<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-2">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="SK" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have problem with PAP autentification on freeradius-3.0.0, but on freeradius-2.2.1 everythink works correct. Could you please help me, thx.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Debug output for freeradius-3.0.0:<o:p></o:p></p>
<p class="MsoNormal">radiusd@tdrad1test:/storage/app/radius/raddb/auth-new$ /storage/app/radius/freeradius-3.0.0/sbin/radiusd -X -d /storage/app/radius/raddb/auth-new<o:p></o:p></p>
<p class="MsoNormal">radiusd: FreeRADIUS Version 3.0.0, for host x86_64-unknown-linux-gnu, built on May 14 2013 at 16:22:54<o:p></o:p></p>
<p class="MsoNormal">Copyright (C) 1999-2013 The FreeRADIUS server project and contributors.<o:p></o:p></p>
<p class="MsoNormal">There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A<o:p></o:p></p>
<p class="MsoNormal">PARTICULAR PURPOSE.<o:p></o:p></p>
<p class="MsoNormal">You may redistribute copies of FreeRADIUS under the terms of the<o:p></o:p></p>
<p class="MsoNormal">GNU General Public License.<o:p></o:p></p>
<p class="MsoNormal">For more information about these matters, see the file named COPYRIGHT.<o:p></o:p></p>
<p class="MsoNormal">Starting - reading configuration files ...<o:p></o:p></p>
<p class="MsoNormal">...<o:p></o:p></p>
<p class="MsoNormal">Listening on proxy address * port 0<o:p></o:p></p>
<p class="MsoNormal">Listening on auth address * port 1812 as server default<o:p></o:p></p>
<p class="MsoNormal">Listening on auth address * port 1645 as server default<o:p></o:p></p>
<p class="MsoNormal">Ready to process requests.<o:p></o:p></p>
<p class="MsoNormal">rad_recv: Access-Request packet from host 127.0.0.1 port 50633, id=15, length=115<o:p></o:p></p>
<p class="MsoNormal"> NAS-Port-Type = Virtual<o:p></o:p></p>
<p class="MsoNormal"> Service-Type = Framed-User<o:p></o:p></p>
<p class="MsoNormal"> Calling-Station-Id = "421905012405"<o:p></o:p></p>
<p class="MsoNormal"> Called-Station-Id = "l2tp.vps"<o:p></o:p></p>
<p class="MsoNormal"> Framed-Protocol = PPP<o:p></o:p></p>
<p class="MsoNormal"> User-Name = "l2tp@radiustest.sk"<o:p></o:p></p>
<p class="MsoNormal"> User-Password = "l2tp"<o:p></o:p></p>
<p class="MsoNormal"> Connect-Info = "8640000"<o:p></o:p></p>
<p class="MsoNormal"> NAS-IP-Address = 213.151.234.114<o:p></o:p></p>
<p class="MsoNormal">(0) # Executing section authorize from file /storage/app/radius/raddb/auth-new/sites-enabled/default<o:p></o:p></p>
<p class="MsoNormal">(0) group authorize {<o:p></o:p></p>
<p class="MsoNormal">(0) - entering group authorize {...}<o:p></o:p></p>
<p class="MsoNormal">(0) [chap] = noop<o:p></o:p></p>
<p class="MsoNormal">(0) suffix : Looking up realm "radiustest.sk" for User-Name = "l2tp@radiustest.sk"<o:p></o:p></p>
<p class="MsoNormal">(0) suffix : Found realm "DEFAULT"<o:p></o:p></p>
<p class="MsoNormal">(0) suffix : Adding Stripped-User-Name = "l2tp"<o:p></o:p></p>
<p class="MsoNormal">(0) suffix : Adding Realm = "DEFAULT"<o:p></o:p></p>
<p class="MsoNormal">(0) suffix : Authentication realm is LOCAL.<o:p></o:p></p>
<p class="MsoNormal">(0) [suffix] = ok<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair NAS-Port-Type = Virtual<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Service-Type = Framed-User<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Called-Station-Id = l2tp.vps<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Calling-Station-Id = 421905012405<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Framed-Protocol = PPP<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair User-Name = l2tp@radiustest.sk<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair User-Password = l2tp<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Connect-Info = 8640000<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Realm = DEFAULT<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Stripped-User-Name = l2tp<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair NAS-IP-Address = 213.151.234.114<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Current-Time = 1368711260<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Password-With-Header = {SSHA}cAgh2LCe5649EzEAbc+nAfIOvOyOJSmU+sKiPA==<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair VPDN_SERVICE_ID = User-GPRS-L2TP<o:p></o:p></p>
<p class="MsoNormal">(0) [perl] = ok<o:p></o:p></p>
<p class="MsoNormal">(0) [pap] = updated<o:p></o:p></p>
<p class="MsoNormal">(0) Found Auth-Type = PAP<o:p></o:p></p>
<p class="MsoNormal">(0) # Executing group from file /storage/app/radius/raddb/auth-new/sites-enabled/default<o:p></o:p></p>
<p class="MsoNormal">(0) group PAP {<o:p></o:p></p>
<p class="MsoNormal">(0) - entering group PAP {...}<o:p></o:p></p>
<p class="MsoNormal">(0) pap : login attempt with password "l2tp"<o:p></o:p></p>
