Freeradius+Java application api call and authenticate

Sollunga S sollunga at yahoo.com
Fri Mar 13 09:46:31 CET 2009


thanks Ivan Kalik will go thru the cisco documentation and get backto you, meantime, still i am wondering howto post the information from freeradius to java application, iam confused with jradius document.





________________________________
From: "tnt at kalik.net" <tnt at kalik.net>
To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Sent: Thursday, March 12, 2009 3:36:48 PM
Subject: Re: Freeradius+Java application api call and authenticate

>also i am going thru the documentation part of jradius to imply? can anyone
>of you suggest me whether i am in right direction?
>

If you want to use Java that is a good way.

>> now by
>> making the ACS to do proxying at network configuration, i can see the
>> request

Well, we don't. Post the debug *with* the request.

>> is flowing to freeradius from ACS, and the freeradius does
>> ""
>> [chap] rlm_chap: Attribute "User-Name" is required for authentication.
>> ++[chap] returns invalid
>> Failed to authenticate the user.
>> Using Post-Auth-Type Reject
>> +- entering group REJECT {...}
>> [attr_filter.access_reject]     expand: %{User-Name} ->
>> ++[attr_filter.access_reject] returns noop
>> Delaying reject of request 27 for 1 seconds
>>

It's quite likely that it wasn't a chap request to start with. You are
forcing Auth-Type CHAP onto something that isn't chap.

>> ""
>>
>> after a while it says
>>
>> ""
>> [pap] Found existing Auth-Type, not changing it.
>> ++[pap] returns noop
>> Found Auth-Type = CHAP
>> +- entering group CHAP {...}
>> [chap] login attempt by "Doe" with CHAP password
>> [chap] Using clear text password "hello" for user Doe authentication.
>> [chap] chap user Doe authenticated succesfully
>> ++[chap] returns ok
>> +- entering group post-auth {...}
>> ++[exec] returns noop
>> Sending Access-Accept of id 63 to
>>
>> ""

That looks fine. But you might need to return things like Service-Type in
the Access-Accept. You will need to read Cisco documentation to see what
is need for making a connection.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



      
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20090313/6fbba306/attachment.html>


More information about the Freeradius-Users mailing list