<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>Hi again.</div><div><br class="webkit-block-placeholder"></div><div>I had to make some testing just to be sure im not doing anything really stupid. Here below you can see my two</div><div>test, one with User-Password and one with Cleartext-password, i can't make neither to work.</div><div><br class="webkit-block-placeholder"></div><div><span class="Apple-style-span" style="text-decoration: underline;">Startup</span></div><div>d<i>ebian:/usr/local/etc/raddb# /usr/local/sbin/radiusd -v</i></div><div><i>radiusd: FreeRADIUS Version 2.0.0-pre2, for host powerpc-unknown-linux-gnu, built on Sep 15 2007 at 06:11:44</i></div><div><i>Copyright (C) 2000-2007 The FreeRADIUS server project.</i></div><div><i>There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A</i></div><div><i>PARTICULAR PURPOSE.</i></div><div><i>You may redistribute copies of FreeRADIUS under the terms of the</i></div><div><i>GNU General Public License.</i></div><div><i>For more information about these matters, see the file named COPYRIGHT.</i></div><div>-------------------------------------------------------------------------------------</div><div><i>debian:/usr/local/etc/raddb# /usr/local/sbin/radiusd -X -f -d /usr/local/etc/raddb</i></div><div><i>FreeRADIUS Version 2.0.0-pre2, for host powerpc-unknown-linux-gnu, built on Sep 15 2007 at 06:11:44</i></div><div><i>Copyright (C) 2000-2007 The FreeRADIUS server project.</i></div><div><i>There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A</i></div><div><i>PARTICULAR PURPOSE.</i></div><div><i>You may redistribute copies of FreeRADIUS under the terms of the</i></div><div><i>GNU General Public License.</i></div><div><i>Config: including file: /usr/local/etc/raddb/radiusd.conf</i></div><div><i>Config: including file: /usr/local/etc/raddb/proxy.conf</i></div><div><i>Config: including file: /usr/local/etc/raddb/clients.conf</i></div><div><i>Config: including file: /usr/local/etc/raddb/snmp.conf</i></div><div><i>Config: including file: /usr/local/etc/raddb/eap.conf</i></div><div><i>Config: including file: /usr/local/etc/raddb/sql.conf</i></div><div><i>Config: including file: /usr/local/etc/raddb/sql/mysql/dialup.conf</i></div><div><i>Config: including file: /usr/local/etc/raddb/sql/mysql/counter.conf</i></div><div><i>Config: including files in directory: /usr/local/etc/raddb/sites-enabled/</i></div><div><i>Config: including file: /usr/local/etc/raddb/sites-enabled/default</i></div><div><i>Starting - reading configuration files ...</i></div><div><i>read_config_files: reading dictionary</i></div><div><i>main {</i></div><div><i> prefix = "/usr/local"</i></div><div><i> localstatedir = "/usr/local/var"</i></div><div><i> logdir = "/usr/local/var/log/radius"</i></div><div><i> libdir = "/usr/local/lib"</i></div><div><i> radacctdir = "/usr/local/var/log/radius/radacct"</i></div><div><i> hostname_lookups = no</i></div><div><i> max_request_time = 30</i></div><div><i> cleanup_delay = 5</i></div><div><i> max_requests = 1024</i></div><div><i> allow_core_dumps = no</i></div><div><i> log_stripped_names = no</i></div><div><i> log_file = "/usr/local/var/log/radius/radius.log"</i></div><div><i> log_auth = no</i></div><div><i> log_auth_badpass = no</i></div><div><i> log_auth_goodpass = no</i></div><div><i> pidfile = "/usr/local/var/run/radiusd/radiusd.pid"</i></div><div><i> checkrad = "/usr/local/sbin/checkrad"</i></div><div><i> debug_level = 0</i></div><div><i> proxy_requests = yes</i></div><div><i> log {</i></div><div><i> syslog_facility = "daemon"</i></div><div><i> }</i></div><div><i> proxy server {</i></div><div><i> retry_delay = 5</i></div><div><i> retry_count = 3</i></div><div><i> default_fallback = no</i></div><div><i> dead_time = 120</i></div><div><i> wake_all_if_all_dead = no</i></div><div><i> }</i></div><div><i> security {</i></div><div><i> max_attributes = 200</i></div><div><i> reject_delay = 1</i></div><div><i> status_server = yes</i></div><div><i> }</i></div><div><i>}</i></div><div><i> home_server localhost {</i></div><div><i> ipaddr = 127.0.0.1 IP address [127.0.0.1]</i></div><div><i> port = 1812</i></div><div><i> type = "auth"</i></div><div><i> secret = "testing123"</i></div><div><i> response_window = 20</i></div><div><i> max_outstanding = 65536</i></div><div><i> zombie_period = 40</i></div><div><i> status_check = "status-server"</i></div><div><i> ping_check = "none"</i></div><div><i> ping_interval = 30</i></div><div><i> check_interval = 30</i></div><div><i> num_answers_to_alive = 3</i></div><div><i> num_pings_to_alive = 3</i></div><div><i> revive_interval = 120</i></div><div><i> status_check_timeout = 4</i></div><div><i> }</i></div><div><i> server_pool my_auth_failover {</i></div><div><i> type = fail-over</i></div><div><i> home_server = localhost</i></div><div><i> }</i></div><div><i> realm example.com {</i></div><div><i> auth_pool = my_auth_failover</i></div><div><i> }</i></div><div><i> realm LOCAL {</i></div><div><i> }</i></div><div><i> listen {</i></div><div><i> type = "auth"</i></div><div><i> ipaddr = *</i></div><div><i> port = 0</i></div><div><i> client 127.0.0.1 {</i></div><div><i> secret = "testing123"</i></div><div><i> shortname = "localhost"</i></div><div><i> nastype = "other"</i></div><div><i> }</i></div><div><i> client 10.0.5.200 {</i></div><div><i> secret = "xxx"</i></div><div><i> shortname = "ap4000"</i></div><div><i> nastype = "other"</i></div><div><i> }</i></div><div><i> }</i></div><div><i> listen {</i></div><div><i> type = "acct"</i></div><div><i> ipaddr = *</i></div><div><i> port = 0</i></div><div><i> }</i></div><div><i>radiusd: entering modules setup</i></div><div><i>radiusd: Library search path is /usr/local/lib</i></div><div><i> instantiate {</i></div><div><i> Module: Linked to module rlm_exec</i></div><div><i> Module: Instantiating exec</i></div><div><i> exec {</i></div><div><i> wait = yes</i></div><div><i> input_pairs = "request"</i></div><div><i> shell_escape = yes</i></div><div><i> }</i></div><div><i>rlm_exec: wait=yes but no output defined. Did you mean output=none?</i></div><div><i> Module: Linked to module rlm_expr</i></div><div><i> Module: Instantiating expr</i></div><div><i> Module: Linked to module rlm_expiration</i></div><div><i> Module: Instantiating expiration</i></div><div><i> expiration {</i></div><div><i> reply-message = "Password Has Expired "</i></div><div><i> }</i></div><div><i> Module: Linked to module rlm_logintime</i></div><div><i> Module: Instantiating logintime</i></div><div><i> logintime {</i></div><div><i> reply-message = "You are calling outside your allowed timespan "</i></div><div><i> minimum-timeout = 60</i></div><div><i> }</i></div><div><i> }</i></div><div><i>server {</i></div><div><i> modules {</i></div><div><i> Module: Checking authenticate {...} for more modules to load</i></div><div><i> Module: Linked to module rlm_pap</i></div><div><i> Module: Instantiating pap</i></div><div><i> pap {</i></div><div><i> encryption_scheme = "auto"</i></div><div><i> auto_header = yes</i></div><div><i> }</i></div><div><i> Module: Linked to module rlm_chap</i></div><div><i> Module: Instantiating chap</i></div><div><i> Module: Linked to module rlm_mschap</i></div><div><i> Module: Instantiating mschap</i></div><div><i> mschap {</i></div><div><i> use_mppe = yes</i></div><div><i> require_encryption = no</i></div><div><i> require_strong = no</i></div><div><i> with_ntdomain_hack = no</i></div><div><i> }</i></div><div><i> Module: Linked to module rlm_unix</i></div><div><i> Module: Instantiating unix</i></div><div><i> unix {</i></div><div><i> radwtmp = "/usr/local/var/log/radius/radwtmp"</i></div><div><i> }</i></div><div><i> Module: Linked to module rlm_eap</i></div><div><i> Module: Instantiating eap</i></div><div><i> eap {</i></div><div><i> default_eap_type = "md5"</i></div><div><i> timer_expire = 60</i></div><div><i> ignore_unknown_eap_types = no</i></div><div><i> cisco_accounting_username_bug = no</i></div><div><i> }</i></div><div><i> eap: Linked to sub-module rlm_eap_md5</i></div><div><i> eap: Instantiating eap-md5</i></div><div><i> eap: Linked to sub-module rlm_eap_leap</i></div><div><i> eap: Instantiating eap-leap</i></div><div><i> eap: Linked to sub-module rlm_eap_gtc</i></div><div><i> eap: Instantiating eap-gtc</i></div><div><i> gtc {</i></div><div><i> challenge = "Password: "</i></div><div><i> auth_type = "PAP"</i></div><div><i> }</i></div><div><i>rlm_eap: Ignoring EAP-Type/tls because we do not have OpenSSL support.