
ipaddr = 127.0.0.1
secret = clientradsec36365
require_message_authenticator = no
nastype = other
}
==
sql.conf
sql {
database = mysql
driver = rlm_sql_${database}
server = localhost
login = radius
password = frsqldblogin36365
radius_db = radius
.
.
.
sqltrace = yes
sqltracefile = ${logdir}/sqltrace.sql
.
.
}
@@@
/etc/freeradius/sql/mysql/schema.sql and nas.sql has been imported into
mysql radius database, rad...@localhost user granted all on radius.*
dummy data in tables:
mysql SELECT * FROM radcheck;
++--+++---+
| id | username | attribute | op | value |
++--+++---+
| 1 | obaid| Cleartext-Password | := | 36365 |
++--+++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radusergroup;
+--+---+--+
| username | groupname | priority |
+--+---+--+
| obaid| hotspot |0 |
+--+---+--+
1 row in set (0.01 sec)
mysql SELECT * FROM radgroupcheck;
++---+---++---+
| id | groupname | attribute | op | value |
++---+---++---+
| 2 | hotspot | Auth-Type | := | Local |
++---+---++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radreply;
++--+---++---+
| id | username | attribute | op | value |
++--+---++---+
| 1 | obaid| Reply-Message | := | Hello |
++--+---++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radgroupreply;
++---+-++-+
| id | groupname | attribute | op | value |
++---+-++-+
| 1 | hotspot | Framed-Protocol | := | PPP |
| 2 | hotspot | Service-Type| := | Framed-User |
++---+-++-+
2 rows in set (0.00 sec)
@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#$
now when running /usr/sbin/freeradius -X and send auth request with radtest
i get
radtest obaid 36365 localhost 1812 clientradsec36365
Sending Access-Request of id 96 to 127.0.0.1 port 1812
User-Name = obaid
User-Password = 36365
NAS-IP-Address = 192.168.1.100
NAS-Port = 1812
rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=96,
length=20
freeradius -X:
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1 port 40386, id=96,
length=57
User-Name = obaid
User-Password = 36365
NAS-IP-Address = 192.168.1.100
NAS-Port = 1812
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = obaid, looking up realm NULL
[suffix] No such realm NULL
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap]
Re: Freeradius + MySQL problem
I would assume that it is, otherwise it would not start with the INCLUDE
uncommented and sql set in authorize.
On Fri, Jan 16, 2009 at 9:18 AM, Luciano Afranllie listas.luaf...@gmail.com
wrote:
Just a stupid question.
Is your freeradius compiled with mysql support?
Do you have rlm_sql_mysql in your module dir?
Regards
Luciano
On Fri, Jan 16, 2009 at 11:49 AM, obaid ghaznawi ona...@gmail.com wrote:
hi, first of all, i thank all people who are giving thier time to help.
before i subscribe here and post my email, i am searching around in
internet since a week
and trying my best to solve it, i have learned many things,but there is
one
problem i cannot get it solved.
i am trying to make hotspot for some building, i choosed:
Freeradius + Mysql = running on 1 computer (ubuntu server 8.10) as
backend
server
and CoovaAP on WRT54GL sending user credentials to backend server for
authentication
my configs (default settings not showed, lines i changed showed)
freeradius radiusd.conf
.
. all default
.
log {
.
.
#at the end of log{
auth = yes
auth_badpass = yes
auth_goodpass = yes
}
modules {
.
.
.
$INCLUDE sql.conf #already there
$INCLUDE sql/mysql/counter.conf #already there
.
.
.
}
authorize{
preprocess
chap
mschap
suffix
eap
sql #if i comment out sql and use file, it works, i recive
Packet-Accept, with SQL see the pap warning in debug text
pap
}
accounting{
detail
sql
}
session{
sql
}
==
clients.conf
client localhost {
ipaddr = 127.0.0.1
secret = clientradsec36365
require_message_authenticator = no
nastype = other
}
==
sql.conf
sql {
database = mysql
driver = rlm_sql_${database}
server = localhost
login = radius
password = frsqldblogin36365
radius_db = radius
.
.
.
sqltrace = yes
sqltracefile = ${logdir}/sqltrace.sql
.
.
}
@@@
/etc/freeradius/sql/mysql/schema.sql and nas.sql has been imported into
mysql radius database, rad...@localhost user granted all on radius.*
dummy data in tables:
mysql SELECT * FROM radcheck;
++--+++---+
| id | username | attribute | op | value |
++--+++---+
| 1 | obaid| Cleartext-Password | := | 36365 |
++--+++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radusergroup;
+--+---+--+
| username | groupname | priority |
+--+---+--+
| obaid| hotspot |0 |
+--+---+--+
1 row in set (0.01 sec)
mysql SELECT * FROM radgroupcheck;
++---+---++---+
| id | groupname | attribute | op | value |
++---+---++---+
| 2 | hotspot | Auth-Type | := | Local |
++---+---++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radreply;
++--+---++---+
| id | username | attribute | op | value |
++--+---++---+
| 1 | obaid| Reply-Message | := | Hello |
++--+---++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radgroupreply;
++---+-++-+
| id | groupname | attribute | op | value |
++---+-++-+
| 1 | hotspot | Framed-Protocol | := | PPP |
| 2 | hotspot | Service-Type| := | Framed-User |
++---+-++-+
2 rows in set (0.00 sec)
@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#$
now when running /usr/sbin/freeradius -X and send auth request with
radtest
i get
radtest obaid 36365 localhost 1812 clientradsec36365
Sending Access-Request of id 96 to 127.0.0.1 port 1812
User-Name = obaid
User-Password = 36365
NAS-IP-Address = 192.168.1.100
NAS-Port = 1812
rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=96,
length=20
freeradius -X:
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1 port 40386, id=96,
length=57
User-Name = obaid
Re: Freeradius + MySQL problem
Yes. Post the whole debug including startup. Something is not right here.
authorize is not in radiusd.conf in 2.x.
Ivan Kalik
Kalik Informatika ISP
Dana 16/1/2009, Leigh Martell leigh.mart...@gmail.com piše:
Post the entire debug from start to finish and as well as some tests. The
first whack of debug tells you how freeradius is parsing your config.
Once you have that done we should be able to figure where the issue lie.
Take Care,
Leigh
On Fri, Jan 16, 2009 at 8:49 AM, obaid ghaznawi ona...@gmail.com wrote:
hi, first of all, i thank all people who are giving thier time to help.
before i subscribe here and post my email, i am searching around in
internet since a week
and trying my best to solve it, i have learned many things,but there is one
problem i cannot get it solved.
i am trying to make hotspot for some building, i choosed:
Freeradius + Mysql = running on 1 computer (ubuntu server 8.10) as backend
server
and CoovaAP on WRT54GL sending user credentials to backend server for
authentication
my configs (default settings not showed, lines i changed showed)
freeradius radiusd.conf
.
. all default
.
log {
.
.
#at the end of log{
auth = yes
auth_badpass = yes
auth_goodpass = yes
}
modules {
.
.
.
$INCLUDE sql.conf #already there
$INCLUDE sql/mysql/counter.conf #already there
.
.
.
}
authorize{
preprocess
chap
mschap
suffix
eap
sql #if i comment out sql and use file, it works, i recive
Packet-Accept, with SQL see the pap warning in debug text
pap
}
accounting{
detail
sql
}
session{
sql
}
==
clients.conf
client localhost {
ipaddr = 127.0.0.1
secret = clientradsec36365
require_message_authenticator = no
nastype = other
}
==
sql.conf
sql {
database = mysql
driver = rlm_sql_${database}
server = localhost
login = radius
password = frsqldblogin36365
radius_db = radius
.
