<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title><![CDATA[Chillispot Forum — Problems with MYSQL-AUTH and radius]]></title>
		<link>http://www.chillispot.org/chilliforum/topic499-problems-with-mysqlauth-and-radius.html</link>
		<atom:link href="http://www.chillispot.org/chilliforum/feed-rss-topic499.xml" rel="self" type="application/rss+xml" />
		<description><![CDATA[The most recent posts in Problems with MYSQL-AUTH and radius.]]></description>
		<lastBuildDate>Wed, 28 Jul 2010 09:31:22 +0000</lastBuildDate>
		<generator>PunBB 1.4.4</generator>
		<item>
			<title><![CDATA[Problems with MYSQL-AUTH and radius]]></title>
			<link>http://www.chillispot.org/chilliforum/post1428.html#p1428</link>
			<description><![CDATA[<p>Hi,</p><p>we like to set up ChilliHotSpot with Radius und Mysql for test use.</p><p>The howto i&#039;m using: http://www.pug.org/mediawiki/index.php/Coova_Chilli_Hotspot/Installation</p><p>Now i have some problems with this error message</p><p>rad_recv: Access-Request packet from host 127.0.0.1 port 41793, id=60, length=58<br />&nbsp; &nbsp; User-Name = &quot;markus&quot;<br />&nbsp; &nbsp; User-Password = &quot;XXX&quot;<br />&nbsp; &nbsp; NAS-IP-Address = 127.0.1.1<br />&nbsp; &nbsp; NAS-Port = 0<br />Wed Jul 28 10:34:42 2010 : Debug: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user<br />Wed Jul 28 10:34:42 2010 : Debug: auth: Failed to validate the user.<br />Wed Jul 28 10:34:42 2010 : Auth: Login incorrect: [markus/XXX] (from client localhost port 0)</p><p>Can sombody help me to fix this issue?</p><p>Some outputs and configs:</p><p>mysql&gt; select * from radcheck;<br />+----+----------+-----------+----+----------+<br />| id | username | attribute | op | value&nbsp; &nbsp; |<br />+----+----------+-----------+----+----------+<br />|&nbsp; 1 | markus&nbsp; &nbsp;| Password&nbsp; | == | XXX | </p><br /><p>/etc/freeradius/radiusd.conf<br />prefix = /usr<br />&nbsp; &nbsp;exec_prefix = /usr<br />&nbsp; &nbsp;sysconfdir = /etc<br />&nbsp; &nbsp;localstatedir = /var<br />&nbsp; &nbsp;sbindir = ${exec_prefix}/sbin<br />&nbsp; &nbsp;logdir = /var/log/freeradius<br />&nbsp; &nbsp;raddbdir = /etc/freeradius<br />&nbsp; &nbsp;radacctdir = ${logdir}/radacct<br />&nbsp; &nbsp;confdir = ${raddbdir}<br />&nbsp; &nbsp;run_dir = ${localstatedir}/run/freeradius<br />&nbsp; &nbsp;db_dir = $(raddbdir)<br />&nbsp; &nbsp;libdir = /usr/lib/freeradius<br />&nbsp; &nbsp;pidfile = ${run_dir}/freeradius.pid<br />&nbsp; &nbsp;user = freerad<br />&nbsp; &nbsp;group = freerad<br />&nbsp; &nbsp;max_request_time = 30<br />&nbsp; &nbsp;cleanup_delay = 5<br />&nbsp; &nbsp;max_requests = 1024</p><p>&nbsp; &nbsp;listen {<br />&nbsp; &nbsp; type = auth<br />&nbsp; &nbsp; ipaddr = *<br />&nbsp; &nbsp; port = 0<br />&nbsp; &nbsp;}</p><p>&nbsp; &nbsp;listen {<br />&nbsp; &nbsp; ipaddr = *<br />&nbsp; &nbsp; port = 0<br />&nbsp; &nbsp; type = acct<br />&nbsp; &nbsp;}</p><p>&nbsp; &nbsp;hostname_lookups = no<br />&nbsp; &nbsp;allow_core_dumps = no<br />&nbsp; &nbsp;regular_expressions&nbsp; &nbsp; = yes<br />&nbsp; &nbsp;extended_expressions&nbsp; &nbsp; = yes</p><p>&nbsp; &nbsp;log {<br />&nbsp; &nbsp; destination = files<br />&nbsp; &nbsp; file = ${logdir}/radius.log<br />&nbsp; &nbsp; syslog_facility = daemon<br />&nbsp; &nbsp; stripped_names = no<br />&nbsp; &nbsp; auth = no<br />&nbsp; &nbsp; auth_badpass = no<br />&nbsp; &nbsp; auth_goodpass = no<br />&nbsp; &nbsp;}</p><p>&nbsp; &nbsp;checkrad = ${sbindir}/checkrad<br />&nbsp; &nbsp;security {<br />&nbsp; &nbsp; max_attributes = 200<br />&nbsp; &nbsp; reject_delay = 1<br />&nbsp; &nbsp; status_server = yes<br />&nbsp; &nbsp;}<br />&nbsp; &nbsp;### kann abgeschaltet werden ####<br />&nbsp; &nbsp;proxy_requests&nbsp; = no <br />&nbsp; &nbsp;#####&nbsp; #####<br />&nbsp; &nbsp;$INCLUDE proxy.conf<br />&nbsp; &nbsp;$INCLUDE clients.conf<br />&nbsp; &nbsp;snmp&nbsp; &nbsp; = no<br />&nbsp; &nbsp;$INCLUDE snmp.conf</p><p>&nbsp; &nbsp;thread pool {<br />&nbsp; &nbsp; start_servers = 5<br />&nbsp; &nbsp; max_servers = 32<br />&nbsp; &nbsp; min_spare_servers = 3<br />&nbsp; &nbsp; max_spare_servers = 10<br />&nbsp; &nbsp; max_requests_per_server = 0<br />&nbsp; &nbsp;}</p><p>&nbsp; modules {<br />&nbsp; &nbsp; pap {<br />&nbsp; &nbsp; &nbsp; &nbsp; auto_header = no<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; chap {<br />&nbsp; &nbsp; &nbsp; &nbsp; authtype = CHAP<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; pam {<br />&nbsp; &nbsp; &nbsp; &nbsp; pam_auth = radiusd<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; unix {<br />&nbsp; &nbsp; &nbsp; &nbsp; radwtmp = ${logdir}/radwtmp<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp;$INCLUDE eap.conf</p><p>&nbsp; &nbsp; mschap {<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; ldap {<br />&nbsp; &nbsp; &nbsp; &nbsp; server = &quot;ldap.your.domain&quot;<br />&nbsp; &nbsp; &nbsp; &nbsp; basedn = &quot;o=My Org,c=UA&quot;<br />&nbsp; &nbsp; &nbsp; &nbsp; filter = &quot;(uid=%{Stripped-User-Name:-%{User-Name}})&quot;<br />&nbsp; &nbsp; &nbsp; &nbsp; ldap_connections_number = 5<br />&nbsp; &nbsp; &nbsp; &nbsp; timeout = 4<br />&nbsp; &nbsp; &nbsp; &nbsp; timelimit = 3<br />&nbsp; &nbsp; &nbsp; &nbsp; net_timeout = 1</p><p>&nbsp; &nbsp; &nbsp; &nbsp; tls {<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; start_tls = no<br />&nbsp; &nbsp; &nbsp; &nbsp; }</p><p>&nbsp; &nbsp; &nbsp; &nbsp; dictionary_mapping = ${confdir}/ldap.attrmap<br />&nbsp; &nbsp; &nbsp; &nbsp; edir_account_policy_check = no<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; realm IPASS {<br />&nbsp; &nbsp; &nbsp; &nbsp; format = prefix<br />&nbsp; &nbsp; &nbsp; &nbsp; delimiter = &quot;/&quot;<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; realm suffix {<br />&nbsp; &nbsp; &nbsp; &nbsp; format = suffix<br />&nbsp; &nbsp; &nbsp; &nbsp; delimiter = &quot;@&quot;<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; realm realmpercent {<br />&nbsp; &nbsp; &nbsp; &nbsp; format = suffix<br />&nbsp; &nbsp; &nbsp; &nbsp; delimiter = &quot;%&quot;<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; realm ntdomain {<br />&nbsp; &nbsp; &nbsp; &nbsp; format = prefix<br />&nbsp; &nbsp; &nbsp; &nbsp; delimiter = &quot;\\&quot;<br />&nbsp; &nbsp; }&nbsp; &nbsp; </p><p>&nbsp; &nbsp; checkval {<br />&nbsp; &nbsp; &nbsp; &nbsp; item-name = Calling-Station-Id<br />&nbsp; &nbsp; &nbsp; &nbsp; check-name = Calling-Station-Id<br />&nbsp; &nbsp; &nbsp; &nbsp; data-type = string<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; preprocess {<br />&nbsp; &nbsp; &nbsp; &nbsp; huntgroups = ${confdir}/huntgroups<br />&nbsp; &nbsp; &nbsp; &nbsp; hints = ${confdir}/hints<br />&nbsp; &nbsp; &nbsp; &nbsp; with_ascend_hack = no<br />&nbsp; &nbsp; &nbsp; &nbsp; ascend_channels_per_line = 23<br />&nbsp; &nbsp; &nbsp; &nbsp; with_ntdomain_hack = no<br />&nbsp; &nbsp; &nbsp; &nbsp; with_specialix_jetstream_hack = no<br />&nbsp; &nbsp; &nbsp; &nbsp; with_cisco_vsa_hack = no<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; files {<br />&nbsp; &nbsp; &nbsp; &nbsp; usersfile = ${confdir}/users<br />&nbsp; &nbsp; &nbsp; &nbsp; acctusersfile = ${confdir}/acct_users<br />&nbsp; &nbsp; &nbsp; &nbsp; preproxy_usersfile = ${confdir}/preproxy_users<br />&nbsp; &nbsp; &nbsp; &nbsp; compat = no<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; detail {<br />&nbsp; &nbsp; &nbsp; &nbsp; detailfile = ${radacctdir}/%{Client-IP-Address}/detail-%Y%m%d<br />&nbsp; &nbsp; &nbsp; &nbsp; detailperm = 0600<br />&nbsp; &nbsp; &nbsp; &nbsp; header = &quot;%t&quot;<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; acct_unique {<br />&nbsp; &nbsp; &nbsp; &nbsp; key = &quot;User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port&quot;<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; $INCLUDE sql.conf&nbsp; ###### Wichtiger Teil #######</p><p>&nbsp; &nbsp; radutmp {<br />&nbsp; &nbsp; &nbsp; &nbsp; filename = ${logdir}/radutmp<br />&nbsp; &nbsp; &nbsp; &nbsp; username = %{User-Name}<br />&nbsp; &nbsp; &nbsp; &nbsp; case_sensitive = yes<br />&nbsp; &nbsp; &nbsp; &nbsp; check_with_nas = yes&nbsp; &nbsp; &nbsp; &nbsp; <br />&nbsp; &nbsp; &nbsp; &nbsp; perm = 0600<br />&nbsp; &nbsp; &nbsp; &nbsp; callerid = &quot;yes&quot;<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; radutmp sradutmp {<br />&nbsp; &nbsp; &nbsp; &nbsp; filename = ${logdir}/sradutmp<br />&nbsp; &nbsp; &nbsp; &nbsp; perm = 0644<br />&nbsp; &nbsp; &nbsp; &nbsp; callerid = &quot;no&quot;<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; attr_filter attr_filter.post-proxy {<br />&nbsp; &nbsp; &nbsp; &nbsp; attrsfile = ${confdir}/attrs<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; attr_filter attr_filter.pre-proxy {<br />&nbsp; &nbsp; &nbsp; &nbsp; attrsfile = ${confdir}/attrs.pre-proxy<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; attr_filter attr_filter.access_reject {<br />&nbsp; &nbsp; &nbsp; &nbsp; key = %{User-Name}<br />&nbsp; &nbsp; &nbsp; &nbsp; attrsfile = ${confdir}/attrs.access_reject<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; attr_filter attr_filter.accounting_response {<br />&nbsp; &nbsp; &nbsp; &nbsp; key = %{User-Name}<br />&nbsp; &nbsp; &nbsp; &nbsp; attrsfile = ${confdir}/attrs.accounting_response<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; counter daily {<br />&nbsp; &nbsp; &nbsp; &nbsp; filename = ${db_dir}/db.daily<br />&nbsp; &nbsp; &nbsp; &nbsp; key = User-Name<br />&nbsp; &nbsp; &nbsp; &nbsp; count-attribute = Acct-Session-Time<br />&nbsp; &nbsp; &nbsp; &nbsp; reset = daily<br />&nbsp; &nbsp; &nbsp; &nbsp; counter-name = Daily-Session-Time<br />&nbsp; &nbsp; &nbsp; &nbsp; check-name = Max-Daily-Session<br />&nbsp; &nbsp; &nbsp; &nbsp; reply-name = Session-Timeout<br />&nbsp; &nbsp; &nbsp; &nbsp; allowed-servicetype = Framed-User<br />&nbsp; &nbsp; &nbsp; &nbsp; cache-size = 5000<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; always fail {<br />&nbsp; &nbsp; &nbsp; &nbsp; rcode = fail<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; always reject {<br />&nbsp; &nbsp; &nbsp; &nbsp; rcode = reject<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; always noop {<br />&nbsp; &nbsp; &nbsp; &nbsp; rcode = noop<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; always handled {<br />&nbsp; &nbsp; &nbsp; &nbsp; rcode = handled<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; always updated {<br />&nbsp; &nbsp; &nbsp; &nbsp; rcode = updated<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; always notfound {<br />&nbsp; &nbsp; &nbsp; &nbsp; rcode = notfound<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; always ok {<br />&nbsp; &nbsp; &nbsp; &nbsp; rcode = ok<br />&nbsp; &nbsp; &nbsp; &nbsp; simulcount = 0<br />&nbsp; &nbsp; &nbsp; &nbsp; mpp = no<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; expr {<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; digest {<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; expiration {<br />&nbsp; &nbsp; &nbsp; &nbsp; reply-message = &quot;Password Has Expired\r\n&quot; <br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; logintime {<br />&nbsp; &nbsp; &nbsp; &nbsp; reply-message = &quot;You are calling outside your allowed timespan\r\n&quot;<br />&nbsp; &nbsp; &nbsp; &nbsp; minimum-timeout = 60<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; exec {<br />&nbsp; &nbsp; &nbsp; &nbsp; wait = yes<br />&nbsp; &nbsp; &nbsp; &nbsp; input_pairs = request<br />&nbsp; &nbsp; &nbsp; &nbsp; shell_escape = yes<br />&nbsp; &nbsp; &nbsp; &nbsp; output = none<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; exec echo {<br />&nbsp; &nbsp; &nbsp; &nbsp; wait = yes<br />&nbsp; &nbsp; &nbsp; &nbsp; program = &quot;/bin/echo %{User-Name}&quot;<br />&nbsp; &nbsp; &nbsp; &nbsp; input_pairs = request<br />&nbsp; &nbsp; &nbsp; &nbsp; output_pairs = reply<br />&nbsp; &nbsp; &nbsp; &nbsp; shell_escape = yes<br />&nbsp; &nbsp; }<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; # Kann unbeachtet bleiben, nur fuer Dial IN !!!