<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body link="#0000ee" alink="#ee0000" bgcolor="#ffffff" text="#000000"
vlink="#551a8b">
<tt>Hello,<br>
<br>
I have freeradius-1.1.3 </tt><tt>and 3com switch 5500-EI. On the
switch is disposed the access of users into the network through
freeradius. Arose problem in
connecting to switch on telnet. In the log freeradius it is indicated
that the incorrect password (however password I introduce correctly).<br>
<br>
rad_recv: Access-Request packet from host 10.0.1.2:5007, id=1,
length=203<br>
User-Name = "admin"<br>
User-Password = "admin"<br>
NAS-IP-Address = 10.0.1.2<br>
NAS-Identifier = "001ac1d4ee42"<br>
NAS-Port = 117612545<br>
NAS-Port-Id = "unit=7;subslot=0;port=42;vlanid=1"<br>
NAS-Port-Type = Ethernet<br>
Service-Type = Login-User<br>
Login-IP-Host = 10.0.1.2<br>
Calling-Station-Id = "0000-0000-0000"<br>
Framed-IP-Address = 10.0.1.100<br>
Vendor-25506-Attr-26 = 0x00000003<br>
Vendor-25506-Attr-255 = 0x353530302d4549<br>
Vendor-25506-Attr-60 =
0x31302e302e312e3130302030303a30303a30303a30303a30303a3030<br>
Vendor-25506-Attr-59 = 0x38e68c68<br>
Processing the authorize section of radiusd.conf<br>
modcall: entering group authorize for request 0<br>
modcall[authorize]: module "mschap" returns noop for request 0<br>
rlm_realm: No '\' in User-Name = "admin", looking up realm NULL<br>
rlm_realm: No such realm "NULL"<br>
modcall[authorize]: module "ntdomain" returns noop for request 0<br>
rlm_eap: No EAP-Message, not doing EAP<br>
modcall[authorize]: module "eap" returns noop for request 0<br>
users: Matched entry DEFAULT at line 152<br>
users: Matched entry admin at line 216<br>
modcall[authorize]: module "files" returns ok for request 0<br>
modcall: leaving group authorize (returns ok) for request 0<br>
rad_check_password: Found Auth-Type System<br>
auth: type "System"<br>
Processin<font color="#000000">g the authenticate section of
radiusd.conf<br>
modcall: entering group authenticate for request 0<br>
modcall[authenticate]: module "unix" returns notfound for request 0<br>
modcall: leaving group authenticate (returns notfound) for request 0<br>
auth: Failed to validate the user.<br>
</font><font color="#000000">Login incorrect: [admin/admin] (from
client 10.0.1.2 port 117612545 cli 0000-0000-0000)<br>
Delaying request 0 for 1 seconds<br>
Finished request 0<br>
<br>
Users:<br>
admin Auth-Type = System, User-Password == "admin"<br>
3Com-User-Access-Level = Administrator<br>
<br>
eap.conf:<br>
eap{<br>
default_eap_type = peap<br>
timer_expire = 60<br>
ignore_unknown_eap_type = no<br>
cisco_accounting_username_bug = no<br>
<br>
md5{<br>
}<br>
<br>
leap{<br>
}<br>
<br>
gtc{<br>
auth_type = PAP<br>
}<br>
<br>
peap{<br>
default_eap_type = mschapv2<br>
use_tunneled_reply = yes<br>
}<br>
<br>
mschapv2{<br>
}<br>
}<br>
</font><font color="#000000"><br>
</font>It can possibly use a local authorization to switch on telnet,
without freeradius.<br>
<br>
Viktor Guk<br>
</tt>
</body>
</html>