.
.
sqltrace = yes
sqltracefile = ${logdir}/sqltrace.sql
.
.
}
@@@
/etc/freeradius/sql/mysql/schema.sql and nas.sql has been imported into
mysql radius database, rad...@localhost user granted all on radius.*
dummy data in tables:
mysql SELECT * FROM radcheck;
++--+++---+
| id | username | attribute | op | value |
++--+++---+
| 1 | obaid| Cleartext-Password | := | 36365 |
++--+++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radusergroup;
+--+---+--+
| username | groupname | priority |
+--+---+--+
| obaid| hotspot |0 |
+--+---+--+
1 row in set (0.01 sec)
mysql SELECT * FROM radgroupcheck;
++---+---++---+
| id | groupname | attribute | op | value |
++---+---++---+
| 2 | hotspot | Auth-Type | := | Local |
++---+---++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radreply;
++--+---++---+
| id | username | attribute | op | value |
++--+---++---+
| 1 | obaid| Reply-Message | := | Hello |
++--+---++---+
1 row in set (0.00 sec)
mysql SELECT * FROM radgroupreply;
++---+-++-+
| id | groupname | attribute | op | value |
++---+-++-+
| 1 | hotspot | Framed-Protocol | := | PPP |
| 2 | hotspot | Service-Type| := | Framed-User |
++---+-++-+
2 rows in set (0.00 sec)
@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#...@#$@#$
now when running /usr/sbin/freeradius -X and send auth request with radtest
i get
radtest obaid 36365 localhost 1812 clientradsec36365
Sending Access-Request of id 96 to 127.0.0.1 port 1812
User-Name = obaid
User-Password = 36365
NAS-IP-Address = 192.168.1.100
NAS-Port = 1812
rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=96,
length=20
freeradius -X:
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1 port 40386, id=96,
length=57
User-Name = obaid
User-Password = 36365
NAS-IP-Address =
Re: FreeRadius Mysql Problem Solaris
Hi, crle -u -v -l /usr/local/ssl/lib:/usr/local/lib:/usr/local/BerkeleyDB.4.2/lib:/etc/lib:/usr/share/l ib:/etc/security/lib:/usr/sfw/lib:/usr/openwin/lib:/usr/css/lib:/usr/xpg4/lib:/usr/dt/lib:/usr/loca l/mysql/lib/mysql its cant find development headers - ensure that the --with-openssl-includes points to the right PATH where OpenSSL includes are waiting to be found. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius Mysql Problem Solaris
Hi, I tried to install FreeeRadius 2 on Solaris 10_X86. But it got error on make here is the error. firstly, this is 2.0.3 - use 2.0.5 secondly, dd you specify the location / PATH for the mysql link libraries on the configure line? are you building as a static or dynamic? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius Mysql Problem Solaris
Hi Thanks for your reply. After using 2.0.5 problem is solved but there is another problem and that is rlm_eap_tls checking for OpenSSL support... no configure: WARNING: silently not building rlm_eap_tls. configure: WARNING: FAILURE: rlm_eap_tls requires: OpenSSL. configure: creating ./config.status I have installed openssl from sunfreeware.com and the path is (/usr/local/ssl). I don't know why freeradius did not found ssl library. Please tell me what should i do? Regards, Umar Draz A.L.M.Buxey wrote: Hi, I tried to install FreeeRadius 2 on Solaris 10_X86. But it got error on make here is the error. firstly, this is 2.0.3 - use 2.0.5 secondly, dd you specify the location / PATH for the mysql link libraries on the configure line? are you building as a static or dynamic? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- View this message in context: http://www.nabble.com/FreeRadius-Mysql-Problem-Solaris-tp18126620p18132739.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius Mysql Problem Solaris
Umar wrote: Thanks for your reply. After using 2.0.5 problem is solved but there is another problem and that is rlm_eap_tls checking for OpenSSL support... no ... I have installed openssl from sunfreeware.com and the path is (/usr/local/ssl). I don't know why freeradius did not found ssl library. Because it is a *compiler* issue, and not a *freeradius* issue. You put SSL into a place where the compiler and/or dynamic linker can't find it. You likely need to add /usr/local/ssl to the dynamic linker path. See man crle. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius Mysql Problem Solaris
hi Dear Alen I already have done it crle -u -v -l /usr/local/ssl/lib:/usr/local/lib:/usr/local/BerkeleyDB.4.2/lib:/etc/lib:/usr/share/l ib:/etc/security/lib:/usr/sfw/lib:/usr/openwin/lib:/usr/css/lib:/usr/xpg4/lib:/usr/dt/lib:/usr/loca l/mysql/lib/mysql Regards, Umar Alan DeKok-4 wrote: Umar wrote: Thanks for your reply. After using 2.0.5 problem is solved but there is another problem and that is rlm_eap_tls checking for OpenSSL support... no ... I have installed openssl from sunfreeware.com and the path is (/usr/local/ssl). I don't know why freeradius did not found ssl library. Because it is a *compiler* issue, and not a *freeradius* issue. You put SSL into a place where the compiler and/or dynamic linker can't find it. You likely need to add /usr/local/ssl to the dynamic linker path. See man crle. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- View this message in context: http://www.nabble.com/FreeRadius-Mysql-Problem-Solaris-tp18126620p18147768.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeRadius Mysql Problem Solaris
I tried to install FreeeRadius 2 on Solaris 10_X86. But it got error on make here is the error. localtime_r 0x153a /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_time.o) time0x1528 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_time.o) __divdi30x16ed /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_time.o) realloc 0x1c /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_realloc.o) getcwd 0x35 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_getwd.o) chdir 0x11a /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_getwd.o) fgets 0x2b8 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(default.o) fgets 0x603 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(default.o) printf 0x10a6 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(default.o) printf 0x10cb /usr/local/mysql/lib/mysql/libmysqlclient_r.a(default.o) puts0x10e3 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(default.o) puts0x1248 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(default.o) puts0x12b0 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(default.o) puts0x1322 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(default.o) puts0x13e5 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(default.o) finite 0x1e6 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(strtod.o) strrchr 0xf /usr/local/mysql/lib/mysql/libmysqlclient_r.a(mf_fn_ext.o) fileno 0x1a /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_fopen.o) fileno 0x11e /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_fopen.o) fileno 0x142 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_fopen.o) fileno 0x174 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_fopen.o) fclose 0x24 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_fopen.o) fopen64 0x108 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_fopen.o) fdopen 0x2ab /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_fopen.o) fdopen 0x33e /usr/local/mysql/lib/mysql/libmysqlclient_r.a(my_fopen.o) __fixunssfdi0x3aa4 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(libmysql.o) __fixunsdfdi0x3b4e /usr/local/mysql/lib/mysql/libmysqlclient_r.a(libmysql.o) __fixunsdfdi0x3fd6 /usr/local/mysql/lib/mysql/libmysqlclient_r.a(libmysql.o) ld: fatal: relocations remain against allocatable but non-writable sections collect2: ld returned 1 exit status gmake[10]: *** [rlm_sql_mysql.la] Error 1 gmake[10]: Leaving directory `/export/home/umar/freeradius-server-2.0.3/src/modules/rlm_sql/drivers/rlm_sql_mysql' gmake[9]: *** [common] Error 2 gmake[9]: Leaving directory `/export/home/umar/freeradius-server-2.0.3/src/modules/rlm_sql/drivers' gmake[8]: *** [all] Error 2 gmake[8]: Leaving directory `/export/home/umar/freeradius-server-2.0.3/src/modules/rlm_sql/drivers' gmake[7]: *** [common] Error 2 gmake[7]: Leaving directory `/export/home/umar/freeradius-server-2.0.3/src/modules/rlm_sql' gmake[6]: *** [build-module] Error 2 gmake[6]: Leaving directory `/export/home/umar/freeradius-server-2.0.3/src/modules/rlm_sql' gmake[5]: *** [common] Error 2 gmake[5]: Leaving directory `/export/home/umar/freeradius-server-2.0.3/src/modules' gmake[4]: *** [all] Error 2 gmake[4]: Leaving directory `/export/home/umar/freeradius-server-2.0.3/src/modules' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/export/home/umar/freeradius-server-2.0.3/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/export/home/umar/freeradius-server-2.0.3/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/export/home/umar/freeradius-server-2.0.3' make: *** [all] Error 2 mysql 5.0.51a is install through source. Please help me what should i do? -- View this message in context: http://www.nabble.com/FreeRadius-Mysql-Problem-Solaris-tp18126620p18126620.