<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Dear Alan,<br>
<br>
Finally, I manage to get TTLS with PAP work by just change the config
in radius.conf:<br>
<br>
authorize{<br>
<br>
ldap_1x<br>
}<br>
<br>
authenticate {<br>
<br>
Auth-Type LDAP {<br>
ldap_1x<br>
}<br>
<br>
}<br>
<br>
However, I do notice radius only insert the login record in radpostauth
but no record in radacct. If I'm using EAP-MD5 with L2 switch as NAS, a
login record will be there. What make this happen? <br>
<br>
radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date)
values ('', '<a class="moz-txt-link-abbreviated" href="mailto:user@ocesb.com.my">user@ocesb.com.my</a>', 'Chap-Password', 'Access-Accept',
NOW())'<br>
<br>
Regards<br>
<br>
<br>
<a class="moz-txt-link-abbreviated" href="mailto:cktan@ocesb.com.my">cktan@ocesb.com.my</a> wrote:
<blockquote cite="mid468A4836.5070008@ocesb.com.my" type="cite">
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
Hi Alan,<br>
<br>
After try to remove the Auth-Type in users and let radius auto detect
the method, also add in another 3 new attribute in ldif, below is the
different message I get. Can you please have a look? Thanks.<br>
<br>
modcall[authorize]: module "ldap_1x" returns ok for request 4<br>
modcall: group Autz-Type returns ok for request 4<br>
rad_check_password: Found Auth-Type EAP<br>
auth: type "EAP"<br>
Processing the authenticate section of radiusd.conf<br>
modcall: entering group authenticate for request 4<br>
rlm_eap: EAP-Message not found<br>
rlm_eap: Malformed EAP Message<br>
modcall[authenticate]: module "eap" returns fail for request 4<br>
modcall: group authenticate returns fail for request 4<br>
auth: Failed to validate the user.<br>
<br>
<b>New ldif :</b><br>
dn: uid=user, ou=People, dc=ocesb, dc=com, dc=my, dc=.<br>
mailLocalAddress: <a class="moz-txt-link-abbreviated"
href="mailto:user@ocesb.com.my">user@ocesb.com.my</a><br>
givenName: Tan Chee<br>
accountStatus: active<br>
<b>radiusClass: 0x01</b><br>
objectClass: inetLocalMailRecipient<br>
objectClass: person<br>
objectClass: organizationalPerson<br>
objectClass: inetOrgPerson<br>
objectClass: radiusprofile<br>
objectClass: qmailUser<br>
objectClass: posixAccount<br>
objectClass: top<br>
objectClass: shadowAccount<br>
mailRoutingAddress: <a class="moz-txt-link-abbreviated"
href="mailto:user@mail.ocesb.com.my">user@mail.ocesb.com.my</a><br>
mailQuotaSize: 2000000000<br>
userPassword:: b2NlYm9sZWg=<br>
shadowLastChange: 12745<br>
mailAlternateAddress: <a class="moz-txt-link-abbreviated"
href="mailto:it@ocesb.com.my">it@ocesb.com.my</a><br>
mailMessageStore: vmail/ocesb.com.my/user/Maildir/<br>
uid: user<br>
mail: <a class="moz-txt-link-abbreviated"
href="mailto:user@ocesb.com.my">user@ocesb.com.my</a><br>
uidNumber: 5000<br>
<b>radiusGroupName: test</b><br>
cn: Tan Chee Keong<br>
<b>radiusAuthType: EAP</b><br>
dialupAccess: Yes<br>
loginShell: /bin/false<br>
gidNumber: 5000<br>
shadowMax: 99999<br>
gecos: Tan Chee Keong<br>
mailHost: mailpj.ocesb.com.my<br>
homeDirectory: /home/vmail/ocesb.com.my/user<br>
sn: Keong<br>
<br>
Alan DeKok wrote:
<blockquote cite="mid468A270D.8030206@deployingradius.com" type="cite">
<pre wrap=""><a class="moz-txt-link-abbreviated"
href="mailto:cktan@ocesb.com.my">cktan@ocesb.com.my</a> wrote:
..
</pre>
<blockquote type="cite">
<pre wrap=""> rad_check_password: Found Auth-Type LDAP1
</pre>
</blockquote>
<pre wrap=""><!---->
Why did you set that? It's breaking EAP.
Read eap.conf. DO NOT SET AUTH-TYPE.
This comes up so often on the list, and it's documented in so many
places, that I'm don't understand why people still run into it.
Alan DeKok.
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext"
href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
CK Tan
IT Manager
Optical Communication Engineering S/B
19, Jalan Semangat,
46200 Petaling Jaya, Selangor Darul Ehsan
Tel: +60 3 76808000 EXT:1205
Fax: +60 3 76808010
H/P: +60 12 9033077
email: <a class="moz-txt-link-abbreviated"
href="mailto:cktan@ocesb.com.my">cktan@ocesb.com.my</a></pre>
<pre wrap="">
<hr size="4" width="90%">
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
CK Tan
IT Manager
Optical Communication Engineering S/B
19, Jalan Semangat,
46200 Petaling Jaya, Selangor Darul Ehsan
Tel: +60 3 76808000 EXT:1205
Fax: +60 3 76808010
H/P: +60 12 9033077
email: <a class="moz-txt-link-abbreviated" href="mailto:cktan@ocesb.com.my">cktan@ocesb.com.my</a></pre>
</body>
</html>