Jradius & FreeRadius problem!
wlanmac
wlan at mac.com
Thu Sep 25 08:15:46 CEST 2008
If you are trying to change an AccessReject into an AccessAccept in the
post-auth section, then you must have the following option configured
for the rlm_jradius module:
jradius {
...
allow_codechange = yes
}
David
> Date: Thu, 25 Sep 2008 07:58:56 +0200
> From: Jelena ?agar <jelena.zagar at logos.hr>
> Subject: Jradius & FreeRadius problem!
> To: <freeradius-users at lists.freeradius.org>
> Message-ID: <C5F1749C7722D74585F0B099D0392C757C386C at dionis.logos.hr>
> Content-Type: text/plain; charset="iso-8859-2"
>
> I installed FreeRadius on the Windows machine. I started JRadius as well. I
> started the client. The JRadius sends back to the FreeRadius the access
> accept packet, but Free Radius always sends to the client the Access Reject
> packet. Only the Reply-Message is read correctly from the returned packet.
> What is the reason for such an error. Down is the log trace. With the red
> color, the access accept packet is marked.
> I hope that somebody will help me solving this issue.
>
> rad_recv: Access-Request packet from host 127.0.0.1:1376, id=1, length=108
> User-Name = "testuser"
> User-Password = "testpw"
> NAS-Port-Type = Wireless-802.11
> NAS-Port = 1
> NAS-IP-Address = 127.0.0.1
> X-Ascend-Send-Passwd = "\000\000\000\001"
> Calling-Station-Id = "0982331361"
> Service-Type = Login-User
> Message-Authenticator = 0x58c175d66fd2fd81043794526cc39783
> Processing the authorize section of radiusd.conf
> modcall: entering group authorize for request 9
> rlm_jradius: Trying to (re)connect unconnected handle 5
> rlm_jradius: Reserving JRadius socket id: 5
> rlm_jradius: got socket 5 after skipping 0 unconnected handles, tried to
> reconne
> ct 1 though
> rlm_jradius: packing attribute User-Name (type: 1; len: 8)
> rlm_jradius: packing attribute User-Password (type: 2; len: 6)
> rlm_jradius: packing attribute NAS-Port-Type (type: 61; len: 4)
> rlm_jradius: packing attribute NAS-Port (type: 5; len: 4)
> rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4)
> rlm_jradius: packing attribute X-Ascend-Send-Passwd (type: 232; len: 4)
> rlm_jradius: packing attribute Calling-Station-Id (type: 31; len: 10)
> rlm_jradius: packing attribute Service-Type (type: 6; len: 4)
> rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16)
> rlm_jradius: packing packet with code: 1 (attr length: 168)
> rlm_jradius: packing packet with code: 0 (attr length: 0)
> rlm_jradius: sending 197 bytes to socket 5
> rlm_jradius: return code 8; receiving 2 packets
> rlm_jradius: reading packet: code=1 len=168
> rlm_jradius: reading attribute: type=1; len=8
> rlm_jradius: reading attribute: type=2; len=6
> rlm_jradius: reading attribute: type=61; len=4
> rlm_jradius: reading attribute: type=5; len=4
> rlm_jradius: reading attribute: type=4; len=4
> rlm_jradius: reading attribute: type=232; len=4
> rlm_jradius: reading attribute: type=31; len=10
> rlm_jradius: reading attribute: type=6; len=4
> rlm_jradius: reading attribute: type=80; len=16
> rlm_jradius: reading packet: code=0 len=0
> rlm_jradius: reading request: config_item: len=57
> rlm_jradius: reading attribute: type=1259012098; len=32
> rlm_jradius: reading attribute: type=1259012097; len=1
> rlm_jradius: Released JRadius socket id: 5
> modcall[authorize]: module "jradius" returns updated for request 9
> modcall: leaving group authorize (returns updated) for request 9
> auth: No authenticate method (Auth-Type) configuration found for the
> request: Re
> jecting the user
> auth: Failed to validate the user.
> Login incorrect: [testuser/testpw] (from client localhost port 1 cli
> 0982331361)
>
> Found Post-Auth-Type
> Processing the post-auth section of radiusd.conf
> modcall: entering group REJECT for request 9
> rlm_jradius: Trying to (re)connect unconnected handle 4
> rlm_jradius: Reserving JRadius socket id: 4
> rlm_jradius: got socket 4 after skipping 0 unconnected handles, tried to
> reconne
> ct 1 though
> rlm_jradius: packing attribute User-Name (type: 1; len: 8)
> rlm_jradius: packing attribute User-Password (type: 2; len: 6)
> rlm_jradius: packing attribute NAS-Port-Type (type: 61; len: 4)
> rlm_jradius: packing attribute NAS-Port (type: 5; len: 4)
> rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4)
> rlm_jradius: packing attribute X-Ascend-Send-Passwd (type: 232; len: 4)
> rlm_jradius: packing attribute Calling-Station-Id (type: 31; len: 10)
> rlm_jradius: packing attribute Service-Type (type: 6; len: 4)
> rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16)
> rlm_jradius: packing packet with code: 1 (attr length: 168)
> rlm_jradius: packing packet with code: 3 (attr length: 0)
> rlm_jradius: packing attribute JRadius-Session-Id (type: 1259012098; len:
> 32)
> rlm_jradius: packing attribute JRadius-Request-Id (type: 1259012097; len: 1)
> rlm_jradius: packing attribute Post-Auth-Type (type: 1014; len: 4)
> rlm_jradius: sending 270 bytes to socket 4
> rlm_jradius: return code 8; receiving 2 packets
> rlm_jradius: reading packet: code=1 len=168
> rlm_jradius: reading attribute: type=1; len=8
> rlm_jradius: reading attribute: type=2; len=6
> rlm_jradius: reading attribute: type=61; len=4
> rlm_jradius: reading attribute: type=5; len=4
> rlm_jradius: reading attribute: type=4; len=4
> rlm_jradius: reading attribute: type=232; len=4
> rlm_jradius: reading attribute: type=31; len=10
> rlm_jradius: reading attribute: type=6; len=4
> rlm_jradius: reading attribute: type=80; len=16
> rlm_jradius: reading packet: code=2 len=154
> rlm_jradius: reading attribute: type=18; len=8
> rlm_jradius: reading attribute: type=1000; len=4
> rlm_jradius: reading attribute: type=1; len=8
> rlm_jradius: reading attribute: type=2; len=6
> rlm_jradius: reading attribute: type=6; len=4
> rlm_jradius: reading attribute: type=7; len=4
> rlm_jradius: reading attribute: type=8; len=4
> rlm_jradius: reading attribute: type=13; len=4
> rlm_jradius: reading attribute: type=12; len=4
> rlm_jradius: reading request: config_item: len=73
> rlm_jradius: reading attribute: type=1259012098; len=32
> rlm_jradius: reading attribute: type=1259012097; len=1
> rlm_jradius: reading attribute: type=1014; len=4
> rlm_jradius: Released JRadius socket id: 4
> modcall[post-auth]: module "jradius" returns updated for request 9
> modcall: leaving group REJECT (returns updated) for request 9
> Sending Access-Reject of id 1 to 127.0.0.1 port 1376
> Reply-Message := "Accepted"
> Finished request 9
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20080925/b4a00053/attachment.html>
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: smime.p7s
> Type: application/x-pkcs7-signature
> Size: 3406 bytes
> Desc: not available
> Url : <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20080925/b4a00053/attachment.bin>
>
> ------------------------------
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>
> End of Freeradius-Users Digest, Vol 41, Issue 113
> *************************************************
More information about the Freeradius-Users
mailing list