<br />&nbsp; &nbsp; ippool main_pool {<br />&nbsp; &nbsp; &nbsp; &nbsp; range-start = 192.168.1.1<br />&nbsp; &nbsp; &nbsp; &nbsp; range-stop = 192.168.3.254<br />&nbsp; &nbsp; &nbsp; &nbsp; netmask = 255.255.255.0<br />&nbsp; &nbsp; &nbsp; &nbsp; cache-size = 800<br />&nbsp; &nbsp; &nbsp; &nbsp; session-db = ${db_dir}/db.ippool<br />&nbsp; &nbsp; &nbsp; &nbsp; ip-index = ${db_dir}/db.ipindex<br />&nbsp; &nbsp; &nbsp; &nbsp; override = no<br />&nbsp; &nbsp; &nbsp; &nbsp; maximum-timeout = 0<br />&nbsp; &nbsp; }</p><p>&nbsp; &nbsp; policy {<br />&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; filename = ${confdir}/policy.txt<br />&nbsp; &nbsp; }<br />&nbsp; &nbsp;}</p><p>&nbsp; &nbsp;instantiate {<br />&nbsp; &nbsp; exec<br />&nbsp; &nbsp; expr<br />&nbsp; &nbsp; #clients.conf <br />&nbsp; &nbsp; logintime<br />&nbsp; &nbsp;}<br />&nbsp; <br /> $INCLUDE policy.conf<br />&nbsp; &nbsp;<br />&nbsp; &nbsp;#### Nebenconfig ####<br />#&nbsp; &nbsp;$INCLUDE sites-enabled/default</p><p>/etc/freeradius/sql.conf<br />sql {<br />&nbsp; &nbsp; database = &quot;mysql&quot;<br />&nbsp; &nbsp; driver = &quot;rlm_sql_${database}&quot;<br />&nbsp; &nbsp; server = &quot;localhost&quot; # DB Server<br />&nbsp; &nbsp; login = &quot;radius&quot; # DB Benutzernamen<br />&nbsp; &nbsp; password = &quot;XXX&quot; # DB Passwort<br />&nbsp; &nbsp; radius_db = &quot;radius&quot;<br />&nbsp; &nbsp; acct_table1 = &quot;radacct&quot;<br />&nbsp; &nbsp; acct_table2 = &quot;radacct&quot;<br />&nbsp; &nbsp; postauth_table = &quot;radpostauth&quot;<br />&nbsp; &nbsp; authcheck_table = &quot;radcheck&quot;<br />&nbsp; &nbsp; authreply_table = &quot;radreply&quot;<br />&nbsp; &nbsp; groupcheck_table = &quot;radgroupcheck&quot;<br />&nbsp; &nbsp; groupreply_table = &quot;radgroupreply&quot;<br />&nbsp; &nbsp; usergroup_table = &quot;radusergroup&quot;<br />&nbsp; &nbsp; read_groups = no<br />&nbsp; &nbsp; deletestalesessions = yes<br />&nbsp; &nbsp; sqltrace = no<br />&nbsp; &nbsp; sqltracefile = ${logdir}/sqltrace.sql<br />&nbsp; &nbsp; num_sql_socks = 5<br />&nbsp; &nbsp; connect_failure_retry_delay = 60<br />&nbsp; &nbsp; readclients = yes # von No auf Yes<br />&nbsp; &nbsp; nas_table = &quot;nas&quot; # <br />&nbsp; &nbsp; $INCLUDE sql/${database}/dialup.conf # Einbinden<br />&nbsp; &nbsp;}</p>]]></description>
			<author><![CDATA[null@example.com (zeitsofa)]]></author>
			<pubDate>Wed, 28 Jul 2010 09:31:22 +0000</pubDate>
			<guid>http://www.chillispot.org/chilliforum/post1428.html#p1428</guid>
		</item>
	</channel>
</rss>