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Radius [EMAIL PROTECTED] wrote: A recent post explained how to fix this. I suggest going back, and reading all of the messages in this thread. The uncomment of the lines under sql.conf and putting the lower_user lower_pass to no did not fix it. Because that's not the problem. The problem is that the MySQL queries are case-insensitive, and you don't want that. So you have to do case-insensitive queries in MySQL. Read the MySQL documentation for details. Or, go back and read ALL of the messages in this thread. ALL. I can't mess with mysql. That was installed by me and it worked. Used your mysql import and that's the way it's been for over a year. Never been touched since it's installation. You don't have to touch MySQL. One of the reasons you're having so much difficulty solving the problem is that you have a hard time following instructions. So no never needed a test server in 11 years of doing internet. You've been either very lucky, or you don't mind losing data, or you don't mind shutting customers out for a time. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Some log in errors Warning: Found 2 auth-types on request for user 'rniclh' Any idea what this is about? I seem to be getting this on most of the logins. Even the ones that work. rlm_unix: Attribute User-Password is required for authentication. Cannot use CHAP-Password. Login incorrect: [rniclh/CHAP-Password] (from client usa1 port 228 cli 5208778389) rad_recv: Access-Request packet from host 216.127.146.29:52982, id=50, length=213 User-Name = [EMAIL PROTECTED] CHAP-Password = 0x014d582cee62362d9063da8b99c2f83c94 Why is it coming through like this? NAS-IP-Address = 63.215.26.191 NAS-Port = 228 Service-Type = Framed-User Framed-Protocol = PPP Ascend-Data-Rate = 31200 Ascend-Calling-Id-Type-Of-Num = Unknown Ascend-Calling-Id-Number-Plan = Unknown Ascend-Xmit-Rate = 46667 Called-Station-Id = 5208294055 Calling-Station-Id = 5208778389 NAS-Identifier = nas8.tcs1.Level3.net Acct-Session-Id = 436987031 NAS-Port-Type = Async Ascend-NAS-Port-Format = 2_4_5_5 Attr-102 = 0x6c33 rlm_chap: Setting 'Auth-Type := CHAP' Warning: Found 2 auth-types on request for user 'rniclh' But when I do it from another system and radtest it seems to work. rad_recv: Access-Request packet from host 64.240.77.3:33574, id=228, length=73 User-Name = [EMAIL PROTECTED] User-Password = deleted NAS-IP-Address = 255.255.255.255 NAS-Port = 500 rlm_sql (sql): Reserving sql socket id: 4 Alan DeKok wrote: Radius [EMAIL PROTECTED] wrote: I re-ran the install as you said below. I think it's working, I just have to get used to adding /opt/freeradius in the command lines. Been watching with the radiusd -x and can even run a radtest Exactly. The problem, as evidenced by your multiple recent emails, is that you weren't sure what you had done, or what you were doing. As a result, your progress was less than speedy. In general, you NEVER upgrade production servers until you've upgraded your testing server, and validated the configuration. You do have a testing server, don't you? Or do you always make updates to your live config, and hope it doesn't break anything? But now I'm back to the original problem to deny anything with UPPER CASE letters to prevent double billing by our provider. A recent post explained how to fix this. I suggest going back, and reading all of the messages in this thread. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Radius [EMAIL PROTECTED] wrote: After updated to 1.04 and making the changes again what you recommend below and when I try to run radtest I get all kinds of these dup error. radclient: dict_init: /usr/local/radius/share/freeradius/dictionary.acc[110]: dict_addvalue: Duplicate value name Administrative-reset for attribute Acc-Reason-Code You need to point /etc/raddb/dictionary to the new 1.0.4 dictionaries.q See raddb/dictionary in the 1.0.4 source distribution. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
OK,, I'm confused $ cp ./raddb/dictionary /etc/raddb/dictionary I have a directory /etc/raddb/dictonary Do I also need to create ./raddb/dictonary ? Thanks Alan DeKok wrote: Radius [EMAIL PROTECTED] wrote: After updated to 1.04 and making the changes again what you recommend below and when I try to run radtest I get all kinds of these dup error. radclient: dict_init: /usr/local/radius/share/freeradius/dictionary.acc[110]: dict_addvalue: Duplicate value name Administrative-reset for attribute Acc-Reason-Code You need to point /etc/raddb/dictionary to the new 1.0.4 dictionaries.q See raddb/dictionary in the 1.0.4 source distribution. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Alan DeKok wrote: Radius [EMAIL PROTECTED] wrote: After updated to 1.04 and making the changes again what you recommend below and when I try to run radtest I get all kinds of these dup error. radclient: dict_init: /usr/local/radius/share/freeradius/dictionary.acc[110]: dict_addvalue: Duplicate value name Administrative-reset for attribute Acc-Reason-Code You need to point /etc/raddb/dictionary to the new 1.0.4 dictionaries.q See raddb/dictionary in the 1.0.4 source distribution. it says in there that they are at /usr/local/share/freeradius/ and they are there. I did the default installation. When I edit and delete the dups, it just keeps going one file after the other. I'll have to pull 0.93 from an old backup. This seems to be getting worse as I try to make adjustments. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Well, actually it was ver 1.01 But after loading the backup, I now get the same errors. Well, I guess I just hosed a production server now. It was all working fine before I tried to make the update. That will teach me to fix something not broke. Radius wrote: Alan DeKok wrote: Radius [EMAIL PROTECTED] wrote: After updated to 1.04 and making the changes again what you recommend below and when I try to run radtest I get all kinds of these dup error. radclient: dict_init: /usr/local/radius/share/freeradius/dictionary.acc[110]: dict_addvalue: Duplicate value name Administrative-reset for attribute Acc-Reason-Code You need to point /etc/raddb/dictionary to the new 1.0.4 dictionaries.q See raddb/dictionary in the 1.0.4 source distribution. it says in there that they are at /usr/local/share/freeradius/ and they are there. I did the default installation. When I edit and delete the dups, it just keeps going one file after the other. I'll have to pull 0.93 from an old backup. This seems to be getting worse as I try to make adjustments. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
I did get back to 0.93 but I still get the same errors with a local radtest. But at least people can log in and get authenticated. Why did they have to mess with directories. It was working fine where they had it, now this system is totally hosed because I can find what else they embedded in the system. I just replaced all the /usr/local /etc directories from the back up and that crazy error is still there. It's saying radtest can't read the radiusd.conf file. Alan DeKok wrote: Radius [EMAIL PROTECTED] wrote: After updated to 1.04 and making the changes again what you recommend below and when I try to run radtest I get all kinds of these dup error. radclient: dict_init: /usr/local/radius/share/freeradius/dictionary.acc[110]: dict_addvalue: Duplicate value name Administrative-reset for attribute Acc-Reason-Code You need to point /etc/raddb/dictionary to the new 1.0.4 dictionaries.q See raddb/dictionary in the 1.0.4 source distribution. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Radius [EMAIL PROTECTED] wrote: I have a directory /etc/raddb/dictonary FreeRADIUS never created that. It should be a file. See raddb/dictionary in the 1.0.4 source distribution. it says in there that they are at /usr/local/share/freeradius/ and they are there. I did the default installation. What you missed is that the dictionary in /etc/raddb/dictionary should be nothing more than a reference to the /usr/local/share/freeradius files. When I edit and delete the dups, it just keeps going one file after the other. Don't edit the dictionaries! This whole problem came about because when you upgraded the make install process told you what you would have to do next, and you ignored it. You then went and edited mor ethings without understanding them, making random changes in the hopes that something would work. I'll have to pull 0.93 from an old backup. This seems to be getting worse as I try to make adjustments. Exactly. Your adjustments are based on incomplete knowledge, and as a result, are wrong. The simple solution is to re-install 1.0.4, but this time do: $ ./configure --prefix=/opt/freeradius $ make $ make install Since you don't already have a /opt/freeradius directory, it will make one, install itself, and the version of the server in /opt/freeradius WILL WORK. You can then update the configuration files in /opt/freeradius/etc/raddb to match your local configuration. And DON'T EDIT THE DICTIONARY FILES. