6 Oct
2004
6 Oct
'04
4:08 a.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Folks,
I've been testing SER 0.8.14 Auth and ACC (radiusclient-0.4.4)
in radius (freeradius 1.0.1) and its working fine.
Now I tried to use group_radius module to check if a user is in a especific
group and it failed.
First I received a error about missing "Sip-Group" attribute and I found a mail
about this error and howto correct it
(http://lists.iptel.org/pipermail/serdev/2004-July/002339.html).
Now SER doesn't return any error, just
radius_is_user_in(): Failure
after a long time.
I have a user "1213" in group "general" on radius database like this:
mysql> select * from radgroupcheck;
+----+-----------+-----------+----+--------+
| id | GroupName | Attribute | op | Value |
+----+-----------+-----------+----+--------+
| 1 | general | Auth-Type | := | Digest |
+----+-----------+-----------+----+--------+
mysql> select * from radcheck;
+----+----------+---------------+----+-------+
| id | UserName | Attribute | op | Value |
+----+----------+---------------+----+-------+
| 2 | 1213 | User-Password | == | testonly |
+----+----------+---------------+----+-------+
mysql> select * from usergroup;
+----+----------+-----------+
| id | UserName | GroupName |
+----+----------+-----------+
| 1 | 1213 | general |
+----+----------+-----------+
mysql> select * from radgroupreply;
+----+-----------+---------------+----+------------+------+
| id | GroupName | Attribute | op | Value | prio |
+----+-----------+---------------+----+------------+------+
| 3 | general | Reply-Message | = | Authorized | 0 |
+----+-----------+---------------+----+------------+------+
I googled this but I couldn't find anything about that.
Am I missing something?
Thanks in advance.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
iD8DBQFBY1OHiLK8unYgEMQRAijVAJ4gmQ7cxUtDlWa8kaJzydxtefDULwCdFWtZ
e4PSZdeQzihLBxgfJh17Tyg=
=iD8l
-----END PGP SIGNATURE-----
7 Oct
7 Oct
8:18 a.m.
Try to se what is going on in the radius server, if you are using
freeradius then start it with -X cmdline option.
Jan.
On 05-10 23:08, Rodrigo P. Telles wrote:
Hi Folks,
I've been testing SER 0.8.14 Auth and ACC (radiusclient-0.4.4)
in radius (freeradius 1.0.1) and its working fine.
Now I tried to use group_radius module to check if a user is in a especific
group and it failed.
First I received a error about missing "Sip-Group" attribute and I found a
mail
about this error and howto correct it
(http://lists.iptel.org/pipermail/serdev/2004-July/002339.html).
Now SER doesn't return any error, just
radius_is_user_in(): Failure
after a long time.
I have a user "1213" in group "general" on radius database like
this:
mysql> select * from radgroupcheck;
+----+-----------+-----------+----+--------+
| id | GroupName | Attribute | op | Value |
+----+-----------+-----------+----+--------+
| 1 | general | Auth-Type | := | Digest |
+----+-----------+-----------+----+--------+
mysql> select * from radcheck;
+----+----------+---------------+----+-------+
| id | UserName | Attribute | op | Value |
+----+----------+---------------+----+-------+
| 2 | 1213 | User-Password | == | testonly |
+----+----------+---------------+----+-------+
mysql> select * from usergroup;
+----+----------+-----------+
| id | UserName | GroupName |
+----+----------+-----------+
| 1 | 1213 | general |
+----+----------+-----------+
mysql> select * from radgroupreply;
+----+-----------+---------------+----+------------+------+
| id | GroupName | Attribute | op | Value | prio |
+----+-----------+---------------+----+------------+------+
| 3 | general | Reply-Message | = | Authorized | 0 |
+----+-----------+---------------+----+------------+------+
I googled this but I couldn't find anything about that.
Am I missing something?
Thanks in advance.
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
3:29 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Jan,
Jan Janak wrote:
| Try to se what is going on in the radius server, if you are using
| freeradius then start it with -X cmdline option.
|
I did that and I received this:
- ----
rad_recv: Access-Request packet from host xxx.yyy.zzz.www:37861, id=204, length=51
~ User-Name = "1213"
~ Sip-Group = "Active"
~ Service-Type = Group-Check
~ NAS-IP-Address = xxx.yyy.zzz.www
~ NAS-Port = 0
~ Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 28
~ modcall[authorize]: module "preprocess" returns ok for request 28
~ modcall[authorize]: module "chap" returns noop for request 28
~ modcall[authorize]: module "mschap" returns noop for request 28
~ modcall[authorize]: module "digest" returns noop for request 28
~ rlm_realm: No '@' in User-Name = "1213", looking up realm NULL
~ rlm_realm: No such realm "NULL"
~ modcall[authorize]: module "suffix" returns noop for request 28
radius_xlat: ''
~ modcall[authorize]: module "sql" returns fail for request 28
modcall: group authorize returns fail for request 28
Finished request 28
Going to the next request
Waking up in 2 seconds...
