radius не авторизует юзера по БД

[ave_maria]

Этот весь лог, начиная с инициализации:

gateway:/etc/raddb # radiusd -X
Starting - reading configuration files ...
reread_config: reading radiusd.conf
Config: including file: /etc/raddb/clients.conf
Config: including file: /etc/raddb/cakesql.conf
main: prefix = "/usr"
main: localstatedir = "/var"
main: logdir = "/var/log/radius"
main: libdir = "/usr/lib/freeradius"
main: radacctdir = "/var/log/radius/radacct"
main: hostname_lookups = no
main: snmp = no
main: max_request_time = 30
main: cleanup_delay = 5
main: max_requests = 5120
main: delete_blocked_requests = 0
main: port = 0
main: allow_core_dumps = no
main: log_stripped_names = no
main: log_file = "/var/log/radius/radius.log"
main: log_auth = yes
main: log_auth_badpass = yes
main: log_auth_goodpass = no
main: pidfile = "/var/run/radiusd/radiusd.pid"
main: user = "radiusd"
main: group = "radiusd"
main: usercollide = no
main: lower_user = "no"
main: lower_pass = "no"
main: nospace_user = "no"
main: nospace_pass = "no"
main: checkrad = "/usr/sbin/checkrad"
main: proxy_requests = yes
security: max_attributes = 200
security: reject_delay = 1
security: status_server = no
main: debug_level = 0
read_config_files: reading dictionary
read_config_files: reading naslist
read_config_files: reading clients
read_config_files: reading realms
radiusd: entering modules setup
Module: Library search path is /usr/lib/freeradius
Module: Loaded PAP
pap: encryption_scheme = "clear"
pap: auto_header = no
Module: Instantiated pap (pap)
Module: Loaded CHAP
Module: Instantiated chap (chap)
Module: Loaded MS-CHAP
mschap: use_mppe = no
mschap: require_encryption = no
mschap: require_strong = no
mschap: with_ntdomain_hack = no
mschap: passwd = "(null)"
mschap: ntlm_auth = "(null)"
Module: Instantiated mschap (mschap)
Module: Loaded preprocess
preprocess: huntgroups = "/etc/raddb/huntgroups"
preprocess: hints = "/etc/raddb/hints"
preprocess: with_ascend_hack = no
preprocess: ascend_channels_per_line = 23
preprocess: with_ntdomain_hack = no
preprocess: with_specialix_jetstream_hack = no
preprocess: with_cisco_vsa_hack = no
preprocess: with_alvarion_vsa_hack = no
Module: Instantiated preprocess (preprocess)
Module: Loaded files
files: usersfile = "/etc/raddb/users"
files: acctusersfile = "/etc/raddb/acct_users"
files: preproxy_usersfile = "/etc/raddb/preproxy_users"
files: compat = "no"
Module: Instantiated files (files)
Module: Loaded SQL
sql: driver = "rlm_sql_postgresql"
sql: server = "127.0.0.1"
sql: port = ""
sql: login = "cake"
sql: password = "cake"
sql: radius_db = "cake"
sql: nas_table = "nas"
sql: sqltrace = yes
sql: sqltracefile = "/var/log/radius/sqltrace.sql"
sql: readclients = no
sql: deletestalesessions = no
sql: num_sql_socks = 30
sql: sql_user_name = "%{User-Name}"
sql: default_user_profile = ""
sql: query_on_not_found = no
sql: authorize_check_query = "select * from cake.auth_check('%{SQL-
User-Name}')"
sql: authorize_reply_query = "select * from cake.auth_reply('%{SQL-
User-Name}')"
sql: authorize_group_check_query = ""
sql: authorize_group_reply_query = ""
sql: accounting_onoff_query = ""
sql: accounting_update_query = "select cake.acct_update('%{Acct-
Unique-Session-Id}', %{Acct-Output-Octets}, %{Acct-Input-Octets})"
sql: accounting_update_query_alt = ""
sql: accounting_start_query = "select cake.start_session('%{Acct-
Unique-Session-Id}','%{SQL-User-Name}')"
sql: accounting_start_query_alt = ""
sql: accounting_stop_query = "select cake.stop_session(%{Acct-Input-
Octets},%{Acct-Output-Octets},'%{Acct-Unique-Session-Id}')"
sql: accounting_stop_query_alt = ""
sql: group_membership_query = ""
sql: connect_failure_retry_delay = 60
sql: simul_count_query = ""
sql: simul_verify_query = ""
sql: postauth_query = ""
sql: safe-characters =
"@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-
_: /"
rlm_sql (cake_sql): Driver rlm_sql_postgresql (module
rlm_sql_postgresql) loaded and linked
rlm_sql (cake_sql): Attempting to connect to ca...@127.0.0.1:/cake
rlm_sql (cake_sql): starting 0
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #0
rlm_sql (cake_sql): Connected new DB handle, #0
rlm_sql (cake_sql): starting 1
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #1
rlm_sql (cake_sql): Connected new DB handle, #1
rlm_sql (cake_sql): starting 2
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #2
rlm_sql (cake_sql): Connected new DB handle, #2
rlm_sql (cake_sql): starting 3
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #3
rlm_sql (cake_sql): Connected new DB handle, #3
rlm_sql (cake_sql): starting 4
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #4
rlm_sql (cake_sql): Connected new DB handle, #4
rlm_sql (cake_sql): starting 5
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #5
rlm_sql (cake_sql): Connected new DB handle, #5
rlm_sql (cake_sql): starting 6
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #6
rlm_sql (cake_sql): Connected new DB handle, #6
rlm_sql (cake_sql): starting 7
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #7
rlm_sql (cake_sql): Connected new DB handle, #7
rlm_sql (cake_sql): starting 8
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #8
rlm_sql (cake_sql): Connected new DB handle, #8
rlm_sql (cake_sql): starting 9
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #9
rlm_sql (cake_sql): Connected new DB handle, #9
rlm_sql (cake_sql): starting 10
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #10
rlm_sql (cake_sql): Connected new DB handle, #10
rlm_sql (cake_sql): starting 11
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #11
rlm_sql (cake_sql): Connected new DB handle, #11
rlm_sql (cake_sql): starting 12
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #12
rlm_sql (cake_sql): Connected new DB handle, #12
rlm_sql (cake_sql): starting 13
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #13
rlm_sql (cake_sql): Connected new DB handle, #13
rlm_sql (cake_sql): starting 14
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #14
rlm_sql (cake_sql): Connected new DB handle, #14
rlm_sql (cake_sql): starting 15
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #15
rlm_sql (cake_sql): Connected new DB handle, #15
rlm_sql (cake_sql): starting 16
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #16
rlm_sql (cake_sql): Connected new DB handle, #16
rlm_sql (cake_sql): starting 17
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #17
rlm_sql (cake_sql): Connected new DB handle, #17
rlm_sql (cake_sql): starting 18
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #18
rlm_sql (cake_sql): Connected new DB handle, #18
rlm_sql (cake_sql): starting 19
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #19
rlm_sql (cake_sql): Connected new DB handle, #19
rlm_sql (cake_sql): starting 20
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #20
rlm_sql (cake_sql): Connected new DB handle, #20
rlm_sql (cake_sql): starting 21
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #21
rlm_sql (cake_sql): Connected new DB handle, #21
rlm_sql (cake_sql): starting 22
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #22
rlm_sql (cake_sql): Connected new DB handle, #22
rlm_sql (cake_sql): starting 23
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #23
rlm_sql (cake_sql): Connected new DB handle, #23
rlm_sql (cake_sql): starting 24
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #24
rlm_sql (cake_sql): Connected new DB handle, #24
rlm_sql (cake_sql): starting 25
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #25
rlm_sql (cake_sql): Connected new DB handle, #25
rlm_sql (cake_sql): starting 26
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #26
rlm_sql (cake_sql): Connected new DB handle, #26
rlm_sql (cake_sql): starting 27
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #27
rlm_sql (cake_sql): Connected new DB handle, #27
rlm_sql (cake_sql): starting 28
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #28
rlm_sql (cake_sql): Connected new DB handle, #28
rlm_sql (cake_sql): starting 29
rlm_sql (cake_sql): Attempting to connect rlm_sql_postgresql #29
rlm_sql (cake_sql): Connected new DB handle, #29
Module: Instantiated sql (cake_sql)
Module: Loaded Acct-Unique-Session-Id
acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address,
Client-IP-Address, NAS-Port-Id"
Module: Instantiated acct_unique (acct_unique)
Listening on authentication *:1812
Listening on accounting *:1813
Ready to process requests.