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Alan DeKok wrote: Radius [EMAIL PROTECTED] wrote: I have a directory /etc/raddb/dictonary FreeRADIUS never created that. It should be a file. It was a file. I should have been more clear. See raddb/dictionary in the 1.0.4 source distribution. it says in there that they are at /usr/local/share/freeradius/ and they are there. I did the default installation. What you missed is that the dictionary in /etc/raddb/dictionary should be nothing more than a reference to the /usr/local/share/freeradius files. Yep it did. When I edit and delete the dups, it just keeps going one file after the other. Exactly. Your adjustments are based on incomplete knowledge, and as a result, are wrong. The simple solution is to re-install 1.0.4, but this time do: $ ./configure --prefix=/opt/freeradius $ make $ make install This is what I did do the first time when all the troubles started. The second and third time I installed, I left it out figuring that caused the problem. Since you don't already have a /opt/freeradius directory, it will make one, install itself, and the version of the server in /opt/freeradius WILL WORK. Nope, it never got created there. I checked. Nothing in that directory. Yes I'm logged in as user root. You can then update the configuration files in /opt/freeradius/etc/raddb to match your local configuration. And DON'T EDIT THE DICTIONARY FILES. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Sorry, I take that back I used ./configure --localstatedir=/var --sysconfdir=/etc because when I went to 0.93 last year I was using Cistron. Alan DeKok wrote: Radius [EMAIL PROTECTED] wrote: I have a directory /etc/raddb/dictonary FreeRADIUS never created that. It should be a file. See raddb/dictionary in the 1.0.4 source distribution. it says in there that they are at /usr/local/share/freeradius/ and they are there. I did the default installation. What you missed is that the dictionary in /etc/raddb/dictionary should be nothing more than a reference to the /usr/local/share/freeradius files. When I edit and delete the dups, it just keeps going one file after the other. Don't edit the dictionaries! This whole problem came about because when you upgraded the make install process told you what you would have to do next, and you ignored it. You then went and edited mor ethings without understanding them, making random changes in the hopes that something would work. I'll have to pull 0.93 from an old backup. This seems to be getting worse as I try to make adjustments. Exactly. Your adjustments are based on incomplete knowledge, and as a result, are wrong. The simple solution is to re-install 1.0.4, but this time do: $ ./configure --prefix=/opt/freeradius $ make $ make install Since you don't already have a /opt/freeradius directory, it will make one, install itself, and the version of the server in /opt/freeradius WILL WORK. You can then update the configuration files in /opt/freeradius/etc/raddb to match your local configuration. And DON'T EDIT THE DICTIONARY FILES. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
I re-ran the install as you said below. I think it's working, I just have to get used to adding /opt/freeradius in the command lines. Been watching with the radiusd -x and can even run a radtest But now I'm back to the original problem to deny anything with UPPER CASE letters to prevent double billing by our provider. Alan DeKok wrote: Radius [EMAIL PROTECTED] wrote: I have a directory /etc/raddb/dictonary FreeRADIUS never created that. It should be a file. See raddb/dictionary in the 1.0.4 source distribution. it says in there that they are at /usr/local/share/freeradius/ and they are there. I did the default installation. What you missed is that the dictionary in /etc/raddb/dictionary should be nothing more than a reference to the /usr/local/share/freeradius files. When I edit and delete the dups, it just keeps going one file after the other. Don't edit the dictionaries! This whole problem came about because when you upgraded the make install process told you what you would have to do next, and you ignored it. You then went and edited mor ethings without understanding them, making random changes in the hopes that something would work. I'll have to pull 0.93 from an old backup. This seems to be getting worse as I try to make adjustments. Exactly. Your adjustments are based on incomplete knowledge, and as a result, are wrong. The simple solution is to re-install 1.0.4, but this time do: $ ./configure --prefix=/opt/freeradius $ make $ make install Since you don't already have a /opt/freeradius directory, it will make one, install itself, and the version of the server in /opt/freeradius WILL WORK. You can then update the configuration files in /opt/freeradius/etc/raddb to match your local configuration. And DON'T EDIT THE DICTIONARY FILES. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Radius [EMAIL PROTECTED] wrote: I re-ran the install as you said below. I think it's working, I just have to get used to adding /opt/freeradius in the command lines. Been watching with the radiusd -x and can even run a radtest Exactly. The problem, as evidenced by your multiple recent emails, is that you weren't sure what you had done, or what you were doing. As a result, your progress was less than speedy. In general, you NEVER upgrade production servers until you've upgraded your testing server, and validated the configuration. You do have a testing server, don't you? Or do you always make updates to your live config, and hope it doesn't break anything? But now I'm back to the original problem to deny anything with UPPER CASE letters to prevent double billing by our provider. A recent post explained how to fix this. I suggest going back, and reading all of the messages in this thread. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Alan DeKok wrote: Radius [EMAIL PROTECTED] wrote: I re-ran the install as you said below. I think it's working, I just have to get used to adding /opt/freeradius in the command lines. Been watching with the radiusd -x and can even run a radtest Exactly. The problem, as evidenced by your multiple recent emails, is that you weren't sure what you had done, or what you were doing. As a result, your progress was less than speedy. In general, you NEVER upgrade production servers until you've upgraded your testing server, and validated the configuration. You do have a testing server, don't you? Or do you always make updates to your live config, and hope it doesn't break anything? But now I'm back to the original problem to deny anything with UPPER CASE letters to prevent double billing by our provider. A recent post explained how to fix this. I suggest going back, and reading all of the messages in this thread. The uncomment of the lines under sql.conf and putting the lower_user lower_pass to no did not fix it. It still allows UPPER case logins. I can't mess with mysql. That was installed by me and it worked. Used your mysql import and that's the way it's been for over a year. Never been touched since it's installation. Radius is the only thing that uses the mysql setup. Nothing else does. The only reason I updated was I was told I needed to for this to work or I would have not done it. Last year when I went with FreeRadius was because I was told I needed to. Cistron did not play well with mysql, and I didn't want to be adding all those people to the users file for the chap logins. But this time those errors came up when I went back to a previous install. Other wise I don't do enough changes to our server for a test machine. This is the first time in a year I touched anything on the server at all except to get the realms working back in March. I have mirror backups no older than 24 hours, so I was to a point of putting in the mirror drive in and reboot and have everything back where it was yesterday with the only loss being emails and one days accounting. Very easy to update. Mount the old, move the mail/billing files over. I could have crashed the system and be running again in less than 10 minutes. The servers only do radius/web/email/billing/support backroom. Nothing else. Usually when I get ready to change the kernel installation, I then build a full new server and install it and move things over to it that way after it burns for 6 month's. New machines always break the first 4 month's if they are going to break at all. At the end of two years I pull and replace. These turn in to kids machines. They usually go bad in 6 month's or so. I think I just about figured MTF on the machines. Been doing it this way since the start in 1995. Never had a computer crash. Have had hard drives go bad, but have the mirror backups. I use all the same drives etc. I only have to do that once every couple years when I replace all the servers. Otherwise, I have not changed things that effects system operation. Any programs that I use are stand alone and they don't have anything to do with system operation so if they go wrong it's only the program that goes wrong not my system. They don't run as root. They are a hidden user that does those. Never needs to be root. The ones I write are only for my user billing and back room for our support people to read the different info/radius/billing files for each user and simple web pages but people offer those to me free so it's easy to test those first anyway. Even our signup scripts are 11 years old. Still use the same ones with minor adjustments when things went to shadow passwords. So no never needed a test server in 11 years of doing internet. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Freeradius/MySql problem
