<div dir="ltr">Hi Matthias,<div><br></div><div style>I don't use " " on my <a href="http://squid_rad_auth.conf.No">squid_rad_auth.conf.No</a> space on my scret.</div><div style>This is my squid_rad_auth.conf</div>
<div style><br></div><div style><div>server 192.168.2.3</div><div>secret testing123</div><div><br></div><div style><br></div><div style><br></div><div style>On my radcheck, i also using <span style="color:rgb(68,68,68);font-family:sans-serif;font-size:13px">Cleartext-Password on my racheck table</span></div>
<div><br></div><div>Any another clue ?<br></div><div><br></div><div style>Thanks</div></div><div style><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Apr 11, 2013 at 3:59 PM, Matthias Nagel <span dir="ltr"><<a href="mailto:matthias.h.nagel@gmail.com" target="_blank">matthias.h.nagel@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
<br>
did you do what the warning says and double checked the shared secret?<br>
<br>
As far as I see the squid_rad_auth.conf does not use quotation marks ("") to delimit the shared secret. Hence, perhaps you have trailing white spaces or something like that at the end of the line. Delete the line "secret" in squid_rad_auth.conf and type it again. I really mean to delete it in order to get rid of unprintable characters you might not see.<br>
<br>
Matthias<br>
<br>
Am Donnerstag 11 April 2013, 15:47:33 schrieb Iftakhul Anwar:<br>
<div><div class="h5">> Hi All,<br>
><br>
><br>
> I have successfully configure freeradius with mysql. i can radtest using<br>
> command :<br>
><br>
> sudo radtest alice password 192.168.2.3 1812 testing123<br>
> Sending Access-Request of id 187 to 192.168.2.3 port 1812<br>
> User-Name = "alice"<br>
> User-Password = "password"<br>
> NAS-IP-Address = 127.0.1.1<br>
> NAS-Port = 1812<br>
> Message-Authenticator = 0x00000000000000000000000000000000<br>
><br>
> rad_recv: Access-Accept packet from host 192.168.2.3 port 1812,<br>
> id=187, length=20<br>
><br>
> Now i try squid using radius authentication.<br>
><br>
> i followed step by step from :<br>
><br>
> <a href="http://safesrv.net/setup-squid-and-freeradius-on-centos-5/#comment-1043" target="_blank">http://safesrv.net/setup-squid-and-freeradius-on-centos-5/#comment-1043</a><br>
><br>
> But i got error message log on cache.log<br>
><br>
> Warning: Received invalid reply digest from server<br>
> Warning: Received invalid reply digest from server<br>
> Warning: Received invalid reply digest from server<br>
> squid_rad_auth: No response from RADIUS server<br>
><br>
> On radius -X debug there is error message like bellow :<br>
><br>
> Sending duplicate reply to client localprivate port 42003 – ID: 2<br>
> Sending Access-Reject of id 2 to 192.168.2.3 port 42003<br>
> Waking up in 2.9 seconds.<br>
> rad_recv: Access-Request packet from host 192.168.2.3 port 42003,<br>
> id=2, length=63<br>
> Sending duplicate reply to client localprivate port 42003 – ID: 2<br>
> Sending Access-Reject of id 2 to 192.168.2.3 port 42003<br>
> Waking up in 0.9 seconds.<br>
> Found Auth-Type = PAP<br>
> # Executing group from file /usr/local/etc/raddb/sites-enabled/default<br>
> +- entering group PAP {…}<br>
> [pap] login attempt with password “b9?I? +�(�Ч�Y�?”<br>
> [pap] Using clear text password “password”<br>
> [pap] Passwords don’t match<br>
> ++[pap] returns reject<br>
> Failed to authenticate the user.<br>
> WARNING: Unprintable characters in the password. Double-check the<br>
> shared secret on the server and the NAS!<br>
> Using Post-Auth-Type REJECT<br>
><br>
> What is that error ? How i can solve this<br>
><br>
> Thanks<br>
><br>
><br>
</div></div>----------------------------------------------------------------------<br>
Matthias Nagel<br>
Willy-Andreas-Allee 1, Zimmer 506<br>
76131 Karlsruhe<br>
<br>
Telefon: <a href="tel:%2B49-721-8695-1506" value="+4972186951506">+49-721-8695-1506</a><br>
Mobil: <a href="tel:%2B49-151-15998774" value="+4915115998774">+49-151-15998774</a><br>
e-Mail: <a href="mailto:matthias.h.nagel@gmail.com">matthias.h.nagel@gmail.com</a><br>
ICQ: 499797758<br>
Skype: nagmat84<br>
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a></blockquote></div><br><br clear="all"><div><br></div>-- <br><b>M.Iftakhul Anwar</b><br>
Meruvian Integrator<div><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">High Performance Computing / Cloud Computing (HPC/CC)</span><br><div><br><div style="text-align:left">
<br></div></div></div><div style="text-align:left"><div>Office Phone : 021-93586577</div><div>Mobile Phone : 085215331477</div><div>Blog : <a href="http://blog.mervpolis.com/roller/anwar" target="_blank">http://blog.mervpolis.com/roller/anwar</a></div>
<div>FB : <a href="http://www.facebook.com/troya.adromeda" target="_blank">http://www.facebook.com/troya.adromeda</a></div><div>Website : <a href="http://www.meruvian.org" target="_blank">www.meruvian.org</a></div>
<div><br></div></div>
</div>