- --- Walking the entire request list ---
Cleaning up request 27 ID 203 with timestamp 416541dc
Waking up in 4 seconds...
- --- Walking the entire request list ---
Cleaning up request 28 ID 204 with timestamp 416541e0
Nothing to do. Sleeping until we see a request.
- ---
I think that the problem is on
modcall[authorize]: module "sql" returns fail for request 28
but I don't know why module sql return "fail" for the request.
I saw the mysql log file too and freeradius doesn't do any query
about that request!
Do you have any idea?
Thanks for your answer.
Telles
| Jan.
|
| On 05-10 23:08, Rodrigo P. Telles wrote:
|
|>Hi Folks,
|>
|>I've been testing SER 0.8.14 Auth and ACC (radiusclient-0.4.4)
|>in radius (freeradius 1.0.1) and its working fine.
|>Now I tried to use group_radius module to check if a user is in a especific
|>group and it failed.
|>First I received a error about missing "Sip-Group" attribute and I found a
mail
|>about this error and howto correct it
|>(http://lists.iptel.org/pipermail/serdev/2004-July/002339.html).
|>Now SER doesn't return any error, just
|>
|>radius_is_user_in(): Failure
|>
|>after a long time.
|>
|>I have a user "1213" in group "general" on radius database like
this:
|>
|>mysql> select * from radgroupcheck;
|>+----+-----------+-----------+----+--------+
|>| id | GroupName | Attribute | op | Value |
|>+----+-----------+-----------+----+--------+
|>| 1 | general | Auth-Type | := | Digest |
|>+----+-----------+-----------+----+--------+
|>
|>mysql> select * from radcheck;
|>+----+----------+---------------+----+-------+
|>| id | UserName | Attribute | op | Value |
|>+----+----------+---------------+----+-------+
|>| 2 | 1213 | User-Password | == | testonly |
|>+----+----------+---------------+----+-------+
|>
|>mysql> select * from usergroup;
|>+----+----------+-----------+
|>| id | UserName | GroupName |
|>+----+----------+-----------+
|>| 1 | 1213 | general |
|>+----+----------+-----------+
|>
|>mysql> select * from radgroupreply;
|>+----+-----------+---------------+----+------------+------+
|>| id | GroupName | Attribute | op | Value | prio |
|>+----+-----------+---------------+----+------------+------+
|>| 3 | general | Reply-Message | = | Authorized | 0 |
|>+----+-----------+---------------+----+------------+------+
|>
|>
|>I googled this but I couldn't find anything about that.
|>Am I missing something?
|>Thanks in advance.
|>
|>_______________________________________________
|>Serusers mailing list
|>serusers(a)lists.iptel.org
|>http://lists.iptel.org/mailman/listinfo/serusers
|>
|
|
|
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
iD8DBQFBZUS+iLK8unYgEMQRAluzAJ4i471Pe76WynGAbRfl2EWk+O2hnACdHUBM
hqqzCU7ovnFs2sTeH9zj0uU=
=0qSy
-----END PGP SIGNATURE-----
16 Oct
16 Oct
12:22 a.m.
This might be the problem:
rlm_realm: No '@' in User-Name = "1213", looking up realm NULL
rlm_realm: No such realm "NULL"
Jan.
On 07-10 10:29, Rodrigo P. Telles wrote:
Hi Jan,
Jan Janak wrote:
| Try to se what is going on in the radius server, if you are using
| freeradius then start it with -X cmdline option.
|
I did that and I received this:
----
rad_recv: Access-Request packet from host xxx.yyy.zzz.www:37861, id=204, length=51
~ User-Name = "1213"
~ Sip-Group = "Active"
~ Service-Type = Group-Check
~ NAS-IP-Address = xxx.yyy.zzz.www
~ NAS-Port = 0
~ Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 28
~ modcall[authorize]: module "preprocess" returns ok for request 28
~ modcall[authorize]: module "chap" returns noop for request 28
~ modcall[authorize]: module "mschap" returns noop for request 28
~ modcall[authorize]: module "digest" returns noop for request 28
~ rlm_realm: No '@' in User-Name = "1213", looking up realm NULL
~ rlm_realm: No such realm "NULL"
~ modcall[authorize]: module "suffix" returns noop for request 28
radius_xlat: ''
~ modcall[authorize]: module "sql" returns fail for request 28
modcall: group authorize returns fail for request 28
Finished request 28
Going to the next request
Waking up in 2 seconds...
