<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
I hate hotmail.<br>ok, you're saying /etc/raddb/server is a pam config file ?<br><br>anyhow, I'm happy to report the single quote method fixes part of the problem.<br>that of the "@%%" working better now. still doesn't log in.<br><br>even using radiusd -Xsfxxx or so doesn't give any more information. -X gives the debugging I showed.<br><br>is there something else I can do to test/check why the API is failing?<br><br>Dan.<br><br>> Date: Wed, 28 Nov 2007 18:53:20 +0100<br>> From: aland@deployingradius.com<br>> To: freeradius-users@lists.freeradius.org<br>> Subject: Re: radtest seems to fail out of the box<br>> <br>> Dan Gahlinger wrote:<br>> > Ok, Al, can you explain or help with this.<br>> > <br>> > just to appease you, I unpacked free radius, out of the box,<br>> > changed a single line in "server" as such:<br>> > 127.0.0.1 testing123 3<br>> <br>> I think that's a config file for the PAM module. FreeRADIUS doesn't<br>> use it.<br>> <br>> > ran radtest using a testuser local account:<br>> <br>> In /etc/passwd...<br>> <br>> > Radiusd -X shows:<br>> ...<br>> > users: Matched entry DEFAULT at line 155<br>> <br>> Which is the entry setting Auth-Type = System. i.e. "check against<br>> /etc/passwd".<br>> <br>> > rlm_unix: [testuser]: invalid password<br>> <br>> Which is pretty definitive. FreeRADIUS just calls the standard Unix<br>> API's to get the users password from /etc/passwd or /etc/shadow, and<br>> then calls the standard Unix API's to check that against what the user<br>> entered.<br>> <br>> It looks like the second call is causing issues. It's returning<br>> something, but that something doesn't match what's in /etc/passwd.<br>> <br>> If it helps, FreeRADIUS is simply at the mercy of the system API's<br>> here. Are you running as root in debugging mode?<br>> <br>> > the password is valid, as a local SSH using the same information works.<br>> <br>> Ouch.<br>> <br>> > And one other oddity, when using users with "hardended" passwords like<br>> > say "test@"<br>> > radtest and radiusd -X will show the password as "test2", whether quotes<br>> > are used or not.<br>> <br>> That's... odd. There may be shell escaping issues, but when I test<br>> users like that using single quotes ( 'test@' ) in radtest && the<br>> "users" file, it works for me.<br>> <br>> > is this normal? and why does the radtest fail?<br>> <br>> It's not normal. radtest fails because the API's FreeRADIUS calls<br>> don't seem to work.<br>> <br>> Alan DeKok.<br>> -<br>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br><br /><hr />R U Ready for Windows Live Messenger Beta 8.5? <a href='http://entertainment.sympatico.msn.ca/WindowsLiveMessenger' target='_new'>Try it today!</a></body>
</html>