I currently run ver.0.9.3 I have MySql database that is used with FreeRadius. What were are having a problem with is that if the user logs in with UPPER-NAME or lower-name either one works. I have tried lower_user lower_pass before/after/no and the radius system still authenticates all UPPER-CASE. With this we are getting double billed by our wholesale provider because they run unix based also and it sees both as valid log ins because we authenticated them. When we built our MySql we use with the setup in FreeRadius. Has anyone else had this and how did you fix this to keep everyone lower case. Thanks Bob Ross - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
In the config file you can set it to force all lower case. I had this problem and solved it by changing it in the config. Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:10 PM Subject: [radius] Freeradius/MySql problem I currently run ver.0.9.3 I have MySql database that is used with FreeRadius. What were are having a problem with is that if the user logs in with UPPER-NAME or lower-name either one works. I have tried lower_user lower_pass before/after/no and the radius system still authenticates all UPPER-CASE. With this we are getting double billed by our wholesale provider because they run unix based also and it sees both as valid log ins because we authenticated them. When we built our MySql we use with the setup in FreeRadius. Has anyone else had this and how did you fix this to keep everyone lower case. Thanks Bob Ross - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
In the radius.conf under lower_user lower_pass I tried all three. before/after/no and they will still authenticate all UPPER CASE. What other config file are you talking about? Thanks Nick Marino wrote: In the config file you can set it to force all lower case. I had this problem and solved it by changing it in the config. Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:10 PM Subject: [radius] Freeradius/MySql problem I currently run ver.0.9.3 I have MySql database that is used with FreeRadius. What were are having a problem with is that if the user logs in with UPPER-NAME or lower-name either one works. I have tried lower_user lower_pass before/after/no and the radius system still authenticates all UPPER-CASE. With this we are getting double billed by our wholesale provider because they run unix based also and it sees both as valid log ins because we authenticated them. When we built our MySql we use with the setup in FreeRadius. Has anyone else had this and how did you fix this to keep everyone lower case. Thanks Bob Ross - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
OK, let me try this way, when our wholesale provider receives a realm, they know where to send the request. If the user sends [EMAIL PROTECTED] or [EMAIL PROTECTED] our radius regardless if I have lower_user before/after/no They will be authenticated either way. If we force it lower on our end, does not force lower on their end. It's a mess. They said only this month they were going to issue credits and that I needed to get my end to deny UPPER case logins. I set the lower_user lower and lower_pass to no and a user will all [EMAIL PROTECTED] will be authenticated. I guess mysql doesn't care if it's upper or lower. Nick Marino wrote: In the config file you can set it to force all lower case. I had this problem and solved it by changing it in the config. Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:10 PM Subject: [radius] Freeradius/MySql problem I currently run ver.0.9.3 I have MySql database that is used with FreeRadius. What were are having a problem with is that if the user logs in with UPPER-NAME or lower-name either one works. I have tried lower_user lower_pass before/after/no and the radius system still authenticates all UPPER-CASE. With this we are getting double billed by our wholesale provider because they run unix based also and it sees both as valid log ins because we authenticated them. When we built our MySql we use with the setup in FreeRadius. Has anyone else had this and how did you fix this to keep everyone lower case. Thanks Bob Ross - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Let me look at my files and find the exact entry. Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:36 PM Subject: Re: [radius] Freeradius/MySql problem In the radius.conf under lower_user lower_pass I tried all three. before/after/no and they will still authenticate all UPPER CASE. What other config file are you talking about? Thanks Nick Marino wrote: In the config file you can set it to force all lower case. I had this problem and solved it by changing it in the config. Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:10 PM Subject: [radius] Freeradius/MySql problem I currently run ver.0.9.3 I have MySql database that is used with FreeRadius. What were are having a problem with is that if the user logs in with UPPER-NAME or lower-name either one works. I have tried lower_user lower_pass before/after/no and the radius system still authenticates all UPPER-CASE. With this we are getting double billed by our wholesale provider because they run unix based also and it sees both as valid log ins because we authenticated them. When we built our MySql we use with the setup in FreeRadius. Has anyone else had this and how did you fix this to keep everyone lower case. Thanks Bob Ross - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
This is what I have and it works. Also there are some options in the sql.conf that relate to this make sure you have the right lines uncommented in there. Open sql.conf and search for lower. Are you sure their is not something in your realms section overriding this? # This is as close as we can get to case insensitivity. It is # the admin's job to ensure that the username on the auth # db side is *also* lowercase to make this work # # Default is 'no' (don't lowercase values) # Valid values = before / after / no # lower_user = before lower_pass = before Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:42 PM Subject: Re: [radius] Freeradius/MySql problem OK, let me try this way, when our wholesale provider receives a realm, they know where to send the request. If the user sends [EMAIL PROTECTED] or [EMAIL PROTECTED] our radius regardless if I have lower_user before/after/no They will be authenticated either way. If we force it lower on our end, does not force lower on their end. It's a mess. They said only this month they were going to issue credits and that I needed to get my end to deny UPPER case logins. I set the lower_user lower and lower_pass to no and a user will all [EMAIL PROTECTED] will be authenticated. I guess mysql doesn't care if it's upper or lower. Nick Marino wrote: In the config file you can set it to force all lower case. I had this problem and solved it by changing it in the config. Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:10 PM Subject: [radius] Freeradius/MySql problem I currently run ver.0.9.3 I have MySql database that is used with FreeRadius. What were are having a problem with is that if the user logs in with UPPER-NAME or lower-name either one works. I have tried lower_user lower_pass before/after/no and the radius system still authenticates all UPPER-CASE. With this we are getting double billed by our wholesale provider because they run unix based also and it sees both as valid log ins because we authenticated them. When we built our MySql we use with the setup in FreeRadius. Has anyone else had this and how did you fix this to keep everyone lower case. Thanks Bob Ross - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Forcing to lower case is not the problem. When a user logs in over our wholesale providers network we need to deny UPPER case logins. MySql does not care if it's upper or lower and they get authenticated I want to just deny UPPER letter logins will be the easiest. I have looked at the MySql table settings, and how they say to change this, but it also says you do one thing wrong you will corrupt the database. Don't want that. Nick Marino wrote: Let me look at my files and find the exact entry. Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:36 PM Subject: Re: [radius] Freeradius/MySql problem In the radius.conf under lower_user lower_pass I tried all three. before/after/no and they will still authenticate all UPPER CASE. What other config file are you talking about? Thanks Nick Marino wrote: In the config file you can set it to force all lower case. I had this problem and solved it by changing it in the config. Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:10 PM Subject: [radius] Freeradius/MySql problem I currently run ver.0.9.3 I have MySql database that is used with FreeRadius. What were are having a problem with is that if the user logs in with UPPER-NAME or lower-name either one works. I have tried lower_user lower_pass before/after/no and the radius system still authenticates all UPPER-CASE. With this we are getting double billed by our wholesale provider because they run unix based also and it sees both as valid log ins because we authenticated them. When we built our MySql we use with the setup in FreeRadius. Has anyone else had this and how did you fix this to keep everyone lower case. Thanks Bob Ross - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