--- Walking the entire request list ---
Cleaning up request 27 ID 203 with timestamp 416541dc
Waking up in 4 seconds...
--- Walking the entire request list ---
Cleaning up request 28 ID 204 with timestamp 416541e0
Nothing to do. Sleeping until we see a request.
---
I think that the problem is on
modcall[authorize]: module "sql" returns fail for request 28
but I don't know why module sql return "fail" for the request.
I saw the mysql log file too and freeradius doesn't do any query
about that request!
Do you have any idea?
Thanks for your answer.
Telles
| Jan.
|
| On 05-10 23:08, Rodrigo P. Telles wrote:
|
|>Hi Folks,
|>
|>I've been testing SER 0.8.14 Auth and ACC (radiusclient-0.4.4)
|>in radius (freeradius 1.0.1) and its working fine.
|>Now I tried to use group_radius module to check if a user is in a especific
|>group and it failed.
|>First I received a error about missing "Sip-Group" attribute and I found a
mail
|>about this error and howto correct it
|>(http://lists.iptel.org/pipermail/serdev/2004-July/002339.html).
|>Now SER doesn't return any error, just
|>
|>radius_is_user_in(): Failure
|>
|>after a long time.
|>
|>I have a user "1213" in group "general" on radius database like
this:
|>
|>mysql> select * from radgroupcheck;
|>+----+-----------+-----------+----+--------+
|>| id | GroupName | Attribute | op | Value |
|>+----+-----------+-----------+----+--------+
|>| 1 | general | Auth-Type | := | Digest |
|>+----+-----------+-----------+----+--------+
|>
|>mysql> select * from radcheck;
|>+----+----------+---------------+----+-------+
|>| id | UserName | Attribute | op | Value |
|>+----+----------+---------------+----+-------+
|>| 2 | 1213 | User-Password | == | testonly |
|>+----+----------+---------------+----+-------+
|>
|>mysql> select * from usergroup;
|>+----+----------+-----------+
|>| id | UserName | GroupName |
|>+----+----------+-----------+
|>| 1 | 1213 | general |
|>+----+----------+-----------+
|>
|>mysql> select * from radgroupreply;
|>+----+-----------+---------------+----+------------+------+
|>| id | GroupName | Attribute | op | Value | prio |
|>+----+-----------+---------------+----+------------+------+
|>| 3 | general | Reply-Message | = | Authorized | 0 |
|>+----+-----------+---------------+----+------------+------+
|>
|>
|>I googled this but I couldn't find anything about that.
|>Am I missing something?
|>Thanks in advance.
|>
|>_______________________________________________
|>Serusers mailing list
|>serusers(a)lists.iptel.org
|>http://lists.iptel.org/mailman/listinfo/serusers
|>
|
|
|
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
7:46 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Jan,
Jan Janak wrote:
| This might be the problem:
|
| rlm_realm: No '@' in User-Name = "1213", looking up realm NULL
| rlm_realm: No such realm "NULL"
|
| Jan.
|
I've been striped '@domain' (realm) in freeradius to authenticate ours
users without major problems.
Are you saying that I want to not strip the '@domain' part in freeradius?
Tx
| On 07-10 10:29, Rodrigo P. Telles wrote:
|
|>Hi Jan,
|>
|>Jan Janak wrote:
|>| Try to se what is going on in the radius server, if you are using
|>| freeradius then start it with -X cmdline option.
