<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
<BR>> ------------------------------<BR>> <BR>> Message: 2<BR>> Date: Mon, 23 Nov 2009 15:25:32 +0100<BR>> From: Alan DeKok <aland@deployingradius.com><BR>> Subject: Re: "No NAS-PORT seen"<BR>> To: FreeRadius users mailing list<BR>> <freeradius-users@lists.freeradius.org><BR>> Message-ID: <4B0A9B5C.6000102@deployingradius.com><BR>> Content-Type: text/plain; charset=ISO-8859-1<BR>> <BR>> Peter Carlstedt wrote:<BR>> > Well all of that works but from that point and forward it doesnt, I cant<BR>> > get my new user to authenticate towards the radius server and I get from<BR>> > attr_filter that the request matched entry DEFAULT at line 11, which<BR>> > sends a reject message if I have understood it correctly. Also I?ve<BR>> > commented out that the radius server should use the users file to do<BR>> > checks against when someone tries to authenticate, well that dont seem<BR>> > to work because when i try to authenticate towards the radius server<BR>> > with a user in the users file I succeed while i do not succeed when i<BR>> > try to authenticate by using the user that i created in the mysql database.<BR>> > <BR>> > Have I missed something?<BR>> <BR>> It shouldn't be that hard. If you change the configuration, re-start<BR>> the server.<BR>
<BR>
I re-start the server all the time when I change the configuration...so that is not the case.<BR>
I´ve checked if it works with radtest and it does. So in my mind it feels like i´ve missed something in the peap configuration? <BR>
<BR>> <BR>> And READ the debug output. There's a lot of text in it, but it<BR>> describes which modules its using, and what it's doing. The ONLY answer<BR>> to configuration problems is in the debug output.<BR>> <BR>> > But something i also noticed is that when i authenticate as the user who<BR>> > is in the users file and have commented out that it should use the users<BR>> > file it gets a message from rlm_radutmp saying "No NAS-Port seen. Cannot<BR>> > do anything."<BR>> <BR>> That only comes from accounting traffic, not from authentication<BR>> traffic. Please do NOT confuse the two.<BR>> <BR>> > Ive installed and made my own build of Freeradius 2.1.7 after i<BR>> > installed mysql client and all those libraries and mysql server. also I<BR>> > installed OpenSSL 0.9.8l before installation of the Freeradius server.<BR>> > <BR>> > Since the log is so big from radiusd -X is there any possibility to save<BR>> > it into a file? And how do i do that?<BR>> <BR>> $ script radius.log<BR>> $ radiusd -X ....<BR>> (run)<BR>> $ exit<BR>> <BR>> And then look at the file "radius.log"<BR>> <BR>> Alan DeKok.<BR>
<BR>
Ok thanks!<BR>
I´ll do that.<BR>
<BR>
Peter Carlstedt<BR>> <BR>> <BR>> ------------------------------<BR>> <BR>> <BR>> Message: 4<BR>> Date: Mon, 23 Nov 2009 14:53:42 +0000<BR>> From: Peter Carlstedt <pc_007@hotmail.com><BR>> Subject: Update of "No NAS-PORT seen"<BR>> To: <freeradius-users@lists.freeradius.org><BR>> Message-ID: <SNT120-W79B8526AA982DAA24E059B49E0@phx.gbl><BR>> Content-Type: text/plain; charset="iso-8859-1"<BR>> <BR>> <BR>> Hello again!<BR>> <BR>> I have an update of the problem.<BR>> <BR>> <BR>> <BR>> I also got an error which I?ve had before, then Ivan Kalik I think told me that i need to enable copy_request_to_tunnel = yes. Well I have that enabled so I can authenticate by peap. But now I get the same error when I try to authenticate the user which has been created in the MySQL database. The error I get is: (only mentioning the mschapv2 & mschap response from the output)<BR>> <BR>> <BR>> <BR>> "[mschapv2] +- entering group MS-CHAP {...}<BR>> <BR>> [mschap] No Cleartext-Password configured. Cannot create LM-Password.<BR>> <BR>> [mschap] No Cleartext-Password configured. Cannot create NT-Password.<BR>> <BR>> [mschap] Told to do MS-CHAPv2 for test-user with NT-Password<BR>> <BR>> [mschap] FAILED: No NT/LM-Password. Cannot perform authentication.<BR>> <BR>> [mschap] FAILED: MS-CHAP2-Response is incorrect<BR>> <BR>> ++[mschap] returns reject<BR>> <BR>> <BR>> <BR>> Also as a side note, the user in the database has a Cleartext-Password := test-pass.<BR>> <BR>> I read on the wiki that I should use ":=" and not "==" to do the check of the password.<BR>> <BR>> Also I have not set a AUTH-TYPE, i let the server figure it out on its own. <BR>> <BR>> <BR>> <BR>> Best regards/ Peter<BR>> > <BR><BR> <br /><hr />Windows Live: Make it easier for your friends to see <a href='http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_2:092009' target='_new'>what you’re up to on Facebook.</a></body>
</html>