FreeRadius working as a ProxyRadius using PAP protocol

NGUYEN DANG LUAN, Eric eric.nguyen-dang-luan at sogeti.com
Wed Nov 12 15:39:59 CET 2008


> -----Message d'origine-----
> De : freeradius-users-bounces+eric.nguyen-dang-luan=sogeti.com at lists.freeradius.org [mailto:freeradius-users-bounces+eric.nguyen-dang-luan=sogeti.com at lists.freeradius.org] De la part de tnt at kalik.net
> Envoyé : mercredi 12 novembre 2008 12:15
> À : FreeRadius users mailing list
> Objet : Re: FreeRadius working as a ProxyRadius using PAP protocol
>
> >I'm trying to use FreeRadius (server-2.1.1) as a Proxy Radius with PAP
> >protocol.
> >
>
> If you ment to proxy only pap requests, your configuration is not going
> to work.
>
> >proxy.conf:
> >
> > 
> >
> >realm NULL {
> >
> >        authhost        = ***.***.***.***:1645
> >
> >        accthost        = ***.***.***.***:1646
> >
> >        secret          = pass
> >
> >}
> >
> >users:
> >
> >DEFAULT FreeRADIUS-Proxied-To == ***.***.***.***, Auth-Type := PAP
> >
>
> It was an eap request so that didn't match.
>
> >< Proxying request 0 to home server ***.***.***.*** port 1645
> >
> >< Sending Access-Request of id 210 to ***.***.***.*** port 1645
> >
> ><         Message-Authenticator = 0x00000000000000000000000000000000
> >
> ><         Service-Type = Framed-User
> >
> ><         User-Name = "enguyend"
> >
> ><         Framed-MTU = 1488
> >
> ><         Called-Station-Id = "00-1D-7E-5F-F7-39:SogetiNET"
> >
> ><         Calling-Station-Id = "00-16-6F-AA-80-DD"
> >
> ><         NAS-Port-Type = Wireless-802.11
> >
> ><         Connect-Info = "CONNECT 54Mbps 802.11g"
> >
> ><         EAP-Message = 0x0200000d01656e677579656e64
> >
> ><         NAS-IP-Address = 192.168.1.1
> >
> ><         NAS-Port = 1
> >
> ><         NAS-Port-Id = "STA port # 1"
> >
> ><         Proxy-State = 0x30
> >
> >< Going to the next request
>..
> >< Rejecting request 0 due to lack of any response from home server
> >***.***.***.*** port 1645
> >
> >< There was no response configured: rejecting request 0
> >
>
> Request was proxied but home server didn't respond. You will have to
> debug the home server and see did it recieve the request.
>
> Ivan Kalik
> Kalik Informatika ISP
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


My request are proxied : i got this the following respond : 
< rad_recv: Access-Reject packet from host 205.223.235.196 port 1645, id=186, length=23
<         Proxy-State = 0x30

In my radius log file:
< *******   Incoming RADIUS packet:   *******
< radrecv: Packet from host 10.226.66.51, port=24670
< send_reject()
< *******   Incoming RADIUS packet:   *******
< radrecv: Packet from host 10.226.65.52, port=25433
< send_reject()

I think the problem is the protocol I use : PAP.
I'm not sure that FreeRadius use PAP protocol to communicate with Radius Server.
And is it normal that I can't see any password when I use a sniffer?

Regards

NGUYEN Eric




More information about the Freeradius-Users mailing list