<---- это вот начинается при попытке авторизоваться ---->

rad_recv: Access-Request packet from host 127.0.0.1:33566, id=241,
length=55
User-Name = "123"
User-Password = "123"
NAS-IP-Address = 255.255.255.255
NAS-Port = 2
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request 0
modcall[authorize]: module "chap" returns noop for request 0
modcall[authorize]: module "mschap" returns noop for request 0
modcall[authorize]: module "files" returns notfound for request 0
radius_xlat: '123'
rlm_sql (cake_sql): sql_set_user escaped user --> '123'
radius_xlat: 'select * from cake.auth_check('123')'
rlm_sql (cake_sql): Reserving sql socket id: 29
rlm_sql_postgresql: query: select * from cake.auth_check('123')
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: affected rows =
rlm_sql (cake_sql): User 123 not found in radcheck
radius_xlat: ''
radius_xlat: ''
rlm_sql (cake_sql): Released sql socket id: 29
modcall[authorize]: module "cake_sql" returns ok for request 0
modcall: leaving group authorize (returns ok) for request 0
auth: No authenticate method (Auth-Type) configuration found for the
request: Rejecting the user
auth: Failed to validate the user.
Login incorrect: [123/123] (from client localhost port 2)
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 241 to 127.0.0.1 port 33566
Waking up in 4 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 241 with timestamp 4975d5e3
Nothing to do. Sleeping until we see a request.

