incorrect auth-type

[Sallee, Stephen (Jake)]

I am new to FreeRADIUS so please be patient with me.  I am scouring the
docs  as I write this but so far I have been stumped.  Below I have
included the debug output of my server when I send it a authentication
request.

You will see that the user is found and authenticated by the
"ntlm_auth_Cru" module, however the user is still rejected bec the
server says no auth-type was configured for the request.  Any help is
appreciated.

I have the following lines in my users file:
-----------------
DEFAULT         Auth-Type := ntlm_auth
        Fall-Through = Yes
-----------------

I also have the following in my radius.conf:
------------------
redundant ntlm_auth {
                group {
                        ntlm_auth_Cru {
                        reject = 1
                        ok = return
                        }
                        ntlm_auth_UMHB {
                        reject = 1
                        ok = return
                        }
                }
        }
------------------


Here is the debug output:
------------------
rad_recv: Access-Request packet from host 10.2.1.75 port 46841, id=239,
length=51
        User-Name = "image"
        User-Password = "image"
        NAS-IP-Address = 10.2.1.75
Tue Jul 27 13:01:03 2010 : Info: +- entering group authorize {...}
Tue Jul 27 13:01:03 2010 : Info: ++[preprocess] returns ok
Tue Jul 27 13:01:03 2010 : Info: ++- entering group ntlm_auth {...}
Tue Jul 27 13:01:03 2010 : Info: +++- entering group  {...}
Tue Jul 27 13:01:03 2010 : Info: [ntlm_auth_Cru]        expand:
--username=%{mschap:User-Name} -> --username=image
Tue Jul 27 13:01:03 2010 : Info: [ntlm_auth_Cru]        expand:
--password=%{User-Password} -> --password=image
Tue Jul 27 13:01:03 2010 : Debug: Exec-Program output: NT_STATUS_OK:
Success (0x0)
Tue Jul 27 13:01:03 2010 : Debug: Exec-Program-Wait: plaintext:
NT_STATUS_OK: Success (0x0)
Tue Jul 27 13:01:03 2010 : Debug: Exec-Program: returned: 0
Tue Jul 27 13:01:03 2010 : Info: ++++[ntlm_auth_Cru] returns ok
Tue Jul 27 13:01:03 2010 : Info: +++- group  returns ok
Tue Jul 27 13:01:03 2010 : Info: ++- group ntlm_auth returns ok
Tue Jul 27 13:01:03 2010 : Info: ++[expiration] returns noop
Tue Jul 27 13:01:03 2010 : Info: ++[logintime] returns noop
GOT CLONE -1208792368 0x9f8ff70
Tue Jul 27 13:01:03 2010 : Debug: rlm_perl: PacketFence SWITCH:
10.2.1.75
Tue Jul 27 13:01:03 2010 : Debug: rlm_perl: PacketFence MAC:
Tue Jul 27 13:01:03 2010 : Debug: rlm_perl: PacketFence USER: image
Tue Jul 27 13:01:03 2010 : Debug: rlm_perl: Added pair User-Name = image
Tue Jul 27 13:01:03 2010 : Debug: rlm_perl: Added pair User-Password =
image
Tue Jul 27 13:01:03 2010 : Debug: rlm_perl: Added pair NAS-IP-Address =
10.2.1.75
Tue Jul 27 13:01:03 2010 : Info: ++[perl] returns ok
Tue Jul 27 13:01:03 2010 : Info: No authenticate method (Auth-Type)
configuration found for the request: Rejecting the user
Tue Jul 27 13:01:03 2010 : Info: Failed to authenticate the user.
Tue Jul 27 13:01:03 2010 : Info: Using Post-Auth-Type Reject
Tue Jul 27 13:01:03 2010 : Info: +- entering group REJECT {...}
Tue Jul 27 13:01:03 2010 : Info: [attr_filter.access_reject]    expand:
%{User-Name} -> image
Tue Jul 27 13:01:03 2010 : Debug:  attr_filter: Matched entry DEFAULT at
line 11
Tue Jul 27 13:01:03 2010 : Info: ++[attr_filter.access_reject] returns
updated
Tue Jul 27 13:01:03 2010 : Info: Delaying reject of request 0 for 1
seconds
Tue Jul 27 13:01:03 2010 : Debug: Going to the next request
Tue Jul 27 13:01:03 2010 : Debug: Waking up in 0.8 seconds.
Tue Jul 27 13:01:04 2010 : Info: Sending delayed reject for request 0
Sending Access-Reject of id 239 to 10.2.1.75 port 46841
Tue Jul 27 13:01:04 2010 : Debug: Waking up in 4.9 seconds.
Tue Jul 27 13:01:09 2010 : Info: Cleaning up request 0 ID 239 with
timestamp +26
Tue Jul 27 13:01:09 2010 : Debug: Ready to process requests.
------------------


PS: I know it is not best practice to specify the default auth-type but
this is a single purpose server and I know what types of requests are
going to come to it, anything other than what I want should be
discarded.



Jake Sallee
Godfather Of Bandwidth
Network Engineer

Fone: 254-295-4658
Phax: 254-295-4221