<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Alan,<br>
<br>
I did try to remove the Auth-Type in users file i.e.<br>
<br>
DEFAULT Realm == "ocesb.com.my", Autz-Type := LDAP1<br>
<br>
However, it is still not working. Below is the debug message. <br>
<br>
modcall[authorize]: module "ldap_1x" returns ok for request 4<br>
modcall: group Autz-Type returns ok for request 4<br>
rad_check_password: Found Auth-Type LDAP<br>
auth: type "LDAP"<br>
ERROR: Unknown value specified for Auth-Type. Cannot perform
requested action.<br>
auth: Failed to validate the user.<br>
Login incorrect: [<a class="moz-txt-link-abbreviated" href="mailto:user@ocesb.com.my">user@ocesb.com.my</a>] (from client localhost port 0 cli
00-14-a5-d9-09-07)<br>
TTLS: Got tunneled reply RADIUS code 3<br>
Framed-IP-Address = 255.255.255.254<br>
Framed-MTU = 576<br>
Service-Type = Framed-User<br>
TTLS: Got tunneled Access-Reject<br>
rlm_eap: Handler failed in EAP/ttls<br>
rlm_eap: Failed in EAP select<br>
modcall[authenticate]: module "eap" returns invalid for request 4<br>
modcall: group authenticate returns invalid for request 4<br>
auth: Failed to validate the user.<br>
Login incorrect: [<a class="moz-txt-link-abbreviated" href="mailto:user@ocesb.com.my">user@ocesb.com.my</a>] (from client Nexthop-WCS port 0
cli 00-14-a5-d9-09-07)<br>
<br>
Thank.<br>
<br>
Alan DeKok wrote:
<blockquote cite="mid468A270D.8030206@deployingradius.com" type="cite">
<pre wrap=""><a class="moz-txt-link-abbreviated" href="mailto:cktan@ocesb.com.my">cktan@ocesb.com.my</a> wrote:
..
</pre>
<blockquote type="cite">
<pre wrap=""> rad_check_password: Found Auth-Type LDAP1
</pre>
</blockquote>
<pre wrap=""><!---->
Why did you set that? It's breaking EAP.
Read eap.conf. DO NOT SET AUTH-TYPE.
This comes up so often on the list, and it's documented in so many
places, that I'm don't understand why people still run into it.
Alan DeKok.
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
CK Tan
IT Manager
Optical Communication Engineering S/B
19, Jalan Semangat,
46200 Petaling Jaya, Selangor Darul Ehsan
Tel: +60 3 76808000 EXT:1205
Fax: +60 3 76808010
H/P: +60 12 9033077
email: <a class="moz-txt-link-abbreviated" href="mailto:cktan@ocesb.com.my">cktan@ocesb.com.my</a></pre>
</body>
</html>