ERROR: No Auth-Type found:

Tal Nur nurtal at yahoo.com
Tue Jul 2 13:16:01 CEST 2019


Dear All,
I'm struggling with FR 3.0.20 configuring for eduroam.Today I've got the following error message:ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject

Here is the output of radiusd -X command:(0) Received Access-Request Id 197 from 89.250.80.7:1026 to 89.250.80.6:1812 length 133(0)   User-Name = "bob at turan.kz"(0)   NAS-IP-Address = 192.168.0.1(0)   NAS-Port = 0(0)   Called-Station-Id = "C8-3A-35-40-1C-F0"(0)   Calling-Station-Id = "4C-49-E3-15-5D-CA"(0)   Framed-MTU = 1400(0)   NAS-Port-Type = Wireless-802.11(0)   EAP-Message = 0x0201001101626f6240747572616e2e6b7a(0)   Message-Authenticator = 0x3d081e4d2e965e5f7661f8b80ad0b6ef(0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/eduroam(0)   authorize {(0)     policy filter_username {(0)       if (&User-Name) {(0)       if (&User-Name)  -> TRUE(0)       if (&User-Name)  {(0)         if (&User-Name =~ / /) {(0)         if (&User-Name =~ / /)  -> FALSE(0)         if (&User-Name =~ /@[^@]*@/ ) {(0)         if (&User-Name =~ /@[^@]*@/ )  -> FALSE(0)         if (&User-Name =~ /\.\./ ) {(0)         if (&User-Name =~ /\.\./ )  -> FALSE(0)         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {(0)         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE(0)         if (&User-Name =~ /\.$/)  {(0)         if (&User-Name =~ /\.$/)   -> FALSE(0)         if (&User-Name =~ /@\./)  {(0)         if (&User-Name =~ /@\./)   -> FALSE(0)       } # if (&User-Name)  = notfound(0)     } # policy filter_username = notfound(0)     update request {(0)       Operator-Name := "1turan.kz"(0)     } # update request = noop(0) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d(0) auth_log:    --> /usr/local/var/log/radius/radacct/89.250.80.7/auth-detail-20190702(0) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/89.250.80.7/auth-detail-20190702(0) auth_log: EXPAND %t(0) auth_log:    --> Tue Jul  2 05:28:46 2019(0)     [auth_log] = ok(0) suffix: Checking for suffix after "@"(0) suffix: Looking up realm "turan.kz" for User-Name = "bob at turan.kz"(0) suffix: Found realm "turan.kz"(0) suffix: Adding Realm = "turan.kz"(0) suffix: Authentication realm is LOCAL(0)     [suffix] = ok(0)   } # authorize = ok(0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject(0) Failed to authenticate the user(0) Using Post-Auth-Type Reject(0) # Executing group from file /usr/local/etc/raddb/sites-enabled/eduroam(0)   Post-Auth-Type REJECT {(0) reply_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d(0) reply_log:    --> /usr/local/var/log/radius/radacct/89.250.80.7/reply-detail-20190702(0) reply_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/89.250.80.7/reply-detail-20190702(0) reply_log: EXPAND %t(0) reply_log:    --> Tue Jul  2 05:28:46 2019(0)     [reply_log] = ok(0)   } # Post-Auth-Type REJECT = ok(0) Delaying response for 1.000000 secondsWaking up in 0.3 seconds.Waking up in 0.6 seconds.(0) Sending delayed response(0) Sent Access-Reject Id 197 from 89.250.80.6:1812 to 89.250.80.7:1026 length 20Waking up in 3.9 seconds.(0) Cleaning up request packet ID 197 with timestamp +191Ready to process requests
I used eduroam (default) file in /sites-enabled directory taken from wiki.geant.org:
server eduroam {         listen {                type = "auth"                ipaddr = *                port = 0        }        listen {                type = "acct"                ipaddr = *                port = 0        }        listen {                type = "auth"                ipv6addr = ::                port = 0        }        listen {                type = "acct"                ipv6addr = ::                port = 0        }          authorize {                # only use filter_username from version > 3.0.7 on                filter_username                update request {                        Operator-Name := "1turan.kz"                        # the literal number "1" above is an important prefix! Do not change it!                }                # if you want detailed logging                auth_log                suffix        }         authenticate { eap        }         preacct {                suffix        }         accounting {        }         post-auth {                # if you want detailed logging                reply_log                Post-Auth-Type REJECT {                        reply_log                }        }         pre-proxy {                # if you want detailed logging                pre_proxy_log                if("%{Packet-Type}" != "Accounting-Request") {                        attr_filter.pre-proxy                }        }         post-proxy {                # if you want detailed logging                post_proxy_log                attr_filter.post-proxy        }}

In authenticate section I tried empty value, as was on wiki.geant.org and then I wrote eap option as shown in the above, but nothing was changed.The same error message: No Auth-Type foundWhat should be done to fix the problem?

 


More information about the Freeradius-Users mailing list