</i></div><div><i>rlm_eap: Ignoring EAP-Type/ttls because we do not have OpenSSL support.</i></div><div><i>rlm_eap: Ignoring EAP-Type/peap because we do not have OpenSSL support.</i></div><div><i> eap: Linked to sub-module rlm_eap_mschapv2</i></div><div><i> eap: Instantiating eap-mschapv2</i></div><div><i> mschapv2 {</i></div><div><i> with_ntdomain_hack = no</i></div><div><i> }</i></div><div><i> Module: Checking authorize {...} for more modules to load</i></div><div><i> Module: Linked to module rlm_preprocess</i></div><div><i> Module: Instantiating preprocess</i></div><div><i> preprocess {</i></div><div><i> huntgroups = "/usr/local/etc/raddb/huntgroups"</i></div><div><i> hints = "/usr/local/etc/raddb/hints"</i></div><div><i> with_ascend_hack = no</i></div><div><i> ascend_channels_per_line = 23</i></div><div><i> with_ntdomain_hack = no</i></div><div><i> with_specialix_jetstream_hack = no</i></div><div><i> with_cisco_vsa_hack = no</i></div><div><i> with_alvarion_vsa_hack = no</i></div><div><i> }</i></div><div><i> Module: Linked to module rlm_realm</i></div><div><i> Module: Instantiating suffix</i></div><div><i> realm suffix {</i></div><div><i> format = "suffix"</i></div><div><i> delimiter = "@"</i></div><div><i> ignore_default = no</i></div><div><i> ignore_null = no</i></div><div><i> }</i></div><div><i> Module: Linked to module rlm_files</i></div><div><i> Module: Instantiating files</i></div><div><i> files {</i></div><div><i> usersfile = "/usr/local/etc/raddb/users"</i></div><div><i> acctusersfile = "/usr/local/etc/raddb/acct_users"</i></div><div><i> preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users"</i></div><div><i> compat = "no"</i></div><div><i> }</i></div><div><i> Module: Checking preacct {...} for more modules to load</i></div><div><i> Module: Linked to module rlm_acct_unique</i></div><div><i> Module: Instantiating acct_unique</i></div><div><i> acct_unique {</i></div><div><i> key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"</i></div><div><i> }</i></div><div><i> Module: Checking accounting {...} for more modules to load</i></div><div><i> Module: Linked to module rlm_detail</i></div><div><i> Module: Instantiating detail</i></div><div><i> detail {</i></div><div><i> detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"</i></div><div><i> header = "%t"</i></div><div><i> detailperm = 384</i></div><div><i> dirperm = 493</i></div><div><i> locking = no</i></div><div><i> log_packet_header = no</i></div><div><i> }</i></div><div><i> Module: Linked to module rlm_radutmp</i></div><div><i> Module: Instantiating radutmp</i></div><div><i> radutmp {</i></div><div><i> filename = "/usr/local/var/log/radius/radutmp"</i></div><div><i> username = "%{User-Name}"</i></div><div><i> case_sensitive = yes</i></div><div><i> check_with_nas = yes</i></div><div><i> perm = 384</i></div><div><i> callerid = yes</i></div><div><i> }</i></div><div><i> Module: Linked to module rlm_attr_filter</i></div><div><i> Module: Instantiating attr_filter.accounting_response</i></div><div><i> attr_filter attr_filter.accounting_response {</i></div><div><i> attrsfile = "/usr/local/etc/raddb/attrs.accounting_response"</i></div><div><i> key = "%{User-Name}"</i></div><div><i> }</i></div><div><i> Module: Checking session {...} for more modules to load</i></div><div><i> Module: Checking post-proxy {...} for more modules to load</i></div><div><i> Module: Checking post-auth {...} for more modules to load</i></div><div><i> Module: Instantiating attr_filter.access_reject</i></div><div><i> attr_filter attr_filter.access_reject {</i></div><div><i> attrsfile = "/usr/local/etc/raddb/attrs.access_reject"</i></div><div><i> key = "%{User-Name}"</i></div><div><i> }</i></div><div><i> }</i></div><div><i>}</i></div><div><i>Initializing the thread pool...</i></div><div><i>Listening on authentication address * port 1812</i></div><div><i>Listening on accounting address * port 1813</i></div><div><i>Listening on proxy address * port 1814</i></div><div><i>Ready to process requests.