<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7036.0">
<TITLE>RE: Testing radius server</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Alan,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Radius -X is always on, and I went through the</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">clients.conf file. -X</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> gives a lot information, since you asked here is my understanding. I'm not a programmer</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> so some of them are cryptic to me. I put in comments to what I think they are, but t</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">hey are only guesses. I would be very thankful if you can shed light</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">s</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> on them.</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"></FONT></SPAN><SPAN LANG="en-us"> </SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Also, there is</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">file experimental.conf stated in eap.conf, but did not exist. It may have some useful information.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">root@Crest raddb]# radtest cisco cisco 127.0.0.1 200 testing123</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Sending Access-Request of id 187 to 127.0.0.1 port 1812</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">User-Name = "cisco"</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">User-Password = "cisco"</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">NAS-IP-Address = 127.0.0.1</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">NAS-Port = 200</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">rad_recv: Access-Request packet from host 127.0.0.1 port 43663, id=187, length=57</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">User-Name = "cisco"</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">User-Password = "cisco"</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">NAS-IP-Address = 127.0.0.1</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">NAS-Port = 200</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">+- entering group authorize {...}</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">++[preprocess] returns ok</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> </FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">;what is preprocess and what does it do?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">++[chap] returns noop</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">;</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">I can tell that chap was not se</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">lected as a</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New"> protocol</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">, right?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">++[mschap] returns noop</FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">;as above</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[suffix] No '@' in User-Name = "cisco", looking up realm NULL</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"></FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">;why @ is expected in a name or</FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">password</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[suffix] No such realm "NULL"</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"></FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">;what this mean?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">++[suffix] returns noop</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[eap] No EAP-Message, not doing EAP</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New"> ;eap is not auth protocol.</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">++[eap] returns noop</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">++[unix] returns notfound</FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">;what is this?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">++[files] returns noop</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">++[expiration] returns noop</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">++[logintime] returns noop</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.</FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">;</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">I</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New"> do have a password (cisco).</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">++[pap] returns noop</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">No authenticate method (Auth-Type) configuration found for the request: Rejecting the user</FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">;</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">this look like authentication protocol is a must before the process can work, however,</FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">eap.conf file is there and eap is uncommented out</FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">with</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New"> it</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">’</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">s arguments. ?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Failed to authenticate the user.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Using Post-Auth-Type Reject</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">+- entering group REJECT {...}</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[attr_filter.access_reject] expand: %{User-Name} -> cisco</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> attr_filter: Matched entry DEFAULT at line 11</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">++[attr_filter.access_reject] returns updated</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Delaying reject of request 5 for 1 seconds</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Going to the next request</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Waking up in 0.9 seconds.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Sending delayed reject for request 5</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Sending Access-Reject of id 187 to 127.0.0.1 port 43663</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Waking up in 4.9 seconds.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=187, length=20</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[root@Crest raddb]# Cleaning up request 5 ID 187 with timestamp +411</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Ready to process requests.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Rgrds,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Alex</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">-----Original Message-----<BR>
From: freeradius-users-bounces+alexbahoor=sbcglobal.net@lists.freeradius.org [<A HREF="mailto:freeradius-users-bounces+alexbahoor=sbcglobal.net@lists.freeradius.org">mailto:freeradius-users-bounces+alexbahoor=sbcglobal.net@lists.freeradius.org</A>] On Behalf Of Alan Buxey<BR>
Sent: Thursday, December 10, 2009 2:07 AM<BR>
To: FreeRadius users mailing list<BR>
Subject: Re: Testing radius server</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Hi,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Now I know it's a config issue in the clients.conf, as radtest is failing. I</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> set user name and password, but radius is sending a reject. This is the</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> first time I'm using radius. So please bear with me. Can some one mail me</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> example of the minimum required configuration that needed for the radius to</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> work, no EAP or MSCAP ..etc. </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">hey, guess what - 'radiusd -X' this will be far more useful than</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">throwing random recommendations to you.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">have you followed basic guidance regarding hwo to use clients.conf</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">eg</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">testuser Cleartext-Password := "testpassword"</FONT></SPAN></P>
<BR>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">alan</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">-</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">List info/subscribe/unsubscribe? See <A HREF="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A></FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">__________ Information from ESET NOD32 Antivirus, version of virus signature database 4674 (20091209) __________</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">The message was checked by ESET NOD32 Antivirus.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><A HREF="http://www.eset.com">http://www.eset.com</A></FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">__________ Information from ESET NOD32 Antivirus, version of virus signature database 4676 (20091210) __________</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">The message was checked by ESET NOD32 Antivirus.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><A HREF="http://www.eset.com">http://www.eset.com</A></FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">__________ Information from ESET NOD32 Antivirus, version of virus signature database 4676 (20091210) __________</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">The message was checked by ESET NOD32 Antivirus.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><A HREF="http://www.eset.com">http://www.eset.com</A></FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"></FONT></SPAN> </P>
</BODY>
</HTML>