(freeradius 3) I'm trying to integrate freeradius with active directory in cenos 7.

Marcelo Martinez marcelo.martinez at nexa.com.uy
Fri Sep 23 15:05:50 CEST 2016


radtest -t mschap Administrator nexa.2016 localhost 1234 testing123
Sending Access-Request Id 104 from 0.0.0.0:56320 to 127.0.0.1:1812
User-Name = 'Administrator'
NAS-IP-Address = 127.0.0.1
NAS-Port = 1234
Message-Authenticator = 0x00
MS-CHAP-Challenge = 0x110aedd4fa5bc4fe
MS-CHAP-Response =
0x00010000000000000000000000000000000000000000000000005341b3d5311ddec576f1448cd9ae98c3ff5deda5b8fc8e52
Received Access-Reject Id 104 from 127.0.0.1:1812 to 127.0.0.1:56320 length
38
MS-CHAP-Error = '\000E=691 R=1'
(0) -: Expected Access-Accept got Access-Reject


On Fri, Sep 23, 2016 at 10:03 AM, Marcelo Martinez <
marcelo.martinez at nexa.com.uy> wrote:

> Hello,
>
> Alan was right, the problem was my /etc/hosts.
> I added an entry for my hostname ponited to localhost and the problem is
> fixed:
>
> radtest Administrator nexa.2016 localhost 1234 testing123
> Sending Access-Request Id 80 from 0.0.0.0:37002 to 127.0.0.1:1812
> User-Name = 'Administrator'
> User-Password = 'password'
> NAS-IP-Address = 127.0.0.1
> NAS-Port = 1234
> Message-Authenticator = 0x00
> Received Access-Reject Id 80 from 127.0.0.1:1812 to 127.0.0.1:37002
> length 20
> (0) -: Expected Access-Accept got Access-Reject
>
> However I can't authenticate.
>
> "(0) -: Expected Access-Accept got Access-Reject"
>
> Any tip?
>
> Thanks.-
>
>
>
> On Fri, Sep 23, 2016 at 9:59 AM, Marcelo Martinez <
> marcelo.martinez at nexa.com.uy> wrote:
>
>> Yes Matthew, same error.
>>
>> Thanks.-
>>
>> On Thu, Sep 22, 2016 at 5:27 PM, Matthew West <matthew.t.west at gmail.com>
>> wrote:
>>
>>> >  radtest -t mschap Administrator xxxx 127.0.0.1 1234 testing123
>>>
>>> Have you tried running this without specifying the authentication type?
>>> Do
>>> you still get the same error?
>>>
>>> Thank You,
>>>
>>> Matthew West
>>>
>>> On Thu, Sep 22, 2016 at 12:59 PM, Alan DeKok <aland at deployingradius.com>
>>> wrote:
>>>
>>> > On Sep 22, 2016, at 3:48 PM, Marcelo Martinez <
>>> > marcelo.martinez at nexa.com.uy> wrote:
>>> > >
>>> > > Thanks  Alan, but the result is the same:
>>> > >
>>> > > radtest -t mschap Administrator xxxx 127.0.0.1 1234 testing123
>>> > > (0) Error parsing "-": ip_hton: Temporary failure in name resolution
>>> >
>>> >   <shrug>  Make sure that DNS is running.  Fix you local system.
>>> >
>>> >   I've never seen that problem in any system I've run.  So the problem
>>> > isn't in FreeRADIUS.  It's in your local system.
>>> >
>>> >   Alan DeKok.
>>> >
>>> >
>>> > -
>>> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
>>> > list/users.html
>>> >
>>> -
>>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list
>>> /users.html
>>>
>>
>>
>


More information about the Freeradius-Users mailing list