Hi,<br>My freeradius works if I use a test client to send in the username and password, but when I switch to sip server, it does not work anymore. I have searched the internet and some people suggested that this may be due to Attribute setting, so I tried 'Cleartext-Password','User-Password', and 'Digest-HA1', but none of those work. What is wrong with my radius setting? <br>
<br>Your help will be greately appreciated. <br><br>Thanks,<br>Pete<br><br>Here is the radiusd -X log:<br><br><br>Waking up in 4.9 seconds.<br> User-Name = "<a href="mailto:1006@192.168.1.104" target="_blank">1006@192.168.1.104</a>"<br>
Digest-Attributes = 0x0a0631303036<br> Digest-Attributes = 0x010f3139322e3136382e312e31303<div class="Ih2E3d">4<br></div> Digest-Attributes = 0x022a3438336465356263616637653<div id="1fgs" class="ArwC7c ckChnd">
5646335323862373335643661393364363634636237376533396636<div class="Ih2E3d"><br>
Digest-Attributes = 0x04137369703a3139322e3136382e312e313034<br> Digest-Attributes = 0x030a5245474953544552<br></div> Digest-Response = "9b614ed006554a3a7ea094b14237dae9"<div class="Ih2E3d">
<br> Service-Type = IAPP-Register<br>
X-Ascend-PW-Lifetime = 825241654<br> NAS-Port = 5060<br> NAS-IP-Address = <a href="http://127.0.0.1/" target="_blank">127.0.0.1</a><br>+- entering group authorize<br>++[preprocess] returns ok<br> expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/<a href="http://127.0.0.1/auth-detail-20080529" target="_blank">127.0.0.1/auth-detail-20080529</a><br>
rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/<a href="http://127.0.0.1/auth-detail-20080529" target="_blank">127.0.0.1/auth-detail-20080529</a><br>
</div> expand: %t -> Thu May 29 07:02:41 2008<div class="Ih2E3d"><br>
++[auth_log] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>rlm_digest: Adding Auth-Type = DIGEST<br>++[digest] returns ok<br> rlm_realm: Looking up realm "<a href="http://192.168.1.104/" target="_blank">192.168.1.104</a>" for User-Name = "<a href="mailto:1006@192.168.1.104" target="_blank">1006@192.168.1.104</a>"<br>
rlm_realm: Found realm "<a href="http://192.168.1.104/" target="_blank">192.168.1.104</a>"<br> rlm_realm: Adding Stripped-User-Name = "1006"<br> rlm_realm: Adding Realm = "<a href="http://192.168.1.104/" target="_blank">192.168.1.104</a>"<br>
rlm_realm: Authentication realm is LOCAL.<br>++[suffix] returns noop<br> rlm_eap: No EAP-Message, not doing EAP<br>++[eap] returns noop<br>++[files] returns noop<br> expand: %{Stripped-User-Name} -> 1006<br>
expand: %{%{Stripped-User-Name}:-%{%{User-Name}:-DEFAULT}} -> 1006<br>rlm_sql (sql): sql_set_user escaped user --> '1006'<br>rlm_sql (sql): Reserving sql socket id: 1<br></div><div class="Ih2E3d">
expand: SELECT id, username, attribute, value, op FROM
radcheck WHERE username = '%{SQL-User-Name}' ORDER
BY id -> SELECT id, username, attribute, value, op FROM
radcheck WHERE username = '1006' ORDER BY id<br>
rlm_sql_mysql: query: SELECT id, username, attribute, value,
op FROM radcheck WHERE username = '1006'
ORDER BY id<br>rlm_sql (sql): User found in radcheck table<br>
expand: SELECT id, username, attribute, value, op FROM
radreply WHERE username = '%{SQL-User-Name}' ORDER
BY id -> SELECT id, username, attribute, value, op FROM
radreply WHERE username = '1006' ORDER BY id<br></div><div class="Ih2E3d">
rlm_sql_mysql: query: SELECT id, username, attribute, value,
op FROM radreply WHERE username = '1006'
ORDER BY id<br>
expand: SELECT groupname FROM radusergroup WHERE
username = '%{SQL-User-Name}' ORDER BY priority -> SELECT
groupname FROM radusergroup WHERE username =
'1006' ORDER BY priority<br>
rlm_sql_mysql: query: SELECT groupname FROM
radusergroup WHERE username = '1006' ORDER BY
priority<br>
expand: SELECT id, groupname, attribute, Value, op
FROM radgroupcheck WHERE groupname = '%{Sql-Group}'
ORDER BY id -> SELECT id, groupname, attribute, Value,
op FROM radgroupcheck WHERE groupname =
'openser' ORDER BY id<br>
rlm_sql_mysql: query: SELECT id, groupname, attribute,
Value, op FROM radgroupcheck WHERE groupname =
'openser' ORDER BY id<br>rlm_sql (sql): User found in group openser<br>
expand: SELECT id, groupname, attribute, value, op
FROM radgroupreply WHERE groupname = '%{Sql-Group}'
ORDER BY id -> SELECT id, groupname, attribute, value,
op FROM radgroupreply WHERE groupname =
'openser' ORDER BY id<br>
rlm_sql_mysql: query: SELECT id, groupname, attribute,
value, op FROM radgroupreply WHERE groupname =
'openser' ORDER BY id<br>rlm_sql (sql): Released sql socket id: 1<br>++[sql] returns ok<br>
++[expiration] returns noop<br>++[logintime] returns noop<br>rlm_pap: Found existing Auth-Type, not changing it.<br>++[pap] returns noop<br> rad_check_password: Found Auth-Type Local<br></div>!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br>
!!! Replacing User-Password in config items with Cleartext-Password. !!!<br>!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br>!!! Please update your configuration so that the "known good" !!!<br>
!!! clear text password is in Cleartext-Password, and not in User-Password. !!!<br>!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<div class="Ih2E3d"><br>auth: type Local<br>auth: No User-Password or CHAP-Password attribute in the request<br>
auth: Failed to validate the user.<br>Login incorrect: [<a href="http://1006@192.168.1.104/" target="_blank">1006@192.168.1.104/</a><via Auth-Type = Local>] (from client localhost port 5060)<br> Found Post-Auth-Type Reject<br>
+- entering group REJECT<br>
expand: %{User-Name} -> <a href="mailto:1006@192.168.1.104" target="_blank">1006@192.168.1.104</a><br> attr_filter: Matched entry DEFAULT at line 11<br>++[attr_filter.access_reject] returns updated<br></div>Delaying reject of request 227 for 1 seconds</div>
<br>