Yes, I found what you mention below in the radius.conf I will look through the sql. file also. I understand this. but if I force lower to [EMAIL PROTECTED] our upstream sees this as an authentication. If the user logs in with [EMAIL PROTECTED] our upstream sees this also as an authentication. I get double billed. If I put lower_user lower_pass to no they still get authenticated. I need to deny UPPER case. Nick Marino wrote: This is what I have and it works. Also there are some options in the sql.conf that relate to this make sure you have the right lines uncommented in there. Open sql.conf and search for lower. Are you sure their is not something in your realms section overriding this? # This is as close as we can get to case insensitivity. It is # the admin's job to ensure that the username on the auth # db side is *also* lowercase to make this work # # Default is 'no' (don't lowercase values) # Valid values = before / after / no # lower_user = before lower_pass = before Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:42 PM Subject: Re: [radius] Freeradius/MySql problem OK, let me try this way, when our wholesale provider receives a realm, they know where to send the request. If the user sends [EMAIL PROTECTED] or [EMAIL PROTECTED] our radius regardless if I have lower_user before/after/no They will be authenticated either way. If we force it lower on our end, does not force lower on their end. It's a mess. They said only this month they were going to issue credits and that I needed to get my end to deny UPPER case logins. I set the lower_user lower and lower_pass to no and a user will all [EMAIL PROTECTED] will be authenticated. I guess mysql doesn't care if it's upper or lower. Nick Marino wrote: In the config file you can set it to force all lower case. I had this problem and solved it by changing it in the config. Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:10 PM Subject: [radius] Freeradius/MySql problem I currently run ver.0.9.3 I have MySql database that is used with FreeRadius. What were are having a problem with is that if the user logs in with UPPER-NAME or lower-name either one works. I have tried lower_user lower_pass before/after/no and the radius system still authenticates all UPPER-CASE. With this we are getting double billed by our wholesale provider because they run unix based also and it sees both as valid log ins because we authenticated them. When we built our MySql we use with the setup in FreeRadius. Has anyone else had this and how did you fix this to keep everyone lower case. Thanks Bob Ross - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
I tried the case sensitive attributes in the sql.conf but that didn't help. Looks as if it's going to be in MySql that I'll have to have set. That is not going to be fun at all. Nick Marino wrote: This is what I have and it works. Also there are some options in the sql.conf that relate to this make sure you have the right lines uncommented in there. Open sql.conf and search for lower. Are you sure their is not something in your realms section overriding this? # This is as close as we can get to case insensitivity. It is # the admin's job to ensure that the username on the auth # db side is *also* lowercase to make this work # # Default is 'no' (don't lowercase values) # Valid values = before / after / no # lower_user = before lower_pass = before Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:42 PM Subject: Re: [radius] Freeradius/MySql problem OK, let me try this way, when our wholesale provider receives a realm, they know where to send the request. If the user sends [EMAIL PROTECTED] or [EMAIL PROTECTED] our radius regardless if I have lower_user before/after/no They will be authenticated either way. If we force it lower on our end, does not force lower on their end. It's a mess. They said only this month they were going to issue credits and that I needed to get my end to deny UPPER case logins. I set the lower_user lower and lower_pass to no and a user will all [EMAIL PROTECTED] will be authenticated. I guess mysql doesn't care if it's upper or lower. Nick Marino wrote: In the config file you can set it to force all lower case. I had this problem and solved it by changing it in the config. Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:10 PM Subject: [radius] Freeradius/MySql problem I currently run ver.0.9.3 I have MySql database that is used with FreeRadius. What were are having a problem with is that if the user logs in with UPPER-NAME or lower-name either one works. I have tried lower_user lower_pass before/after/no and the radius system still authenticates all UPPER-CASE. With this we are getting double billed by our wholesale provider because they run unix based also and it sees both as valid log ins because we authenticated them. When we built our MySql we use with the setup in FreeRadius. Has anyone else had this and how did you fix this to keep everyone lower case. Thanks Bob Ross - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
First you need to have a standard for your accounts you need to decide if they should all be uppercase or lower case then restrict the oppisite. I am not understanding if you are saying you have accounts that some are uppercase and some are lower case? What is your standard? Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 1:23 PM Subject: Re: [radius] Freeradius/MySql problem Yes, I found what you mention below in the radius.conf I will look through the sql. file also. I understand this. but if I force lower to [EMAIL PROTECTED] our upstream sees this as an authentication. If the user logs in with [EMAIL PROTECTED] our upstream sees this also as an authentication. I get double billed. If I put lower_user lower_pass to no they still get authenticated. I need to deny UPPER case. Nick Marino wrote: This is what I have and it works. Also there are some options in the sql.conf that relate to this make sure you have the right lines uncommented in there. Open sql.conf and search for lower. Are you sure their is not something in your realms section overriding this? # This is as close as we can get to case insensitivity. It is # the admin's job to ensure that the username on the auth # db side is *also* lowercase to make this work # # Default is 'no' (don't lowercase values) # Valid values = before / after / no # lower_user = before lower_pass = before Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:42 PM Subject: Re: [radius] Freeradius/MySql problem OK, let me try this way, when our wholesale provider receives a realm, they know where to send the request. If the user sends [EMAIL PROTECTED] or [EMAIL PROTECTED] our radius regardless if I have lower_user before/after/no They will be authenticated either way. If we force it lower on our end, does not force lower on their end. It's a mess. They said only this month they were going to issue credits and that I needed to get my end to deny UPPER case logins. I set the lower_user lower and lower_pass to no and a user will all [EMAIL PROTECTED] will be authenticated. I guess mysql doesn't care if it's upper or lower. Nick Marino wrote: In the config file you can set it to force all lower case. I had this problem and solved it by changing it in the config. Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:10 PM Subject: [radius] Freeradius/MySql problem I currently run ver.0.9.3 I have MySql database that is used with FreeRadius. What were are having a problem with is that if the user logs in with UPPER-NAME or lower-name either one works. I have tried lower_user lower_pass before/after/no and the radius system still authenticates all UPPER-CASE. With this we are getting double billed by our wholesale provider because they run unix based also and it sees both as valid log ins because we authenticated them. When we built our MySql we use with the setup in FreeRadius. Has anyone else had this and how did you fix this to keep everyone lower case. Thanks Bob Ross - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
