<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
Hi <br>
Thanks for last advices with freeradius installations + peap on debian
lenny<br>
Now i have no problem with enabling peap :)<br>
<br>
this time I'm asking for help with some other problem:<br>
I'm trying to enable WPA2 enterprice authentication on my accesspoints.<br>
When trying to auth my wireless client I'm getting sth like this in log
:<br>
<br>
Wed May 5 15:09:25 2010 : Auth: Login incorrect: [karol/<no
User-Password attribute>] (from client AP1 port 0 cli 0022431380c4)<br>
where : <br>
0022431380c4 is my wireless mac adress (laptop)<br>
client AP1 is my Access Point client from clients.conf<br>
karol - is my user from users.conf<br>
<br>
it looks like freeradius don't want to look inside the password field
and can't recognize a laptop ip (getting mac)<br>
<br>
Please give me some advices - what's next ?<br>
<br>
Here is my debug.<br>
<br>
<br>
Kill-9:/home/kornel# freeradius -X<br>
FreeRADIUS Version 2.1.8, for host i486-pc-linux-gnu, built on Jan 3
2010 at 15:51:52<br>
Copyright (C) 1999-2009 The FreeRADIUS server project and contributors.
<br>
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A <br>
PARTICULAR PURPOSE. <br>
You may redistribute copies of FreeRADIUS under the terms of the <br>
GNU General Public License v2. <br>
Starting - reading configuration files ...<br>
including configuration file /etc/freeradius/radiusd.conf<br>
including configuration file /etc/freeradius/proxy.conf<br>
including configuration file /etc/freeradius/clients.conf<br>
including configuration file /etc/freeradius/snmp.conf<br>
including configuration file /etc/freeradius/eap.conf<br>
including configuration file /etc/freeradius/policy.conf<br>
including files in directory /etc/freeradius/sites-enabled/<br>
main {<br>
user = "freerad"<br>
group = "freerad"<br>
allow_core_dumps = no<br>
}<br>
including dictionary file /etc/freeradius/dictionary<br>
main {<br>
prefix = "/usr"<br>
localstatedir = "/var"<br>
logdir = "/var/log/freeradius"<br>
libdir = "/usr/lib/freeradius"<br>
radacctdir = "/var/log/freeradius/radacct"<br>
hostname_lookups = no<br>
max_request_time = 30<br>
cleanup_delay = 5<br>
max_requests = 1024<br>
pidfile = "/var/run/freeradius/freeradius.pid"<br>
checkrad = "/usr/sbin/checkrad"<br>
debug_level = 0<br>
proxy_requests = yes<br>
log {<br>
stripped_names = yes<br>
auth = yes<br>
auth_badpass = yes<br>
auth_goodpass = yes<br>
}<br>
security {<br>
max_attributes = 200<br>
reject_delay = 1<br>
status_server = yes<br>
}<br>
}<br>
radiusd: #### Loading Realms and Home Servers ####<br>
proxy server {<br>
retry_delay = 5<br>
retry_count = 3<br>
default_fallback = yes<br>
dead_time = 120<br>
wake_all_if_all_dead = no<br>
}<br>
radiusd: #### Loading Clients ####<br>
client localhost {<br>
ipaddr = 127.0.0.1<br>
require_message_authenticator = no<br>
secret = "testing123"<br>
nastype = "other"<br>
}<br>
<b> client 172.16.0.16 { ----------------------Client ip
adress</b><br>
require_message_authenticator = no<br>
secret = "tajne1234"<br>
shortname = "eee"<br>
}<br>
<b> client 192.168.10.50 { ----------------------AP ip adress</b><br>
require_message_authenticator = no<br>
secret = "tajne1234"<br>
shortname = "AP1"<br>
}<br>
radiusd: #### Instantiating modules ####<br>
instantiate {<br>
Module: Linked to module rlm_exec<br>
Module: Instantiating exec<br>
exec {<br>
wait = yes<br>
input_pairs = "request"<br>
shell_escape = yes<br>
}<br>
Module: Linked to module rlm_expr<br>
Module: Instantiating expr<br>
Module: Linked to module rlm_expiration<br>
Module: Instantiating expiration<br>
expiration {<br>
reply-message = "Password Has Expired "<br>
}<br>
Module: Linked to module rlm_logintime<br>
Module: Instantiating logintime<br>
logintime {<br>
reply-message = "You are calling outside your allowed timespan "<br>
minimum-timeout = 60<br>
}<br>
}<br>
radiusd: #### Loading Virtual Servers ####<br>
server {<br>
modules {<br>
} # modules<br>
} # server<br>
radiusd: #### Opening IP addresses and Ports ####<br>
listen {<br>
type = "auth"<br>
ipaddr = *<br>
port = 1812<br>
}<br>
listen {<br>
type = "acct"<br>
ipaddr = *<br>
port = 0<br>
}<br>
Listening on authentication address * port 1812<br>
Listening on accounting address * port 1813<br>
Listening on proxy address * port 1814<br>
Ready to process requests.<br>
<br>
<b>AND here is an authenticate attempt debug</b><br>
<br>
rad_recv: Access-Request packet from host 192.168.10.50 port 2054,
id=148, length=169<br>
User-Name = "karol"<br>
<b> NAS-IP-Address = 192.168.10.50
----------------------AP ip adress</b><br>
NAS-Port = 0<br>
<b> Called-Station-Id = "00265abab28d"
----------------------AP mac adress<br>
Calling-Station-Id = "0022431380c4"
----------------------Client mac adress</b><br>
NAS-Identifier = "Realtek Access Point. 8186"<br>
Framed-MTU = 1400<br>
NAS-Port-Type = Wireless-802.11<br>
Service-Type = Framed-User<br>
Connect-Info = "CONNECT 11Mbps 802.11b"<br>
EAP-Message = 0x0200000b016d617263696e<br>
Message-Authenticator = 0x2ea50a302a451ed3b32b748a23fe00e3<br>
WARNING: Empty section. Using default return values.<br>
No authenticate method (Auth-Type) configuration found for the request:
Rejecting the user<br>
Failed to authenticate the user.<br>
Login incorrect: [karol/<no User-Password attribute>] (from
client AP1 port 0 cli 0022431380c4)<br>
Delaying reject of request 0 for 1 seconds<br>
Going to the next request<br>
Waking up in 0.9 seconds.<br>
Sending delayed reject for request 0<br>
Sending Access-Reject of id 148 to 192.168.10.50 port 2054<br>
Waking up in 4.9 seconds.<br>
<br>
<br>
Client's system is eeebuntu and i'm sure that's on client and on AP
everything is ok because when i'm connecting to another freeradius
server - it's working fine (unfortunatelly i don't have an acces to
those confs) in addition - temporarily I accepted all connections from
those two ip's on my firewall to have 100% sure that's not a connection
issue.<br>
<br>
Thank you for your time and knowledge share.<br>
<pre class="moz-signature" cols="72">--
LAN Administrator of DS14
Kornel Kornatka
room 529
</pre>
</body>
</html>