<div dir="ltr">Hi Alan,<br><br>I run the same config (as previous post) which works as you indicated (and Ivan) with radtest however when I use a windows client this is what I get.... and the rearrangement of the username<br>
<br>rad_recv: Access-Request packet from host <a href="http://10.0.1.9">10.0.1.9</a> port 1645, id=203, length=139<br> User-Name = "****\\raduser"<br> Service-Type = Framed-User<br> Framed-MTU = 1500<br>
Called-Station-Id = "00-13-19-EE-6F-11"<br> Calling-Station-Id = "00-15-C5-02-39-99"<br> EAP-Message = 0x02020011014e494e545c72616475736572<br> Message-Authenticator = 0xfb84a2ca75668b069afe6577aef9a486<br>
NAS-Port-Type = Ethernet<br> NAS-Port = 50117<br> NAS-IP-Address = <a href="http://10.0.1.9">10.0.1.9</a><br>+- entering group authorize<br>++[preprocess] returns ok<br>perl_pool: item 0x2acfd70 asigned new request. Handled so far: 1<br>
found interpetator at address 0x2acfd70<br>rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet<br>rlm_perl: RAD_REQUEST: Service-Type = Framed-User<br>rlm_perl: RAD_REQUEST: Calling-Station-Id = 00-15-C5-02-39-99<br>rlm_perl: RAD_REQUEST: Called-Station-Id = 00-13-19-EE-6F-11<br>
rlm_perl: RAD_REQUEST: Message-Authenticator = 0xfb84a2ca75668b069afe6577aef9a486<br>rlm_perl: RAD_REQUEST: User-Name = ****\\raduser<br>rlm_perl: RAD_REQUEST: EAP-Message = 0x02020011014e494e545c72616475736572<br>rlm_perl: RAD_REQUEST: NAS-IP-Address = <a href="http://10.0.1.9">10.0.1.9</a><br>
rlm_perl: RAD_REQUEST: NAS-Port = 50117<br>rlm_perl: RAD_REQUEST: Framed-MTU = 1500<br>rlm_perl: Added pair NAS-Port-Type = Ethernet<br>rlm_perl: Added pair Service-Type = Framed-User<br>rlm_perl: Added pair Calling-Station-Id = 00-15-C5-02-39-99<br>
rlm_perl: Added pair Called-Station-Id = 00-13-19-EE-6F-11<br>rlm_perl: Added pair Message-Authenticator = 0xfb84a2ca75668b069afe6577aef9a486<br>rlm_perl: Added pair User-Name = ****\\raduser<br>rlm_perl: Added pair EAP-Message = 0x02020011014e494e545c72616475736572<br>
rlm_perl: Added pair NAS-IP-Address = <a href="http://10.0.1.9">10.0.1.9</a><br>rlm_perl: Added pair NAS-Port = 50117<br>rlm_perl: Added pair Framed-MTU = 1500<br>perl_pool total/active/spare [32/0/32]<br>Unreserve perl at address 0x2acfd70<br>
++[perl] returns updated<br>++[chap] returns noop<br>++[mschap] returns noop<br> rlm_realm: No '@' in User-Name = "****\ aduserr", looking up realm NULL<br> rlm_realm: No such realm "NULL"<br>
++[suffix] returns noop<br> rlm_eap: EAP packet type response id 2 length 17<br> rlm_eap: No EAP Start, assuming it's an on-going EAP conversation<br>++[eap] returns updated<br>rlm_ldap: Entering ldap_groupcmp()<br>
expand: dc=ads,dc=nint,dc=org -> dc=ads,dc=nint,dc=org<br> expand: (sAMAccountname=%{mschap:User-Name:-%{User-Name}}) -> (sAMAccountname= aduserr)<br>rlm_ldap: ldap_get_conn: Checking Id: 0<br>rlm_ldap: ldap_get_conn: Got Id: 0<br>
rlm_ldap: performing search in dc=***,dc=****,dc=***, with filter (sAMAccountname= aduserr)<br>rlm_ldap: object not found or got ambiguous search result<br>rlm_ldap::ldap_groupcmp: search failed<br>rlm_ldap: ldap_release_conn: Release Id: 0<br>
rlm_ldap: Entering ldap_groupcmp()<br><br><br>rlm_ldap: ldap_get_conn: Checking Id: 0<br>rlm_ldap: ldap_get_conn: Got Id: 0<br>rlm_ldap: performing search in dc=***,dc=****,dc=***, with filter (sAMAccountname= aduserr)<br>
rlm_ldap: object not found or got ambiguous search result<br>rlm_ldap: search failed<br>rlm_ldap: ldap_release_conn: Release Id: 0<br>++[ldap] returns notfound<br>++[expiration] returns noop<br>++[logintime] returns noop<br>
rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this.<br>++[pap] returns noop<br> rad_check_password: Found Auth-Type EAP<br>auth: type "EAP"<br>+- entering group authenticate<br>
rlm_eap: Identity does not match User-Name, setting from EAP Identity.<br> rlm_eap: Failed in handler<br>++[eap] returns invalid<br>auth: Failed to validate the user.<br>Login incorrect (rlm_ldap: User not found): [****\\\raduser] (from client switch-man-lan port 50117 cli 00-15-C5-02-39-99)<br>
Found Post-Auth-Type Reject<br>+- entering group REJECT<br> expand: %{User-Name} -> ****\ aduserr<br> attr_filter: Matched entry DEFAULT at line 11<br>++[attr_filter.access_reject] returns updated<br>Sending Access-Reject of id 203 to <a href="http://10.0.1.9">10.0.1.9</a> port 1645<br>
Finished request 1.<br><br></div>