<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Personally i want freeradius just to work with IPhones or other
devices.<br>
<br>
But the debug mode doesnt show any try to connect to LDAP.<br>
<br>
<small>rad_recv: Access-Request packet from host 10.119.12.2 port
1313, id=19, length=197<br>
Message-Authenticator = 0xb75eef411ae5dd032df4d51d75b5174e<br>
Service-Type = Framed-User<br>
User-Name = "nadine.bosshard"<br>
Framed-MTU = 1488<br>
Called-Station-Id = "204E7FE98EF3:TCSVO-Intern"<br>
Calling-Station-Id = "9803D861E85C"<br>
NAS-Identifier = "aptcsvo02"<br>
NAS-Port-Type = Wireless-802.11<br>
Connect-Info = "CONNECT 54Mbps 802.11g"<br>
EAP-Message = 0x02000014016e6164696e652e626f737368617264<br>
NAS-IP-Address = 10.119.12.2<br>
NAS-Port = 1<br>
NAS-Port-Id = "STA port # 1"<br>
+- entering group authorize<br>
++[preprocess] returns ok<br>
++[chap] returns noop<br>
++[mschap] returns noop<br>
rlm_realm: No '@' in User-Name = "nadine.bosshard", looking up
realm NULL<br>
rlm_realm: No such realm "NULL"<br>
++[suffix] returns noop<br>
rlm_eap: EAP packet type response id 0 length 20<br>
rlm_eap: No EAP Start, assuming it's an on-going EAP
conversation<br>
++[eap] returns updated<br>
rlm_unix: [nadine.bosshard]: invalid shell [/bin/false]<br>
++[unix] returns reject<br>
Invalid user: [nadine.bosshard/<via Auth-Type = EAP>] (from
client aptcsvo02 port 1 cli 9803D861E85C)<br>
Found Post-Auth-Type Reject<br>
+- entering group REJECT<br>
expand: %{User-Name} -> nadine.bosshard<br>
attr_filter: Matched entry DEFAULT at line 11<br>
++[attr_filter.access_reject] returns updated<br>
Delaying reject of request 1 for 1 seconds<br>
Going to the next request<br>
Waking up in 0.9 seconds.<br>
rad_recv: Access-Request packet from host 10.119.12.2 port 1313,
id=19, length=197<br>
Waiting to send Access-Reject to client aptcsvo02 port 1313 - ID:
19<br>
Sending delayed reject for request 1<br>
Sending Access-Reject of id 19 to 10.119.12.2 port 1313<br>
Waking up in 4.9 seconds.<br>
Cleaning up request 1 ID 19 with timestamp +53655<br>
Ready to process requests.<br>
rad_recv: Access-Request packet from host 10.119.12.2 port 1314,
id=20, length=197<br>
Message-Authenticator = 0x0893415ae4d24bc109a2109f68e2035b<br>
Service-Type = Framed-User<br>
User-Name = "nadine.bosshard"<br>
Framed-MTU = 1488<br>
Called-Station-Id = "204E7FE98EF3:TCSVO-Intern"<br>
Calling-Station-Id = "9803D861E85C"<br>
NAS-Identifier = "aptcsvo02"<br>
NAS-Port-Type = Wireless-802.11<br>
Connect-Info = "CONNECT 54Mbps 802.11g"<br>
EAP-Message = 0x02000014016e6164696e652e626f737368617264<br>
NAS-IP-Address = 10.119.12.2<br>
NAS-Port = 1<br>
NAS-Port-Id = "STA port # 1"<br>
+- entering group authorize<br>
++[preprocess] returns ok<br>
++[chap] returns noop<br>
++[mschap] returns noop<br>
rlm_realm: No '@' in User-Name = "nadine.bosshard", looking up
realm NULL<br>
rlm_realm: No such realm "NULL"<br>
++[suffix] returns noop<br>
rlm_eap: EAP packet type response id 0 length 20<br>
rlm_eap: No EAP Start, assuming it's an on-going EAP
conversation<br>
++[eap] returns updated<br>
rlm_unix: [nadine.bosshard]: invalid shell [/bin/false]<br>
++[unix] returns reject<br>
Invalid user: [nadine.bosshard/<via Auth-Type = EAP>] (from
client aptcsvo02 port 1 cli 9803D861E85C)<br>
Found Post-Auth-Type Reject<br>
+- entering group REJECT<br>
expand: %{User-Name} -> nadine.bosshard<br>
attr_filter: Matched entry DEFAULT at line 11<br>
++[attr_filter.access_reject] returns updated<br>
Delaying reject of request 2 for 1 seconds<br>
Going to the next request<br>
Waking up in 0.9 seconds.<br>
rad_recv: Access-Request packet from host 10.119.12.2 port 1314,
id=20, length=197<br>
Waiting to send Access-Reject to client aptcsvo02 port 1314 - ID:
20<br>
Sending delayed reject for request 2<br>
Sending Access-Reject of id 20 to 10.119.12.2 port 1314<br>
Waking up in 4.9 seconds.<br>
Cleaning up request 2 ID 20 with timestamp +53680<br>
Ready to process requests.</small><br>
<br>
I now configured the whole thing new. <br>
But I dont find any entries in logs, which give me a hint what my
problem with LDAP is...<br>
<br>
Thanks for the help...<br>
<br>
Mihajlo Joksimovic<br>
<br>
Am 09/07/2012 04:41 PM, schrieb Fajar A. Nugraha:
<blockquote
cite="mid:CAG1y0seYhNYbBvghNA1tp1trOcP5Rnyc8B1WeEqMKF2zDFwiHA@mail.gmail.com"
type="cite">
<pre wrap="">On Fri, Sep 7, 2012 at 8:37 PM, Mihajlo Joksimovic
<a class="moz-txt-link-rfc2396E" href="mailto:mihajlo.joksimovic@adfinis-sygroup.ch"><mihajlo.joksimovic@adfinis-sygroup.ch></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">ii freeradius
2.0.4+dfsg-6.61.201011221519 a high-performance and highly
configurable R
it's version 2.0.4.
</pre>
</blockquote>
<pre wrap="">
Upgrade.
</pre>
<blockquote type="cite">
<pre wrap="">
well i deactivated inner tunnel and configured everything in default. is
that wrong?
</pre>
</blockquote>
<pre wrap="">
If you want to use EAP, it's VERY wrong.
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Adfinis SyGroup AG
Mihajlo Joksimovic, System Engineer
Güterstrasse 86 | CH-4053 Basel
Tel. 061 333 80 33</pre>
</body>
</html>