They are all lower case. In all the databases they are lower case. But when someone logs in on our wholesale service and they put UPPER case regardless how I have radius set they still authenticate either way. Since the provider requires chap, we use mysql. On our local number is PAP, so anyone that logs in with upper would get refused unless we force to lower, but then were right back where we started. To avoid being billed for both the upper log in and lower logins with our whole seller, I need to deny anything that shows up with UPPER case. Nick Marino wrote: First you need to have a standard for your accounts you need to decide if they should all be uppercase or lower case then restrict the oppisite. I am not understanding if you are saying you have accounts that some are uppercase and some are lower case? What is your standard? Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 1:23 PM Subject: Re: [radius] Freeradius/MySql problem Yes, I found what you mention below in the radius.conf I will look through the sql. file also. I understand this. but if I force lower to [EMAIL PROTECTED] our upstream sees this as an authentication. If the user logs in with [EMAIL PROTECTED] our upstream sees this also as an authentication. I get double billed. If I put lower_user lower_pass to no they still get authenticated. I need to deny UPPER case. Nick Marino wrote: This is what I have and it works. Also there are some options in the sql.conf that relate to this make sure you have the right lines uncommented in there. Open sql.conf and search for lower. Are you sure their is not something in your realms section overriding this? # This is as close as we can get to case insensitivity. It is # the admin's job to ensure that the username on the auth # db side is *also* lowercase to make this work # # Default is 'no' (don't lowercase values) # Valid values = before / after / no # lower_user = before lower_pass = before Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:42 PM Subject: Re: [radius] Freeradius/MySql problem OK, let me try this way, when our wholesale provider receives a realm, they know where to send the request. If the user sends [EMAIL PROTECTED] or [EMAIL PROTECTED] our radius regardless if I have lower_user before/after/no They will be authenticated either way. If we force it lower on our end, does not force lower on their end. It's a mess. They said only this month they were going to issue credits and that I needed to get my end to deny UPPER case logins. I set the lower_user lower and lower_pass to no and a user will all [EMAIL PROTECTED] will be authenticated. I guess mysql doesn't care if it's upper or lower. Nick Marino wrote: In the config file you can set it to force all lower case. I had this problem and solved it by changing it in the config. Nick Marino - IT Solutions - Original Message - From: Radius [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Saturday, July 02, 2005 12:10 PM Subject: [radius] Freeradius/MySql problem I currently run ver.0.9.3 I have MySql database that is used with FreeRadius. What were are having a problem with is that if the user logs in with UPPER-NAME or lower-name either one works. I have tried lower_user lower_pass before/after/no and the radius system still authenticates all UPPER-CASE. With this we are getting double billed by our wholesale provider because they run unix based also and it sees both as valid log ins because we authenticated them. When we built our MySql we use with the setup in FreeRadius. Has anyone else had this and how did you fix this to keep everyone lower case. Thanks Bob Ross - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
On Sat, Jul 02, 2005 at 10:42:44AM -0700, Radius wrote:
OK, let me try this way, when our wholesale provider receives a realm,
they know where
to send the request.
If the user sends [EMAIL PROTECTED] or [EMAIL PROTECTED]
our radius regardless if I have lower_user before/after/no
They will be authenticated either way.
If we force it lower on our end, does not force lower on their end.
It's a mess. They said only this month they were going to issue credits
and that I needed to get my end to deny UPPER case logins.
I set the lower_user lower and lower_pass to no and a user will
all [EMAIL PROTECTED] will be authenticated. I guess mysql
doesn't care if it's upper or lower.
For what you want to do, you need to set lower_user to 'no',
and check your authorize_check_query to be sure you're using
the one that has STRCMP(Username, '%{SQL-User-Name}') and not the
one that has Username = '%{SQL-User-Name}'.
ie (this is in 1.0.4, and doesn't work with mysql 4 onwards.)
# Use these for case sensitive usernames. WARNING: Slower queries!
authorize_check_query = SELECT id,UserName,Attribute,Value,op FROM
${authcheck_table} WHERE STRCMP(Username, '%{SQL-User-Name}') = 0 ORDER BY id
authorize_reply_query = SELECT id,UserName,Attribute,Value,op FROM
${authreply_table} WHERE STRCMP(Username, '%{SQL-User-Name}') = 0 ORDER BY id
# authorize_check_query = SELECT id,UserName,Attribute,Value,op FROM
${authcheck_table} WHERE Username = '%{SQL-User-Name}' ORDER BY id
# authorize_reply_query = SELECT id,UserName,Attribute,Value,op FROM
${authreply_table} WHERE Username = '%{SQL-User-Name}' ORDER BY id
rather than the default.
# Use these for case sensitive usernames. WARNING: Slower queries!
# authorize_check_query = SELECT id,UserName,Attribute,Value,op FROM
${authcheck_table} WHERE STRCMP(Username, '%{SQL-User-Name}') = 0 ORDER BY id
# authorize_reply_query = SELECT id,UserName,Attribute,Value,op FROM
${authreply_table} WHERE STRCMP(Username, '%{SQL-User-Name}') = 0 ORDER BY id
authorize_check_query = SELECT id,UserName,Attribute,Value,op FROM
${authcheck_table} WHERE Username = '%{SQL-User-Name}' ORDER BY id
authorize_reply_query = SELECT id,UserName,Attribute,Value,op FROM
${authreply_table} WHERE Username = '%{SQL-User-Name}' ORDER BY id
(That's only moving the #s, not changing the query itself.)
This is the joy of mySQL, it's not case-sensitive for string
comparisons by default. ^_^
Alternatively, change the radcheck table's UserName column to be 'BINARY', see
http://dev.mysql.com/doc/mysql/en/case-sensitivity.html for details. (Although
that's mySQL 4.1. If you're using a packaged mySQL from a distribution, check
A.5.1 in the included manual for more specific details.)
In fact, I'd be interested to know if
authorize_check_query = SELECT id,UserName,Attribute,Value,op FROM
${authcheck_table} WHERE BINARY Username = '%{SQL-User-Name}' ORDER BY id
authorize_reply_query = SELECT id,UserName,Attribute,Value,op FROM
${authreply_table} WHERE BINARY Username = '%{SQL-User-Name}' ORDER BY id
fixes it, and if it works for mySQL 4, because it's more future-proofed
than STRCMP, which has already changed semantics.
--
Paul TBBle Hampson, on an alternate email client.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [radius] Freeradius/MySql problem
After updated to 1.04 and making the changes again what you recommend below
and when I try to run radtest I get all kinds of these dup error.
radclient: dict_init:
/usr/local/radius/share/freeradius/dictionary.acc[110]: dict_addvalue:
Duplicate value name Administrative-reset for attribute Acc-Reason-Code
But it's in a lot of the dictionary files. I find all the dups and it
just keeps going.
I tried to go back to 0.9.3, but something happened. It is now wanting
to run 1.04 all the time.
So far people are still loggin in so it hasn't been misconfigured to bad.
Paul Hampson wrote:
On Sat, Jul 02, 2005 at 10:42:44AM -0700, Radius wrote:
OK, let me try this way, when our wholesale provider receives a realm,
they know where
to send the request.
If the user sends [EMAIL PROTECTED] or [EMAIL PROTECTED]
our radius regardless if I have lower_user before/after/no
They will be authenticated either way.
If we force it lower on our end, does not force lower on their end.
It's a mess. They said only this month they were going to issue credits
and that I needed to get my end to deny UPPER case logins.
I set the lower_user lower and lower_pass to no and a user will
all [EMAIL PROTECTED] will be authenticated. I guess mysql
doesn't care if it's upper or lower.
For what you want to do, you need to set lower_user to 'no',
and check your authorize_check_query to be sure you're using
the one that has STRCMP(Username, '%{SQL-User-Name}') and not the
one that has Username = '%{SQL-User-Name}'.
ie (this is in 1.0.4, and doesn't work with mysql 4 onwards.)
