help-gnu-radius
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Help-gnu-radius] configure --with-mysql


From: Greg G
Subject: Re: [Help-gnu-radius] configure --with-mysql
Date: Fri, 28 Nov 2003 08:57:50 -0500
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)



The reason why the authentication fails could be just anything. What you
might do first is enabling some more debugging in your raddb/config file
using something like this in your logging{} section:

   channel debug {
       file "radius.debug";
   };
   category debug {
       channel debug;
       level radiusd,auth,sql;
   };
Oddly, the default config has "category =debug". I assume that equal sign is spurious.

Now do an auth request and take a look at the debugging log. If all went well (and your Auth-Type=SQL user is used by the server), you will find
some SQL queries over there. Take a look at them and see if the query
which is used to retrieve the password from the database does work using
the mysql command line interface. The query should return a password. In
case this fails, the radiusd will report "Invalid user". If this doesn't clear things up, please send in the logging output. For now there's too
little information to be able to help you.

Well, here's what I get...

Nov 28 08:54:20 sql.c:643:sql_cache_retrieve: query: SELECT attr,value FROM attrib WHERE user_name='ggersh' AND op IS NULL
Nov 28 08:54:20 sql.c:624:sql_cache_insert: cache: 1,(2,3)
Nov 28 08:54:20 sql.c:630:sql_cache_insert: inserting at pos 3
Nov 28 08:54:20 sql.c:633:sql_cache_insert: tail: 2,4
Nov 28 08:54:20 sql.c:730:attach_sql_connection: attaching 80b48 [0]
Nov 28 08:54:20 (AUTHREQ local 14 ggersh): Invalid user [ggersh], CLID unknown
Nov 28 08:54:20 auth.c:959:sfn_validate: 1 -> 15
Nov 28 08:54:20 auth.c:1240:sfn_reject: REJECT: ggersh

However, in my mysql session, I get this:

mysql> select attr,value from attrib where user_name='ggersh' and op is null;
+-----------------+-------+
| attr            | value |
+-----------------+-------+
| Framed-Protocol | PPP   |
+-----------------+-------+
1 row in set (0.00 sec)

What now? I doesn't look like it's even getting around to checking the password.

-Greg G







reply via email to

[Prev in Thread] Current Thread [Next in Thread]