<br><br><div class="gmail_quote">2011/11/11 Phil Mayers <span dir="ltr"><<a href="mailto:p.mayers@imperial.ac.uk">p.mayers@imperial.ac.uk</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On 11/11/2011 07:46 AM, Alejandro Gandara wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I got erros anyways. I've attached debug output<br>
</blockquote>
<br></div>
The debug output didn't make it through; I guess it was too big. Use a pastebin, or put it inline in the email?<div class="HOEnZb"><div class="h5"><br></div></div></blockquote><div>this is the short view:<br>++[preprocess] returns ok<br>
[ntdomain] Looking up realm "OPTARE" for User-Name = "OPTARE\brouco"<br>[ntdomain] Found realm "OPTARE"<br>[ntdomain] Adding Stripped-User-Name = "brouco"<br>[ntdomain] Adding Realm = "OPTARE"<br>
[ntdomain] Authentication realm is LOCAL.<br>++[ntdomain] returns ok<br>++[mschap] returns noop<br>++[digest] returns noop<br>[ldap] performing user authorization for brouco<br>[ldap] expand: %{Stripped-User-Name} -> brouco<br>
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=brouco)<br>[ldap] expand: dc=optare,dc=loc -> dc=optare,dc=loc<br> [ldap] ldap_get_conn: Checking Id: 0<br> [ldap] ldap_get_conn: Got Id: 0<br>
[ldap] performing search in dc=optare,dc=loc, with filter (uid=brouco)<br>[ldap] No default NMAS login sequence<br>[ldap] looking for check items in directory...<br> [ldap] roomNumber -> Pool-Name == "infraestructuras"<br>
[ldap] sambaNtPassword -> NT-Password == 0x3245334230434533423046383434414238374145393237384141453730393331<br>[ldap] looking for reply items in directory...<br> [ldap] radiusTunnelPrivateGroupId -> Tunnel-Private-Group-Id:0 = "01"<br>
[ldap] radiusTunnelMediumType -> Tunnel-Medium-Type:0 = IEEE-802<br> [ldap] radiusTunnelType -> Tunnel-Type:0 = VLAN<br> [ldap] radiusFramedIPAddress -> Framed-IP-Address = 192.45.51.9<br>WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?<br>
[ldap] user brouco authorized to use remote access<br> [ldap] ldap_release_conn: Release Id: 0<br>++[ldap] returns ok<br>[eap] EAP packet type response id 45 length 43<br>[eap] Continuing tunnel setup.<br>++[eap] returns ok<br>
Found Auth-Type = EAP<br># Executing group from file /etc/freeradius/sites-enabled/default<br>+- entering group authenticate {...}<br>[eap] Request found, released from the list<br>[eap] EAP/peap<br>[eap] processing type peap<br>
[peap] processing EAP-TLS<br>[peap] eaptls_verify returned 7<br>[peap] Done initial handshake<br>[peap] eaptls_process returned 7<br>[peap] EAPTLS_OK<br>[peap] Session established. Decoding tunneled attributes.<br>[peap] Peap state send tlv failure<br>
[peap] Received EAP-TLV response.<br>[peap] The users session was previously rejected: returning reject (again.)<br>[peap] *** This means you need to read the PREVIOUS messages in the debug output<br>[peap] *** to find out the reason why the user was rejected.<br>
[peap] *** Look for "reject" or "fail". Those earlier messages will tell you.<br>[peap] *** what went wrong, and how to fix the problem.<br> SSL: Removing session 1390126992ccf15f6eca58514ff74975f8661cc927bbe3a5f0e0a52b9a310e4a from the cache<br>
[eap] Handler failed in EAP/peap<br>[eap] Failed in EAP select<br>++[eap] returns invalid<br>Failed to authenticate the user.<br>Login incorrect: [OPTARE\\brouco/<via Auth-Type = EAP>] (from client privradius port 29 cli f0-4d-a2-bc-77-cd)<br>
Using Post-Auth-Type Reject<br> WARNING: Unknown value specified for Post-Auth-Type. Cannot perform requested action.<br># Executing group from file /etc/freeradius/sites-enabled/default<br>Delaying reject of request 6 for 1 seconds<br>
<br><br>Thanks for the help <br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div class="HOEnZb"><div class="h5">
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/<u></u>list/users.html</a><br>
</div></div></blockquote></div><br>