|>|
|>
|>I did that and I received this:
|>----
|>rad_recv: Access-Request packet from host xxx.yyy.zzz.www:37861, id=204, length=51
|>~ User-Name = "1213"
|>~ Sip-Group = "Active"
|>~ Service-Type = Group-Check
|>~ NAS-IP-Address = xxx.yyy.zzz.www
|>~ NAS-Port = 0
|>~ Processing the authorize section of radiusd.conf
|>modcall: entering group authorize for request 28
|>~ modcall[authorize]: module "preprocess" returns ok for request 28
|>~ modcall[authorize]: module "chap" returns noop for request 28
|>~ modcall[authorize]: module "mschap" returns noop for request 28
|>~ modcall[authorize]: module "digest" returns noop for request 28
|>~ rlm_realm: No '@' in User-Name = "1213", looking up realm
NULL
|>~ rlm_realm: No such realm "NULL"
|>~ modcall[authorize]: module "suffix" returns noop for request 28
|>radius_xlat: ''
|>~ modcall[authorize]: module "sql" returns fail for request 28
|>modcall: group authorize returns fail for request 28
|>Finished request 28
|>Going to the next request
|>Waking up in 2 seconds...
|>--- Walking the entire request list ---
|>Cleaning up request 27 ID 203 with timestamp 416541dc
|>Waking up in 4 seconds...
|>--- Walking the entire request list ---
|>Cleaning up request 28 ID 204 with timestamp 416541e0
|>Nothing to do. Sleeping until we see a request.
|>---
|>
|>I think that the problem is on
|>modcall[authorize]: module "sql" returns fail for request 28
|>
|>but I don't know why module sql return "fail" for the request.
|>I saw the mysql log file too and freeradius doesn't do any query
|>about that request!
|>
|>Do you have any idea?
|>Thanks for your answer.
|>
|>
|>Telles
|>
|>| Jan.
|>|
|>| On 05-10 23:08, Rodrigo P. Telles wrote:
|>|
|>|>Hi Folks,
|>|>
|>|>I've been testing SER 0.8.14 Auth and ACC (radiusclient-0.4.4)
|>|>in radius (freeradius 1.0.1) and its working fine.
|>|>Now I tried to use group_radius module to check if a user is in a especific
|>|>group and it failed.
|>|>First I received a error about missing "Sip-Group" attribute and I
found a mail
|>|>about this error and howto correct it
|>|>(http://lists.iptel.org/pipermail/serdev/2004-July/002339.html).
|>|>Now SER doesn't return any error, just
|>|>
|>|>radius_is_user_in(): Failure
|>|>
|>|>after a long time.
|>|>
|>|>I have a user "1213" in group "general" on radius database
like this:
|>|>
|>|>mysql> select * from radgroupcheck;
|>|>+----+-----------+-----------+----+--------+
|>|>| id | GroupName | Attribute | op | Value |
|>|>+----+-----------+-----------+----+--------+
|>|>| 1 | general | Auth-Type | := | Digest |
|>|>+----+-----------+-----------+----+--------+
|>|>
|>|>mysql> select * from radcheck;
|>|>+----+----------+---------------+----+-------+
|>|>| id | UserName | Attribute | op | Value |
|>|>+----+----------+---------------+----+-------+
|>|>| 2 | 1213 | User-Password | == | testonly |
|>|>+----+----------+---------------+----+-------+
|>|>
|>|>mysql> select * from usergroup;
|>|>+----+----------+-----------+
|>|>| id | UserName | GroupName |
|>|>+----+----------+-----------+
|>|>| 1 | 1213 | general |
|>|>+----+----------+-----------+
|>|>
|>|>mysql> select * from radgroupreply;
|>|>+----+-----------+---------------+----+------------+------+
|>|>| id | GroupName | Attribute | op | Value | prio |
|>|>+----+-----------+---------------+----+------------+------+
|>|>| 3 | general | Reply-Message | = | Authorized | 0 |
|>|>+----+-----------+---------------+----+------------+------+
|>|>
|>|>
|>|>I googled this but I couldn't find anything about that.
|>|>Am I missing something?
|>|>Thanks in advance.
|>|>
|>|>_______________________________________________
|>|>Serusers mailing list
|>|>serusers(a)lists.iptel.org
|>|>http://lists.iptel.org/mailman/listinfo/serusers
|>|>
|>|
|>|
|>|
|>
|>_______________________________________________
|>Serusers mailing list
|>serusers(a)lists.iptel.org
|>http://lists.iptel.org/mailman/listinfo/serusers
|>
|
|
|
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
iD8DBQFBcV56iLK8unYgEMQRAodwAJ97wI/ljzjqM/yOE09a8oZXiLcungCfV9c8
+s25WGzz1A9H60Oo6Rn4p+k=
=h3Eq
-----END PGP SIGNATURE-----
7351
days inactive
7361
days old
4 comments
2 participants
participants (2)
-
Jan Janak -
Rodrigo P. Telles