RADDB 2.1.7 and /etc/shadow

sbchem twise at chem.ucsb.edu
Sat May 22 21:40:29 CEST 2010


>That's why authentication is failing.
> ++[unix] returns notfound
>  So... what can you conclude from that?

I would assume it means that the unix module could not find the user.

Let's simplify.  I am now running radtest locally on the same box with this
command:

radtest test password  127.0.0.1 0 testing123

I get the same "returns not found" message. 

rad_recv: Access-Request packet from host 127.0.0.1 port 60057, id=252,
length=56
        User-Name = "test"
        User-Password = "password"
        NAS-IP-Address = 10.0.10.21
        NAS-Port = 0
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "test", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No "known good" password found for the user.  Authentication
may fail because of this.
++[pap] returns noop
No authenticate method (Auth-Type) configuration found for the request:
Rejecting the user
Failed to authenticate the user.
Using Post-Auth-Type Reject
+- entering group REJECT {...}
[attr_filter.access_reject]     expand: %{User-Name} -> test
 attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 0
Sending Access-Reject of id 252 to 127.0.0.1 port 60057
Waking up in 4.9 seconds.
Cleaning up request 0 ID 252 with timestamp +7
Ready to process requests.

Based on your prior mesage should I be putting the reference to /etc/shadow
in the unix module or the passwd module?



Alan DeKok-2 wrote:
> 
> sbchem wrote:
>>>   You need to edit raddb/sites-available/inner-tunnel, too.
>> 
>> sites-available or sites-enabled?  I did edit inner-tunnel in
>> sites-enabled as well as default
> 
>   The original debug log you posted shows *no* reference to "unix" in
> the inner-tunnel server.  That's why authentication is failing.
> 
>> ++[unix] returns notfound
> 
>   So... what can you conclude from that?
> 
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 
> 

-- 
View this message in context: http://old.nabble.com/RADDB-2.1.7-and--etc-shadow-tp28640012p28645608.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.




More information about the Freeradius-Users mailing list