</i></div><div><i>Nothing to do. Sleeping until we see a request.</i></div><div><br class="webkit-block-placeholder"></div><div><br class="webkit-block-placeholder"></div><div><span class="Apple-style-span" style="text-decoration: underline;">Test with User-password</span></div><div><i>rad_recv: Access-Request packet from host 10.0.5.200 port 6001, id=27, length=151</i></div><div><i> User-Name = "00-1c-a4-6e-0e-fc"</i></div><div><i> User-Password = "00-1c-a4-6e-0e-fc"</i></div><div><i> NAS-IP-Address = 10.0.5.200</i></div><div><i> Called-Station-Id = "00-20-a6-6f-93-bf:My Wireless Network B"</i></div><div><i> Calling-Station-Id = "00-1c-a4-6e-0e-fc"</i></div><div><i> NAS-Port = 9</i></div><div><i> NAS-Port-Type = Wireless-802.11</i></div><div><i>+- entering group authorize</i></div><div><i>++[preprocess] returns ok</i></div><div><i>++[chap] returns noop</i></div><div><i>++[mschap] returns noop</i></div><div><i>++[unix] returns notfound</i></div><div><i> rlm_realm: No '@' in User-Name = "00-1c-a4-6e-0e-fc", looking up realm NULL</i></div><div><i> rlm_realm: No such realm "NULL"</i></div><div><i>++[suffix] returns noop</i></div><div><i> rlm_eap: No EAP-Message, not doing EAP</i></div><div><i>++[eap] returns noop</i></div><div><i>WARNING: Found User-Password == "...".</i></div><div><i>WARNING: Are you sure you don't mean Cleartext-Password?</i></div><div><i>WARNING: See "man rlm_pap" for more information.</i></div><div><i> users: Matched entry 00-1c-a4-6e-0e-fc at line 78</i></div><div><i>++[files] returns ok</i></div><div><i>++[expiration] returns noop</i></div><div><i>++[logintime] returns noop</i></div><div><i>rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this.</i></div><div><i>++[pap] returns noop</i></div><div><i>auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user</i></div><div><i>auth: Failed to validate the user.</i></div><div><i> Found Post-Auth-Type Reject</i></div><div><i>+- entering group REJECT</i></div><div><i> expand: %{User-Name} -> 00-1c-a4-6e-0e-fc</i></div><div><i> attr_filter: Matched entry DEFAULT at line 11</i></div><div><i>++[attr_filter.access_reject] returns updated</i></div><div><i>Delaying reject of request 0 for 1 seconds</i></div><div><i>Going to the next request</i></div><div><i>Sending delayed reject for request 0</i></div><div><i>Sending Access-Reject of id 27 to 10.0.5.200 port 6001</i></div><div><br class="webkit-block-placeholder"></div><div><span class="Apple-style-span" style="text-decoration: underline;">User creds</span></div><div><i>00-1c-a4-6e-0e-fc User-Password=="00-1c-a4-6e-0e-fc"</i></div><div><i> Calling-Station-Id=="00-1c-a4-6e-0e-fc",</i></div><div><i> NAS-IP-Address = 82.182.120.201,</i></div><div><i> Called-Station-Id = "00-20-a6-6f-93-bf:My Wireless Network B",</i></div><div><i> Service-Type = Framed-User,</i></div><div><i> Framed-Routing = Broadcast-Listen,a</i></div><div><i> Calling-Station-Id = "00-1c-a4-6e-0e-fc",</i></div><div><i> NAS-Port = 9,</i></div><div><i> NAS-Port-Type = Wireless-802.11</i></div><div><br></div><div>________________________________________________________</div><div><br class="webkit-block-placeholder"></div><div>(exactly the same startup)</div><div><br class="webkit-block-placeholder"></div><div><span class="Apple-style-span" style="text-decoration: underline;">Test with Cleartext-Password</span></div><div>r<i>ad_recv: Access-Request packet from host 10.0.5.200 port 6001, id=28, length=151</i></div><div><i> User-Name = "00-1c-a4-6e-0e-fc"</i></div><div><i> User-Password = "00-1c-a4-6e-0e-fc"</i></div><div><i> NAS-IP-Address = 10.0.5.200</i></div><div><i> Called-Station-Id = "00-20-a6-6f-93-bf:My Wireless Network B"</i></div><div><i> Calling-Station-Id = "00-1c-a4-6e-0e-fc"</i></div><div><i> NAS-Port = 9</i></div><div><i> NAS-Port-Type = Wireless-802.11</i></div><div><i>+- entering group authorize</i></div><div><i>++[preprocess] returns ok</i></div><div><i>++[chap] returns noop</i></div><div><i>++[mschap] returns noop</i></div><div><i>++[unix] returns notfound</i></div><div><i> rlm_realm: No '@' in User-Name = "00-1c-a4-6e-0e-fc", looking up realm NULL</i></div><div><i> rlm_realm: No such realm "NULL"</i></div><div><i>++[suffix] returns noop</i></div><div><i> rlm_eap: No EAP-Message, not doing EAP</i></div><div><i>++[eap] returns noop</i></div><div><i>++[files] returns noop</i></div><div><i>++[expiration] returns noop</i></div><div><i>++[logintime] returns noop</i></div><div><i>rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this.