<font><font face="verdana,sans-serif">Hi Alan,<br><br>To give some more debug, the below print is what I am getting on client side. Can you please look in to it?<br><br>"pam_radius_auth: packet from RADIUS server 192.168.100.19 fails verification: The shared secret is probably incorrect."<br>
<br>Regards,<br>Deep<br></font></font><br>
<br><br><div class="gmail_quote">On Mon, Oct 29, 2012 at 6:54 PM, Deep Shah <span dir="ltr"><<a href="mailto:deep.shah@strixsystems.com" target="_blank">deep.shah@strixsystems.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="gmail_quote"><font><font face="verdana,sans-serif">Hi,<div class="im"><br><br>I am trying to integrate linux-pam library and pam_radius_auth module to my busybox 1.17.3 version. I want to login through radius server on the host machine. I am using power pc as my board. I have configured the files of configuration as below. <br>
<br></div><b>client.conf</b> </font></font><font><font face="verdana,sans-serif"><b> (conf file)</b></font></font><br><font><font face="verdana,sans-serif"><div class="im">client 192.168.100.26 {<br> secret = testing123<br>
}<br>
<br></div><b>user (conf file)</b><div><div class="h5"><br>test Auth-Type := PAP, Cleartext-Password := "testpass"<br> Reply-Message = "Hello, %{User-Name}, you have successfully authenticated your login"<br>
<br>I am getting request on the server side but some error is coming on the server of password mismatch. Please find the below log for the same. <br><br>rad_recv: Access-Request packet from host 192.168.100.26 port 2970, id=106, length=69<br>
User-Name = "test"<br> User-Password = "C\2758\330E\345RZ\3707\227\001\265[\202H"<br> NAS-Identifier = "login"<br> NAS-Port = 1945<br> NAS-Port-Type = Virtual<br> Service-Type = Authenticate-Only<br>
# Executing section authorize from file /usr/local/etc/raddb//sites-enabled/default<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>++[digest] returns noop<br>
[suffix] No '@' in User-Name = "test", looking up realm NULL<br>[suffix] No such realm "NULL"<br>++[suffix] returns noop<br>[eap] No EAP-Message, not doing EAP<br>++[eap] returns noop<br>[files] users: Matched entry test at line 54<br>
[files] expand: Hello, %{User-Name}, you have successfully authenticated your login -> Hello, test, you have successfully authenticated your login<br>++[files] returns ok<br>++[expiration] returns noop<br>++[logintime] returns noop<br>
++[pap] returns updated<br>Found Auth-Type = PAP<br>!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br>!!! Replacing User-Password in config items with Cleartext-Password. !!!<br>!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br>
!!! Please update your configuration so that the "known good" !!!<br>!!! clear text password is in Cleartext-Password, and not in User-Password. !!!<br>!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br>
# Executing group from file /usr/local/etc/raddb//sites-enabled/default<br>+- entering group PAP {...}<br>[pap] login attempt with password "C�8�E�RZ�7??�[?H"<br>[pap] Using clear text password "testpass"<br>
[pap] Passwords don't match<br>++[pap] returns reject<br>Failed to authenticate the user.<br> WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS!<br>Using Post-Auth-Type Reject<br>
# Executing group from file /usr/local/etc/raddb//sites-enabled/default<br>+- entering group REJECT {...}<br>[attr_filter.access_reject] expand: %{User-Name} -> test<br>attr_filter: Matched entry DEFAULT at line 11<br>
++[attr_filter.access_reject] returns updated<br>Delaying reject of request 1 for 1 seconds<br>Going to the next request<br>Waking up in 0.9 seconds.<br>Sending delayed reject for request 1<br>Sending Access-Reject of id 106 to 192.168.100.26 port 2970<br>
Reply-Message = "Hello, test, you have successfully authenticated your login"<br>Waking up in 4.9 seconds.<br>Cleaning up request 1 ID 106 with timestamp +37<br>Ready to process requests.<br><br></div></div>
Can you please suggest what might be the issue is? I am getting password as not readable string when I have used the correct password in radius client and radius server. <br>
<br>Regards,<br>Deep<br></font></font><br>
</div><br>
</blockquote></div><br>