# Use these for case sensitive usernames. WARNING: Slower queries!
authorize_check_query = SELECT id,UserName,Attribute,Value,op FROM
${authcheck_table} WHERE STRCMP(Username, '%{SQL-User-Name}') = 0 ORDER BY id
authorize_reply_query = SELECT id,UserName,Attribute,Value,op FROM
${authreply_table} WHERE STRCMP(Username, '%{SQL-User-Name}') = 0 ORDER BY id
# authorize_check_query = SELECT id,UserName,Attribute,Value,op FROM
${authcheck_table} WHERE Username = '%{SQL-User-Name}' ORDER BY id
# authorize_reply_query = SELECT id,UserName,Attribute,Value,op FROM
${authreply_table} WHERE Username = '%{SQL-User-Name}' ORDER BY id
rather than the default.
# Use these for case sensitive usernames. WARNING: Slower queries!
# authorize_check_query = SELECT id,UserName,Attribute,Value,op FROM
${authcheck_table} WHERE STRCMP(Username, '%{SQL-User-Name}') = 0 ORDER BY id
# authorize_reply_query = SELECT id,UserName,Attribute,Value,op FROM
${authreply_table} WHERE STRCMP(Username, '%{SQL-User-Name}') = 0 ORDER BY id
authorize_check_query = SELECT id,UserName,Attribute,Value,op FROM
${authcheck_table} WHERE Username = '%{SQL-User-Name}' ORDER BY id
authorize_reply_query = SELECT id,UserName,Attribute,Value,op FROM
${authreply_table} WHERE Username = '%{SQL-User-Name}' ORDER BY id
(That's only moving the #s, not changing the query itself.)
This is the joy of mySQL, it's not case-sensitive for string
comparisons by default. ^_^
Alternatively, change the radcheck table's UserName column to be 'BINARY', see
http://dev.mysql.com/doc/mysql/en/case-sensitivity.html for details. (Although
that's mySQL 4.1. If you're using a packaged mySQL from a distribution, check
A.5.1 in the included manual for more specific details.)
In fact, I'd be interested to know if
authorize_check_query = SELECT id,UserName,Attribute,Value,op FROM
${authcheck_table} WHERE BINARY Username = '%{SQL-User-Name}' ORDER BY id
authorize_reply_query = SELECT id,UserName,Attribute,Value,op FROM
${authreply_table} WHERE BINARY Username = '%{SQL-User-Name}' ORDER BY id
fixes it, and if it works for mySQL 4, because it's more future-proofed
than STRCMP, which has already changed semantics.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius+Mysql Problem
G'Day Melkin, Try to install FreeRADIUS-1.0.0-pre3 instead. Make sure that you have MySQL-server-4.0.20-0.i386.rpm, MySQL-devel-4.0.20-0.i386.rpm and MySQL-shared-compat-4.0.18-0.i386.rpm installed in your system. Those RPMs can be obtained from MySQL AB website. When you compile the source, make sure you specify the MySQL libraries and header files like this: ./configure --with-rlm-sql-lib-dir=/usr/lib/mysql --with-rlm-sql-include-dir =/usr/include/mysql This should have rlm-sql-mysql module compiled properly. Regards, Eki Y. Baskoro - Original Message - From: Melkin dev [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, July 11, 2004 9:24 PM Subject: Re: FreeRadius+Mysql Problem Hi, I have already installed freeradius 0.9.3 in Redhat Linux 9.0 and mysql 3.23.33 I am sending the supportive files if u have any doubt plz contact me with the subject: Freeradius-Mysql -Mraj regards Mahimai Raj. s __ Do you Yahoo!? Yahoo! Mail - 50x more storage than other providers! http://promotions.yahoo.com/new_mail -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius+Mysql Problem
G'Day Did you build FreeRADIUS with MySQL support? Did you specify the MySQL header files location? Also, you need to have MySQL-devel-x.x.xx-x installed before building the FreeRADIUS binaries. Regards, Eki After I install Mysql-standard-4.0.18-pc-linux-i686(in= /usr/local/mysql-x-linux-i686) + Freeradius(1.0.0.pre3),my= OS is RedHat 9.0,and i try to connect freeradius and mysql radiusd -X give me the following message: =09rlm_sql (sql): Could not link driver rlm_sql_mysql: file not= found =09rlm_sql (sql): Make sure it (and all its dependent libraries!)= are in the search path of your system's ld. Then I try some way that i got from faq and google... 1) rebuild the freeradius with =09=09./configure --disable_shared =09=09make =09=09make install =09but it didn't work 2)=09cp /usr/local/lib/*.* /usr/lib =09(vi /etc/ld.so.conf ; add the item: /usr/local/lib;) =09they are same... and didn't work too 3) i reinstall the OS, and install mysql first,and then cp= /usr/local/mysql/include/*.h /usr/include/mysql =09then build freeradius... =09nothing changed ...I almost got crazy.. =09 i cannot find the rlm_sql_mysql.la under any dir,but the= freeradius docs seems tell me that all db drivers are built into= rlm_sql.so ,rlm_sql.a, rlm_sql.laI don't understand, even if= i am afraid that's problem of my os... anybody know about this?=09 thanks a lot... -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: FreeRadius+Mysql Problem
Hello, When you make freeRadius and before you make install, scroll back in the make output to see if there were any errors in the compile. It sounds like the MySQL didn't compile, most likely it couldn't find the MySQL include files or the lib files it needs. To help you find these warnings, all the database files are made towards the end of the make, and MySQL is done just before PostgreSQL.. You'll likely find a warning about not finding the mysql/mysql.h and instructing you on how to fix the problem. Note that there's a slight bug in the rlm_sql_mysql make (as documented below) so you'll have to work around it (again, as documented below). To someone who maintains the make/configure files of freeRADIUS: The default MySQL installation does not include a path and file named mysql/mysql.h as the make file looks for in the directory rlm_sql_mysql. On the other hand, it does include mysqlversion/include/mysql.h. Following the MySQL instructions, I create a symbolic link: ln -s /usr/local/mysqlversion mysql. But that still doesn't solve the problem, because freeRADIUS is looking for mysql/mysql.h. If someone in freeRADIUS could change this to mysql/include/mysql.h or simply mysql.h: the latter would be better because the default paths freeRADIUS uses would be sufficient to find /usr/local/mysql/include/mysql.h. To work around this problem, one either has to hack the configure/make file for rlm_sql_mysql or create yet another symbolic link: ln -s /usr/local/mysql/include mysql. -Original Message- From: [EMAIL PROTECTED] on behalf of Yyc Sent: Sat 7/10/2004 6:24 AM To: Post Cc: Subject: FreeRadius+Mysql Problem After I install Mysql-standard-4.0.18-pc-linux-i686(in /usr/local/mysql-x-linux-i686) + Freeradius(1.0.0.pre3),my OS is RedHat 9.0,and i try to connect freeradius and mysql radiusd -X give me the following message: rlm_sql (sql): Could not link driver rlm_sql_mysql: file not found rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. Then I try some way that i got from faq and google... 1) rebuild the freeradius with ./configure --disable_shared make make install but it didn't work 2) cp /usr/local/lib/*.* /usr/lib (vi /etc/ld.so.conf ; add the item: /usr/local/lib;) they are same... and didn't work too 3) i reinstall the OS, and install mysql first,and then cp /usr/local/mysql/include/*.h /usr/include/mysql then build freeradius... nothing changed ...I almost got crazy.. i cannot find the rlm_sql_mysql.la under any dir,but the freeradius docs seems tell me that all db drivers are built into rlm_sql.so ,rlm_sql.a, rlm_sql.laI don't understand, even if i am afraid that's problem of my os... anybody know about this? thanks a lot... Yyc [EMAIL PROTECTED] 2004-07-10
