CHAP Problems

Radius radius at kingmanaz.net
Thu Nov 24 16:00:36 CET 2005


When I put the := system first and := local second in the user file, it 
started working.

DEFAULT Auth-Type := System
                  Fall-Though = Yes

DEFAULT Auth-Type := Local
                  Fall-Though = Yes

It's working for both PAP and CHAP login's.

I heard this is not the way to do this, but it does seem to be working.



----- Original Message ----- 
From: "Christopher Carver" <ccarver at pennswoods.net>
To: "FreeRadius users mailing list" <freeradius-users at lists.freeradius.org>
Sent: Thursday, November 24, 2005 6:10 AM
Subject: Re: CHAP Problems


> radius at kingmanaz.net wrote:
>
>>I have tried to hire someone to help with my Radius over the last 6 
>>month's
>>but have not been able to get it
>>working correctly.
>>
> As much as I would like to take your money, its probably not necessary. 
> :-)   This is usually a very simple thing to get working.
>
>>I seem to be getting answers from my MySql database but when a CHAP 
>>request
>>comes in, it will not authorize and ells us Auth-Type already set.
> Make sure the op column is set to ":=" for Auth-Type attribute in your 
> mysql db.  This will ensure that the Auth-Type you set there will override 
> any previous.  This is definitely one problem your having.  Its indicated 
> by this error message in debugging:
> rlm_chap: WARNING: Auth-Type already set. Not setting to CHAP
>
> You must make sure this is fixed and CHAP is being used.  This is the 
> first problem to solve.  You can see that next in the auth section its 
> trying to use rlm_unix.  That means something is setting the Auth-Type to 
> system.  It looks like its getting set to Local also.  Also be particular 
> about the ordering of your modules in the Authorize {} block of 
> radiusd.conf as well.  These modules are called in descending order.  This 
> could be the source of your incorrect Auth-Type setting.  Solve this 
> problem and write back with any new errors or problems.
>
> -Chris Carver
> - List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html
> 




More information about the Freeradius-Users mailing list