freeradius + mysql + pptpd

..........
..........
..........

설정 해주실분 --> 협의후 수고비 드립니다.

같이 삽질 하실분 --> 루트 계정 드립니다.

페도라 코어 5 에
freeradius-1.1.7.tar.gz 를

mysql 옵션 추가해서 rpmbuild 해서 설치 했습니다.

--with-mysql-lib-dir=/usr/lib/mysql
--with-mysql-include-dir=/usr/include/mysql

pptpd-1.3.3-1.fc5.i386.rpm 설치후
chap-secrets 설정 해서 테스트 성공후

pptpd 에 plugin radius.so 설정

freeradius-client-1.1.5.tar.bz2 설정

mysql에 radius 디비 새성
유저 생성은 dialup admin 설정후 생성

윈도우에서 pptpd 연결 시작 하면

radiusd 로 인증 요청이 오지만

mysql에 유저가 있는데도 radiusd 에서는 사용자를 찾을수 없다고 나옵니다.

여러가지 옵션 변경후 테스트 해도 짧은 지식에 원인을 찾을수가 없습니다.

도움부탁 드립니다.

radiusclient에
microsoft.dictonary를 include 했을때에는 mschap-v2 관련 에러가 나옵니다.
microsoft.dictonary 를 include 안했을때 생기는 에러 로그 아뢰

.............
Thread spawned new child 1. Total threads in pool: 1
Thread spawned new child 2. Total threads in pool: 2
Thread spawned new child 3. Total threads in pool: 3
Thread spawned new child 4. Total threads in pool: 4
Thread spawned new child 5. Total threads in pool: 5
Thread pool initialized
Listening on authentication *:1812
Listening on accounting *:1813
Ready to process requests.
Thread 1 waiting to be assigned a request
Thread 2 waiting to be assigned a request
Thread 3 waiting to be assigned a request
Thread 4 waiting to be assigned a request
Thread 5 waiting to be assigned a request
rad_recv: Access-Request packet from host 127.0.0.1:32772, id=237, length=69
Thread 1 got semaphore
--- Walking the entire request list ---
Waking up in 31 seconds...
Threads: total/active/spare threads = 5/0/5
Thread 1 handling request 0, (1 handled so far)
Service-Type = Framed-User
Framed-Protocol = PPP
User-Name = "testuser"
Calling-Station-Id = "123.xx.xx.xx"
NAS-IP-Address = 127.0.0.1
NAS-Port = 0
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request 0
modcall[authorize]: module "chap" returns noop for request 0
modcall[authorize]: module "mschap" returns noop for request 0
rlm_realm: No '@' in User-Name = "testuser", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 0
rlm_eap: No EAP-Message, not doing EAP
modcall[authorize]: module "eap" returns noop for request 0
users: Matched entry DEFAULT at line 153
users: Matched entry DEFAULT at line 172
users: Matched entry DEFAULT at line 184
modcall[authorize]: module "files" returns ok for request 0
radius_xlat: 'testuser'
rlm_sql (sql): sql_set_user escaped user --> 'testuser'
radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM
radcheck
WHERE Username = 'testuser' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 4
radius_xlat: 'SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,r

adgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE
usergroup.Userna
me = 'testuser' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY
radgroupcheck
.id'
radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM
radreply
WHERE Username = 'testuser' ORDER BY id'
radius_xlat: 'SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,r

adgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE
usergroup.Userna
me = 'testuser' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY
radgroupreply
.id'
rlm_sql (sql): Released sql socket id: 4
modcall[authorize]: module "sql" returns ok for request 0
rlm_pap: Found existing Auth-Type, not changing it.
modcall[authorize]: module "pap" returns noop for request 0
modcall: leaving group authorize (returns ok) for request 0
rad_check_password: Found Auth-Type System
auth: type "System"
Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 0
rlm_unix: Attribute "User-Password" is required for authentication.
modcall[authenticate]: module "unix" returns invalid for request 0
modcall: leaving group authenticate (returns invalid) for request 0
auth: Failed to validate the user.
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
Thread 1 waiting to be assigned a request