Message-Authenticator

Norbert Wegener norbert.wegener at siemens.com
Sat Jan 12 14:10:36 CET 2008


Alan DeKok wrote:
> Norbert Wegener wrote:
>   
>> In cvs from January 9th I noticed for the first time, that freeradius
>> complains about packets without Message-Authenticator and ignores them:
>>
>> WARNING: Insecure packet from host 145.25.153.222:  Packet does not
>> contain required Message-Authenticator attribute
>>
>> How can freeradius be convinced to handle those packets?
>>     
>
>   It should...
>
>   
>> In clients.conf I have
>>        require_message_authenticator = no
>>
>> but the clients come from an sql database.
>>     
>
>   The default for that field is "no", even for clients coming from SQL.
>
>   The only thing I can think of is that you did a "cvs update" which
> took the definition of that field, but didn't rebuild the SQL module,
> which depends on it.
>
>   Try doing a build from a clean CVS checkout, or from the 2.0.0 tarball.
>   
Maybe that has been the problem. I took the rpms from
http://download.opensuse.org/repositories/network:/aaa/openSUSE_10.2/i586/
and it works as expected. Thanks.
Norbert Wegener

>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>   




More information about the Freeradius-Users mailing list