pam_radius requires setting Auth-Type ?

Fajar A. Nugraha list at fajar.net
Mon Sep 24 09:40:27 CEST 2012


On Mon, Sep 24, 2012 at 2:09 PM, NdK <ndk.clanbo at gmail.com> wrote:
>> Is it possible you DON'T have
>> pap in authorize section?
> Nope. It's there:
>
> authorize {
>         unibo_map_realms
>         preprocess
>         auth_log
>         chap
>         mschap
>         digest
>         suffix
>         eap {
>                 ok = return
>         }
>         expiration
>         logintime
>         files
>         pap
> }
>

Is this sites-available/default? Or inner-tunnel? Your log for inner
tunnel only shows this:

server inner-tunnel { # from file /etc/freeradius/sites-enabled/inner-tunnel
 modules {
 Module: Checking authenticate {...} for more modules to load
 Module: Linked to module rlm_pap
 Module: Instantiating module "pap" from file /etc/freeradius/modules/pap


IIRC authorize should come before authenticate. Which means you
probably don't have "pap" on authorize section of inner tunnel.

-- 
Fajar


More information about the Freeradius-Users mailing list