<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">Hello all.<BR><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Just started out with Freeradius and got it installed and working (Debian Etch, FR 1.1.4).</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Im hooked up our firewall to authenticate to FR-server and the "link" works, so i guess the basics are ok. Now i have added a user in the system and in the Users-file:</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>test-system Auth-Type := System, User-Password == "test-system"</DIV><DIV><I> Service-Type = Framed-User,</I></DIV><DIV><I> Framed-Protocol = PPP,</I></DIV><DIV><I> Framed-IP-Address = 10.0.5.7,</I></DIV><DIV><I> Framed-IP-Netmask = 255.255.255.0,</I></DIV><DIV><I> Framed-Routing = Broadcast-Listen,</I></DIV><DIV><I> Framed-Filter-Id = "std.ppp",</I></DIV><DIV><I> Framed-MTU = 1500,</I></DIV><DIV><I> Fall-Through = yes,</I></DIV><DIV><I> Framed-Compression = Van-Jacobsen-TCP-IP</I></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>When i connect to my FR-server i get this:</DIV><DIV><I>rad_recv: Access-Request packet from host 10.0.5.1:56509, id=132, length=182</I></DIV><DIV><I> NAS-Identifier = "halon"</I></DIV><DIV><I> NAS-IP-Address = 10.0.5.1</I></DIV><DIV><I> Message-Authenticator = 0x3f0dd3b6a7a3fd31e874e22721f5073d</I></DIV><DIV><I> NAS-Port = 0</I></DIV><DIV><I> NAS-Port-Type = Virtual</I></DIV><DIV><I> Service-Type = Framed-User</I></DIV><DIV><I> Framed-Protocol = PPP</I></DIV><DIV><I> Calling-Station-Id = "10.0.8.184"</I></DIV><DIV><I> User-Name = "test-system"</I></DIV><DIV><I> MS-CHAP-Challenge = 0xbb1e68a886add6f65e6e9af66c709bfd</I></DIV><DIV><I> MS-CHAP2-Response = 0x01000a3194599cecfe61460a4942c9671fe70000000000000000a5f8bab30f7bdf466407edd2d7be2e97969a1a918def8d2c</I></DIV><DIV><I> Processing the authorize section of radiusd.conf</I></DIV><DIV><I>modcall: entering group authorize for request 0</I></DIV><DIV><I> modcall[authorize]: module "preprocess" returns ok for request 0</I></DIV><DIV><I> modcall[authorize]: module "chap" returns noop for request 0</I></DIV><DIV><I> rlm_mschap: Found MS-CHAP attributes. Setting 'Auth-Type = mschap'</I></DIV><DIV><I> modcall[authorize]: module "mschap" returns ok for request 0</I></DIV><DIV><I> rlm_realm: No '@' in User-Name = "test-system", looking up realm NULL</I></DIV><DIV><I> rlm_realm: No such realm "NULL"</I></DIV><DIV><I> modcall[authorize]: module "suffix" returns noop for request 0</I></DIV><DIV><I> rlm_eap: No EAP-Message, not doing EAP</I></DIV><DIV><I> modcall[authorize]: module "eap" returns noop for request 0</I></DIV><DIV><I> users: Matched entry test-system at line 101</I></DIV><DIV><I> users: Matched entry DEFAULT at line 185</I></DIV><DIV><I> users: Matched entry DEFAULT at line 204</I></DIV><DIV><I> users: Matched entry DEFAULT at line 216</I></DIV><DIV><I> modcall[authorize]: module "files" returns ok for request 0</I></DIV><DIV><I>modcall: leaving group authorize (returns ok) for request 0</I></DIV><DIV><I> rad_check_password: Found Auth-Type System</I></DIV><DIV><I>auth: type "System"</I></DIV><DIV><I> Processing the authenticate section of radiusd.conf</I></DIV><DIV><I>modcall: entering group authenticate for request 0</I></DIV><DIV><I>rlm_unix: Attribute "User-Password" is required for authentication.</I></DIV><DIV><I> modcall[authenticate]: module "unix" returns invalid for request 0</I></DIV><DIV><I>modcall: leaving group authenticate (returns invalid) for request 0</I></DIV><DIV><I>auth: Failed to validate the user.</I></DIV><DIV><I>Login incorrect: [test-system/<no User-Password attribute>] (from client halon port 0 cli 10.0.8.184)</I></DIV><DIV><I>Delaying request 0 for 1 seconds</I></DIV><DIV><I>Finished request 0</I></DIV><DIV><I>Going to the next request</I></DIV><DIV><I>--- Walking the entire request list ---</I></DIV><DIV><I>Waking up in 1 seconds...</I></DIV><DIV><I>--- Walking the entire request list ---</I></DIV><DIV><I>Waking up in 1 seconds...</I></DIV><DIV><I>--- Walking the entire request list ---</I></DIV><DIV><I>Sending Access-Reject of id 132 to 10.0.5.1 port 56509</I></DIV><DIV><I>Waking up in 4 seconds...</I></DIV><DIV><I>--- Walking the entire request list ---</I></DIV><DIV><I>Cleaning up request 0 ID 132 with timestamp 465ab8d7</I></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>So, my firewall talks MS_CHAP, i haven't touched the radiusd.conf and its in there under authenticate {..</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Now im stuck, i really don't know where else to look for, tried google but everything pointed to this wonderful list! I tried to change auth-type = Local but same problem. Maybe the problem lies here:</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><I> rlm_realm: No '@' in User-Name = "test-system", looking up realm NULL</I></DIV><DIV><I> rlm_realm: No such realm "NULL"</I></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>But i can't tell. Any thoughts, solutions, pointers to right directions are greatly appreciated!</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Many thanks.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>p</DIV><DIV><BR class="khtml-block-placeholder"></DIV></BODY></HTML>