вэб-морда авторизуется по БД на ура... как фиксить? :(

[Anatoly Shipitsin]

2009/1/20 ave_maria <ny....@gmail.com>

Этот весь лог, начиная с инициализации:

rlm_sql (cake_sql): sql_set_user escaped user --> '123'
radius_xlat:  'select * from cake.auth_check('123')'

Делаем select * from cake.auth_check('123')' из psql

 modcall[authorize]: module "cake_sql" returns ok for request 0
modcall: leaving group authorize (returns ok) for request 0
auth: No authenticate method (Auth-Type) configuration found for the
request: Rejecting the user

Проверяем Auth-Type. В случае если ничего не было кручено то оно желает MS-CHAP. Локально используется не он.

вэб-морда авторизуется по БД на ура... как фиксить? :(

Читать внимательно документацию :)

[ave_maria]

> > Этот весь лог, начиная с инициализации:
> > rlm_sql (cake_sql): sql_set_user escaped user --> '123'
> > radius_xlat:  'select * from cake.auth_check('123')'
>
> Делаем select * from cake.auth_check('123')' из psql
>

postgres@gateway:/> psql -Ucake cake -c "select * from cake.users;"
id | login | name | pwd | balance | userblock | overtraffblock |
ip_addr | id_tariff | grp
----+-------+-------+------+---------+-----------+----------------
+---------+-----------+-----
1 | admin | Admin | 1234 | 0.00 | f | t
| 2 | 1 | 1
3 | 123 | 123 | 123 | 0.00 | f | t
| 4 | 1 | 0
(2 rows)

postgres@gateway:/> psql -Ucake cake -c "select * from cake.auth_check
('123');"
id | username | attribute | value | op
----+----------+-----------+-------+----
(0 rows)

>  modcall[authorize]: module "cake_sql" returns ok for request 0
>
> > modcall: leaving group authorize (returns ok) for request 0
> > auth: No authenticate method (Auth-Type) configuration found for the
> > request: Rejecting the user
>
> Проверяем Auth-Type. В случае если ничего не было кручено то оно желает
> MS-CHAP. Локально используется не он.
>

дык я через radtest 123 123 127.0.0.1 2 test делаю.

> > вэб-морда авторизуется по БД на ура... как фиксить? :(
>
> Читать внимательно документацию :)

документацию нужно все же в порядок приводить... ибо она не актуальна

[ave_maria]

да, дамп вот этот лил: http://cakebilling.googlegroups.com/web/cake-v1.0.1-UTF8.sql

[ave_maria]

кажется все ясно ) postgres собран без perl ... но у меня была полная
уверенность что с --with-perl и --with-maxbackends=1024
как соберу, rpm-ки выложу... вдруг кто еще на сусе собирать будет...
пока вопрос исчерпан.

[Anatoly Shipitsin]

2009/1/20 ave_maria <ny....@gmail.com>

Эмм... Perl PostgreSQL не нужен. Может без pgplsql?

[Anatoly Shipitsin]

2009/1/20 ave_maria <ny....@gmail.com>

postgres@gateway:/> psql -Ucake cake -c "select * from cake.auth_check
('123');"
 id | username | attribute | value | op
----+----------+-----------+-------+----
(0 rows)

 
А вот это указывает что у пользователя нет бабла. Нет бабла нет авторизации.

дык я через radtest 123 123 127.0.0.1 2 test делаю.

В этом случае Auth-Type должен быть равен default.

документацию нужно все же в порядок приводить... ибо она не актуальна

Если вы считаете, что она не актуальна укажите в каком месте.

[ave_maria]

нет, все равно не катит(
postgres@gateway:/root> psql -Ucake cake -c "select * from
cake.auth_check('123');"
could not change directory to "/root"

[ave_maria]

> > postgres@gateway:/> psql -Ucake cake -c "select * from cake.auth_check
> > ('123');"
> >  id | username | attribute | value | op
> > ----+----------+-----------+-------+----
> > (0 rows)
>
> А вот это указывает что у пользователя нет бабла. Нет бабла нет авторизации.
>
> > дык я через radtest 123 123 127.0.0.1 2 test делаю.
>
> В этом случае Auth-Type должен быть равен default.
>

ой) кажется за мной косяк) но так как мне нужно это биллинг
использовать в корпоративных целях, то я совсем забыл про стоимость :)
сорри

> > документацию нужно все же в порядок приводить... ибо она не актуальна
>
> Если вы считаете, что она не актуальна укажите в каком месте.

ну в частности ссылки подправить на новый war и sql файлы... + убрать
уже "обязательность" WIN кодировки... + если вы не возражаете я в
скором времени мигу выложить доку по установки сего биллинга на сусю
11 ... разумеется когда у меня все полностью заработает...

[Anatoly Shipitsin]

2009/1/20 ave_maria <ny....@gmail.com>

 

ну в частности ссылки подправить на новый war и sql файлы...

поправим.

+ убрать уже "обязательность" WIN кодировки...

Роли не играет так как дамп заливается корректно :]
 

+ если вы не возражаете я в
скором времени мигу выложить доку по установки сего биллинга на сусю
11 ... разумеется когда у меня все полностью заработает...

Пробуйте.