<br><br><div><span class="gmail_quote">On 10/13/06, <b class="gmail_sendername">Paul Lambert</b> <<a href="mailto:paul.lambert@gmail.com">paul.lambert@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi,<br><br>Have you checked your authentication protocol on the shared
secret? Are you sending with CHAP when freeradius is not expecting it
or vice versa?<br><br>Have you tried testing with a radius test client
- this should allow you determine if the problem is in the Client or
the Server config... or just a misconfiguration between the two!
<br><br>Kind regards,<br><span class="sg">Paul.</span><div><span class="e" id="q_10e4288ec682b5d3_2"><br><br><div><span class="gmail_quote">On 10/13/06, <b class="gmail_sendername">K. Hoercher</b> <<a href="mailto:wbhoer@gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
wbhoer@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi,<br><br>On 10/13/06, YvesDM <<a href="mailto:ydmlog@gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">ydmlog@gmail.com</a>> wrote:<br>> Looks pretty obvious, though, I'm sure the shared secret is correct in my
<br>> clients.conf and in the chillispot configuration.
<br>> Any hints?<br><br>Well, as you said yourself, it looks pretty obvious. But as it would<br>be extremely unlikely for both statements to be true, I'd suggest (in<br>no particular order):<br><br>Check clients.conf for eventual more specific entries overriding those
<br>for subnets. Does some sql reading of nas's set another secret? Do the<br>alleged "correct" config files get actually used by freeradius (been<br>there, done that *g*).<br><br>Something to those effects regarding
chilli.conf.<br><br>Some of that might have been ruled out/in already, had you provided<br>the full debug output and pertinent snippets from your config.<br><br>Sniff the radius traffic, and check validity manually. See src/lib/hmac.c
<br><br>hth<br>K. Hoercher<br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://www.freeradius.org/list/users.html
</a><br></blockquote></div><br>
</span></div><br>-<br>List info/subscribe/unsubscribe? See <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html
</a><br><br></blockquote></div><br>
Tnx for the answers. <br>
Meanwhile I've upgraded chillispot to the newest version, changed the
shared secrets into something else and reloaded the radius
configuration and the problem was gone.<br>
<br>
Y.<br>