Re: Subscriber management and QinQ

I will also include the debugging logs from the freeradius database. It explicitly says that the user who is authenticating is not found in the database, but the weird thing is: it's right there.

The user who is requesting has username = 'core-nkh-02.ge-1/0/0:100-1005':

Ready to process requests.
rad_recv: Access-Request packet from host 185.52.208.1 port 50245, id=40, length=192
	User-Name = "core-nkh-02.ge-1/0/0:100-1005"
	Service-Type = Framed-User
	Chargeable-User-Identity = ""
	Acct-Session-Id = "1451118"
	ERX-Dhcp-Options = "5\001\0017\007\001y\003!\006*\212\014\tcom-rtr-1=\007\001L^\014\024\333\332"
	ERX-Dhcp-Mac-Addr = "4c5e.0c14.dbda"
	NAS-Identifier = "core-nkh-02"
	NAS-Port = 268436461
	NAS-Port-Id = "ge-1/0/0.1073932051:100-1005"
	NAS-Port-Type = Ethernet
	NAS-IP-Address = 185.52.208.1
# Executing section authorize from file /etc/freeradius/sites-enabled/default
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
++[digest] returns noop
[suffix] No '@' in User-Name = "core-nkh-02.ge-1/0/0:100-1005", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
[sql] 	expand: %{User-Name} -> core-nkh-02.ge-1/0/0:100-1005
[sql] sql_set_user escaped user --> 'core-nkh-02.ge-1/0/0:100-1005'
rlm_sql (sql): Reserving sql socket id: 4
[sql] 	expand: 
SELECT id, username, attribute, value, op           FROM radcheck           WHERE username = '%{SQL-User-Name}'           ORDER BY id -> 
SELECT id, username, attribute, value, op           FROM radcheck           WHERE username = 'core-nkh-02.ge-1/0/0:100-1005'           ORDER BY id
rlm_sql_mysql: query:  
SELECT id, username, attribute, value, op           FROM radcheck           WHERE username = 'core-nkh-02.ge-1/0/0:100-1005'           ORDER BY id
[sql] 	expand: 
SELECT groupname           FROM radusergroup           WHERE username = '%{SQL-User-Name}'           ORDER BY priority -> 
SELECT groupname           FROM radusergroup           WHERE username = 'core-nkh-02.ge-1/0/0:100-1005'           ORDER BY priority
rlm_sql_mysql: query:  
SELECT groupname           FROM radusergroup           WHERE username = 'core-nkh-02.ge-1/0/0:100-1005'           ORDER BY priority
rlm_sql (sql): Released sql socket id: 4
[sql] User core-nkh-02.ge-1/0/0:100-1005 not found
++[sql] returns notfound
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No "known good" password found for the user.  Authentication may fail because of this.
++[pap] returns noop
ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user
Failed to authenticate the user.
Using Post-Auth-Type Reject
# Executing group from file /etc/freeradius/sites-enabled/default
+- entering group REJECT {...}
[sql] 	expand: %{User-Name} -> core-nkh-02.ge-1/0/0:100-1005
[sql] sql_set_user escaped user --> 'core-nkh-02.ge-1/0/0:100-1005'
[sql] 	expand: %{User-Password} -> 
[sql] 	... expanding second conditional
[sql] 	expand: %{Chap-Password} -> 
[sql] 	expand: INSERT INTO radpostauth                           (username, pass, reply, authdate)                           VALUES (                           '%{User-Name}',                           '%{%{User-Password}:-%{Chap-Password}}',                           '%{reply:Packet-Type}', '%S') -> INSERT INTO radpostauth                           (username, pass, reply, authdate)                           VALUES (                           'core-nkh-02.ge-1/0/0:100-1005',                           '',                           'Access-Reject', '2016-11-08 10:29:26')
[sql] 	expand: /var/log/freeradius/sqltrace.sql -> /var/log/freeradius/sqltrace.sql
rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth                           (username, pass, reply, authdate)                           VALUES (                           'core-nkh-02.ge-1/0/0:100-1005',                           '',                           'Access-Reject', '2016-11-08 10:29:26')
rlm_sql (sql): Reserving sql socket id: 3
rlm_sql_mysql: query:  INSERT INTO radpostauth                           (username, pass, reply, authdate)                           VALUES (                           'core-nkh-02.ge-1/0/0:100-1005',                           '',                           'Access-Reject', '2016-11-08 10:29:26')
rlm_sql (sql): Released sql socket id: 3
++[sql] returns ok
[attr_filter.access_reject] 	expand: %{User-Name} -> core-nkh-02.ge-1/0/0:100-1005
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 0
Sending Access-Reject of id 40 to 185.52.208.1 port 50245
Waking up in 4.9 seconds.
Cleaning up request 0 ID 40 with timestamp +16