</i></div><div><i>++[pap] returns noop</i></div><div><i>auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user</i></div><div><i>auth: Failed to validate the user.</i></div><div><i> Found Post-Auth-Type Reject</i></div><div><i>+- entering group REJECT</i></div><div><i> expand: %{User-Name} -> 00-1c-a4-6e-0e-fc</i></div><div><i> attr_filter: Matched entry DEFAULT at line 11</i></div><div><i>++[attr_filter.access_reject] returns updated</i></div><div><i>Delaying reject of request 0 for 1 seconds</i></div><div><i>Going to the next request</i></div><div><i>Sending delayed reject for request 0</i></div><div><i>Sending Access-Reject of id 28 to 10.0.5.200 port 6001</i></div><div><br class="webkit-block-placeholder"></div><div><span class="Apple-style-span" style="text-decoration: underline;">User creds</span></div><div><i>00-1c-a4-6e-0e-fc Cleartext-Password=="00-1c-a4-6e-0e-fc"</i></div><div><i> Calling-Station-Id=="00-1c-a4-6e-0e-fc",</i></div><div><i> NAS-IP-Address = 82.182.120.201,</i></div><div><i> Called-Station-Id = "00-20-a6-6f-93-bf:My Wireless Network B",</i></div><div><i> Service-Type = Framed-User,</i></div><div><i> Framed-Routing = Broadcast-Listen,</i></div><div><i> Calling-Station-Id = "00-1c-a4-6e-0e-fc",</i></div><div><i> NAS-Port = 9,</i></div><div><i> NAS-Port-Type = Wireless-802.11</i></div><div><br class="webkit-block-placeholder"></div><div><br class="webkit-block-placeholder"></div><div><br class="webkit-block-placeholder"></div><div>In both cases i get something strange that i cant find anywhere in the configs:</div><div><br class="webkit-block-placeholder"></div><div><i> Found Post-Auth-Type Reject</i></div><div><i>+- entering group REJECT</i></div><div><i> expand: %{User-Name} -> 00-1c-a4-6e-0e-fc</i></div><div><i> attr_filter: Matched entry DEFAULT at line 11</i></div><div><br class="webkit-block-placeholder"></div><div>What does this mean?</div><div><br class="webkit-block-placeholder"></div><div>Thx and good night.</div><div><br class="webkit-block-placeholder"></div><div>p</div><div><br class="webkit-block-placeholder"></div><br><div><div>On Sep 17, 2007, at 5:56 PM, <a href="mailto:freeradius-users-request@lists.freeradius.org">freeradius-users-request@lists.freeradius.org</a> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><blockquote type="cite"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 10px; "><font face="Helvetica" size="3" style="font: 12.0px Helvetica">OMG!<span class="Apple-converted-space"> </span>Im so sorry Alan - that was too easy (and im a noob). If i ever <span class="Apple-converted-space"> </span></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 10px; "><font face="Helvetica" size="3" style="font: 12.0px Helvetica">walk by your house you can get a free shot at me. : )</font></div> </blockquote><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; min-height: 14px; "><br></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" style="font: 12.0px Helvetica">as a resident of nottingham , UK, my neighbours might get their shot</font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" style="font: 12.0px Helvetica">off first! ;-)</font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; min-height: 14px; "><br></div> <blockquote type="cite"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 10px; "><font face="Helvetica" size="3" style="font: 12.0px Helvetica">Many thx again A - you'r the man, as always.</font></div> </blockquote><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; min-height: 14px; "><br></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" style="font: 12.0px Helvetica">I'm guessing it worked then? ;-)</font></div> </blockquote></div><br></body></html>