<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<font face="Arial">Thank you Kevin, but it didn't work now my entire
users file is:<br>
<br>
<small>sebas Crypt-Password := "(!lGOOlHaBWoQ"<br>
Service-Type = Administrative-User,<br>
Cisco-AVPair = <a class="moz-txt-link-rfc2396E" href="shell:priv-lvl=15">"shell:priv-lvl=15"</a></small><br>
<br>
and then the debug was:<br>
<br>
<small><br>
rad_recv: Access-Request packet from host 10.12.4.2:1645, id=103,
length=75<br>
NAS-IP-Address = 10.12.4.2<br>
NAS-Port = 1<br>
NAS-Port-Type = Virtual<br>
User-Name = "sebas"<br>
Calling-Station-Id = "10.11.1.25"<br>
User-Password = "hello"<br>
Processing the authorize section of radiusd.conf<br>
modcall: entering group authorize for request 0<br>
modcall[authorize]: module "preprocess" returns ok for request 0<br>
users: Matched entry sebas at line 1<br>
modcall[authorize]: module "files" returns ok for request 0<br>
modcall: leaving group authorize (returns ok) for request 0<br>
auth: type Crypt<br>
auth: Failed to validate the user.<br>
Delaying request 0 for 1 seconds<br>
Finished request 0<br>
Going to the next request<br>
--- Walking the entire request list ---<br>
Waking up in 1 seconds...<br>
--- Walking the entire request list ---<br>
Waking up in 1 seconds...<br>
--- Walking the entire request list ---<br>
Sending Access-Reject of id 103 to 10.12.4.2 port 1645<br>
Waking up in 4 seconds...<br>
--- Walking the entire request list ---<br>
Cleaning up request 0 ID 103 with timestamp 4626942f<br>
Nothing to do. Sleeping until we see a request.<br>
</small><br>
<br>
Another idea?? <br>
Thanks a lot, any way.<br>
</font><br>
<br>
Kevin Bonner wrote:
<blockquote cite="mid200704181756.49605.keb@pa.net" type="cite">
<pre wrap="">On Wednesday 18 April 2007 16:39:27 Sebastian Firpo wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi, I migrated a freeradius server from version 0.6 to 1.5. I'm using a
users file for authorize.
</pre>
</blockquote>
<pre wrap=""><!---->
Wow, that's quite a leap. I assume from 0.6 to 1.1.5?
</pre>
<blockquote type="cite">
<pre wrap="">The server don't authorize and when a do a debug (radiusd -X) I saw the
User-password in clear text. If I modify the User-password in the users
file by the clear text one it works.
Here are the debug and an entry of the users file:
Listening on authentication *:1812
Listening on accounting *:1813
Ready to process requests.
rad_recv: Access-Request packet from host 10.12.4.2:1645, id=91, length=75
NAS-IP-Address = 10.12.4.2
NAS-Port = 1
NAS-Port-Type = Virtual
User-Name = "sebas"
Calling-Station-Id = "10.11.1.25"
User-Password = "hello"
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request 0
users: Matched entry sebas at line 50
modcall[authorize]: module "files" returns ok for request 0
modcall: leaving group authorize (returns ok) for request 0
rad_check_password: Found Auth-Type Local
auth: type Local
auth: user supplied User-Password does NOT match local User-Password
auth: Failed to validate the user.
Delaying request 0 for 1 seconds
users file
sebas Auth-Type := Local, Crypt-Password == "(!lGOOlHaBWoQ"
Service-Type = Administrative-User,
Cisco-AVPair = <a class="moz-txt-link-rfc2396E" href="shell:priv-lvl=15">"shell:priv-lvl=15"</a>
Thanks very much!!
</pre>
</blockquote>
<pre wrap=""><!---->
Don't set Auth-Type, the server will figure it out. The operator for
Crypt-Password should be changed to := as well.
Kevin Bonner
</pre>
<pre wrap="">
<hr size="4" width="90%">
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></pre>
</blockquote>
</body>
</html>