<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Alan DeKok wrote:
<blockquote cite="mid:49F8826E.6050901@deployingradius.com" type="cite">
<pre wrap="">jehan procaccia wrote:
</pre>
<blockquote type="cite">
<pre wrap="">hello,
I use FreeRADIUS Version 2.1.3, and I try a basic configuration from my
HP procurve2650 to do Mac-based radius auth.
for this I've setup a simple users file
005004B7252E Auth-Type := Local, Cleartext-Password := "005004B7252E"
</pre>
</blockquote>
<pre wrap=""><!---->
Delete the "Auth-Type := Local". It doesn't do anything useful.
</pre>
</blockquote>
OK done<br>
<blockquote cite="mid:49F8826E.6050901@deployingradius.com" type="cite">
<blockquote type="cite">
<pre wrap="">First ,it isn't clear to me wether to user Cleartext-Password or
User-Password and == ou := , and "" or no "" around the password ...!? ,
anyway, with Cleartext-Password it works fine with radtest at least
</pre>
</blockquote>
<pre wrap=""><!---->
The example in the FAQ and in the "users" file do NOT have Auth-Type.
They DO use Cleartext-Password, and they DO use ":=".
All of the third-party web sites, FAQs, etc. are 2-3 years out of
date, and are wrong.
</pre>
</blockquote>
Indeed I was "googleling" for exemples ... <br>
<blockquote cite="mid:49F8826E.6050901@deployingradius.com" type="cite">
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">[chap] login attempt by "005004B7252E" with CHAP password
[chap] Cleartext-Password is required for authentication
</pre>
</blockquote>
<pre wrap=""><!---->
That says it doesn't have the Cleartext-Password.
...
</pre>
<blockquote type="cite">
<pre wrap="">[files] users: Matched entry DEFAULT at line 172
</pre>
</blockquote>
<pre wrap=""><!---->
So... what's at line 172? Where is the "users" file entry you added?
</pre>
</blockquote>
line 172 was<br>
DEFAULT Framed-Protocol == PPP<br>
<br>
I moved Up my user entry at the top of the user files and now it seems
to work :-) <br>
Athough I didn't set any chap password anywhere in freeradius !?<br>
(perhaps because of this from <a class="moz-txt-link-freetext" href="http://wiki.freeradius.org/HP">http://wiki.freeradius.org/HP</a><br>
<i>Note: A hashed version of the SRC address is also available in the
CHAP-Password attribute.) ?</i><br>
<br>
rad_recv: Access-Request packet from host 157.159.7.138 port 1125,
id=13, length=195<br>
Framed-MTU = 1480<br>
NAS-IP-Address = 157.159.7.138<br>
NAS-Identifier = "Sw-C01"<br>
User-Name = "005004B7252E"<br>
Service-Type = Framed-User<br>
Framed-Protocol = PPP<br>
NAS-Port = 26<br>
NAS-Port-Type = Ethernet<br>
NAS-Port-Id = "26"<br>
Called-Station-Id = "00-1c-2e-b4-f2-66"<br>
Calling-Station-Id = "00-50-04-b7-25-2e"<br>
Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"<br>
CHAP-Password = 0x0ccbeba82a75e0762efbf021c72bd5c45a<br>
Message-Authenticator = 0x3eae4885821478bc7bbcf7e45618c453<br>
+- entering group authorize {...}<br>
++[preprocess] returns ok<br>
[auth_log] expand:
/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d ->
/var/log/radius/radacct/157.159.7.138/auth-detail-20090429<br>
[auth_log]
/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands
to /var/log/radius/radacct/157.159.7.138/auth-detail-20090429<br>
[auth_log] expand: %t -> Wed Apr 29 19:05:06 2009<br>
++[auth_log] returns ok<br>
[chap] Setting 'Auth-Type := CHAP'<br>
++[chap] returns ok<br>
++[mschap] returns noop<br>
[suffix] No '@' in User-Name = "005004B7252E", looking up realm NULL<br>
[suffix] No such realm "NULL"<br>
++[suffix] returns noop<br>
[eap] No EAP-Message, not doing EAP<br>
++[eap] returns noop<br>
++[unix] returns notfound<br>
[files] users: Matched entry 005004B7252E at line 3<br>
++[files] returns ok<br>
++[expiration] returns noop<br>
++[logintime] returns noop<br>
[pap] Found existing Auth-Type, not changing it.<br>
++[pap] returns noop<br>
Found Auth-Type = CHAP<br>
+- entering group CHAP {...}<br>
[chap] login attempt by "005004B7252E" with CHAP password<br>
[chap] Using clear text password "005004B7252E" for user 005004B7252E
authentication.<br>
[chap] chap user 005004B7252E authenticated succesfully<br>
++[chap] returns ok<br>
+- entering group post-auth {...}<br>
++[exec] returns noop<br>
Sending Access-Accept of id 13 to 157.159.7.138 port 1125<br>
Tunnel-Type:0 = VLAN<br>
Tunnel-Medium-Type:0 = IEEE-802<br>
Tunnel-Private-Group-Id:0 = "15"<br>
Finished request 0.<br>
Going to the next request<br>
Waking up in 4.9 seconds.<br>
Cleaning up request 0 ID 13 with timestamp +37<br>
Ready to process requests.<br>
<br>
My PC client isn't is the Vlan15 though .. it's getting late here in
france ... I'll continue tomorrow ...<br>
thanks .<br>
<br>
<blockquote cite="mid:49F8826E.6050901@deployingradius.com" type="cite">
<pre wrap="">
The FAQ says to add it at the TOP of the "users" file. That works
best for testing.
Alan DeKok.
</pre>
</blockquote>
<br>
</body>
</html>