M
M
Maxim2014-10-16 10:00:38
linux
Maxim, 2014-10-16 10:00:38

How to fix a bug in FreeRadius?

Error when setting radius

Sending Access-Request of id 32 to 127.0.0.1 port 1812
        User-Name = "shad"
        User-Password = "test"
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 1812
        Message-Authenticator = 0x00000000000000000000000000000000
rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=32, length=20

I did it according to the instructions www.opennet.ru/openforum/vsluhforumID3/57240.html
I don’t understand anything ..
users
DEFAULT	Framed-Protocol == PPP
  Framed-Protocol = PPP,
  Framed-Compression = Van-Jacobson-TCP-IP

DEFAULT	Hint == "CSLIP"
  Framed-Protocol = SLIP,
  Framed-Compression = Van-Jacobson-TCP-IP

DEFAULT	Hint == "SLIP"
  Framed-Protocol = SLIP

shad  Auth-Type := Local, User-Password == "test"
   Service-Type = Framed-User,
   Framed-Protocol = PPP,
   Framed-IP-Address = 192.168.1.5,
   Framed-IP-Netmask = 255.255.255.0,

clients.conf
client 127.0.0.1 {
  secret      = 123
  shortname   = localhost
  nastype     = other
}

console exhaust
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1 port 57010, id=82, length=74
        User-Name = "shad"
        User-Password = "test"
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 1812
        Message-Authenticator = 0x24074592e82759924785f8deb3919b50
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
++[digest] returns noop
[suffix] No '@' in User-Name = "shad", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
WARNING: Found User-Password == "...".
WARNING: Are you sure you don't mean Cleartext-Password?
WARNING: See "man rlm_pap" for more information.
[files] users: Matched entry shad at line 13
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No "known good" password found for the user.  Authentication may fail because of this.
++[pap] returns noop
Found Auth-Type = Local
WARNING: Please update your configuration, and remove 'Auth-Type = Local'
WARNING: Use the PAP or CHAP modules instead.
No "known good" password was configured for the user.
As a result, we cannot authenticate the user.
Failed to authenticate the user.
Using Post-Auth-Type Reject
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group REJECT {...}
[attr_filter.access_reject]     expand: %{User-Name} -> shad
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 0
Sending Access-Reject of id 82 to 127.0.0.1 port 57010
Waking up in 4.9 seconds.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
S
Saenara, 2014-10-16
@maxpointn2point

They wrote to you directly:
WARNING: Please update your configuration, and remove 'Auth-Type = Local'
WARNING: Use the PAP or CHAP modules instead.
And here is another useful tip.
deployingradius.com/documents/configuration/auth_t...

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question