<p class="MsoNormal">(0) pap : Using SSHA encryption.<o:p></o:p></p>
<p class="MsoNormal">(0) ERROR: pap : SSHA password check failed<o:p></o:p></p>
<p class="MsoNormal">(0) pap : Passwords don't match<o:p></o:p></p>
<p class="MsoNormal">(0) [pap] = reject<o:p></o:p></p>
<p class="MsoNormal">(0) Failed to authenticate the user.<o:p></o:p></p>
<p class="MsoNormal">(0) Login incorrect (pap: SSHA password check failed): [l2tp@radiustest.sk/l2tp] (from client localhost port 0 cli 421905012405)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Debug output for freeradius-2.2.1:<o:p></o:p></p>
<p class="MsoNormal">radiusd@tdrad1test:/storage/app/radius/raddb/auth$ /storage/app/radius/freeradius/sbin/radiusd -X -d /storage/app/radius/raddb/auth<o:p></o:p></p>
<p class="MsoNormal">radiusd: FreeRADIUS Version 2.2.1, for host x86_64-unknown-linux-gnu, built on May 2 2013 at 09:22:02<o:p></o:p></p>
<p class="MsoNormal">Copyright (C) 1999-2013 The FreeRADIUS server project and contributors.<o:p></o:p></p>
<p class="MsoNormal">There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A<o:p></o:p></p>
<p class="MsoNormal">PARTICULAR PURPOSE.<o:p></o:p></p>
<p class="MsoNormal">You may redistribute copies of FreeRADIUS under the terms of the<o:p></o:p></p>
<p class="MsoNormal">GNU General Public License.<o:p></o:p></p>
<p class="MsoNormal">For more information about these matters, see the file named COPYRIGHT.<o:p></o:p></p>
<p class="MsoNormal">Starting - reading configuration files ...<o:p></o:p></p>
<p class="MsoNormal">...<o:p></o:p></p>
<p class="MsoNormal">Listening on authentication address * port 1812<o:p></o:p></p>
<p class="MsoNormal">Listening on authentication address * port 1645<o:p></o:p></p>
<p class="MsoNormal">Listening on proxy address * port 37677<o:p></o:p></p>
<p class="MsoNormal">Listening on command file ../../log/radius/radius_auth.sock<o:p></o:p></p>
<p class="MsoNormal">Ready to process requests.<o:p></o:p></p>
<p class="MsoNormal">rad_recv: Access-Request packet from host 127.0.0.1 port 57436, id=196, length=115<o:p></o:p></p>
<p class="MsoNormal"> NAS-Port-Type = Virtual<o:p></o:p></p>
<p class="MsoNormal"> Service-Type = Framed-User<o:p></o:p></p>
<p class="MsoNormal"> Calling-Station-Id = "421905012405"<o:p></o:p></p>
<p class="MsoNormal"> Called-Station-Id = "l2tp.vps"<o:p></o:p></p>
<p class="MsoNormal"> Framed-Protocol = PPP<o:p></o:p></p>
<p class="MsoNormal"> User-Name = "l2tp@radiustest.sk"<o:p></o:p></p>
<p class="MsoNormal"> User-Password = "l2tp"<o:p></o:p></p>
<p class="MsoNormal"> Connect-Info = "8640000"<o:p></o:p></p>
<p class="MsoNormal"> NAS-IP-Address = 213.151.234.114<o:p></o:p></p>
<p class="MsoNormal"># Executing section authorize from file /storage/app/radius/raddb/auth/sites-enabled/default<o:p></o:p></p>
<p class="MsoNormal">+- entering group authorize {...}<o:p></o:p></p>
<p class="MsoNormal">++[preprocess] returns ok<o:p></o:p></p>
<p class="MsoNormal">++[chap] returns noop<o:p></o:p></p>
<p class="MsoNormal">[suffix] Looking up realm "radiustest.sk" for User-Name = "l2tp@radiustest.sk"<o:p></o:p></p>
<p class="MsoNormal">[suffix] Found realm "DEFAULT"<o:p></o:p></p>
<p class="MsoNormal">[suffix] Adding Stripped-User-Name = "l2tp"<o:p></o:p></p>
<p class="MsoNormal">[suffix] Adding Realm = "DEFAULT"<o:p></o:p></p>
<p class="MsoNormal">[suffix] Authentication realm is LOCAL.<o:p></o:p></p>
<p class="MsoNormal">++[suffix] returns ok<o:p></o:p></p>
<p class="MsoNormal">++[files] returns noop<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair NAS-Port-Type = Virtual<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Service-Type = Framed-User<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Called-Station-Id = l2tp.vps<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Calling-Station-Id = 421905012405<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Framed-Protocol = PPP<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair User-Name = l2tp@radiustest.sk<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair User-Password = l2tp<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Connect-Info = 8640000<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Realm = DEFAULT<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Stripped-User-Name = l2tp<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair NAS-IP-Address = 213.151.234.114<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Current-Time = 1368709398<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair Password-With-Header = {SSHA}cAgh2LCe5649EzEAbc+nAfIOvOyOJSmU+sKiPA==<o:p></o:p></p>
<p class="MsoNormal">rlm_perl: Added pair VPDN_SERVICE_ID = User-GPRS-L2TP<o:p></o:p></p>
<p class="MsoNormal">++[perl] returns ok<o:p></o:p></p>
<p class="MsoNormal">[pap] Normalizing SSHA1-Password from base64 encoding<o:p></o:p></p>
<p class="MsoNormal">++[pap] returns updated<o:p></o:p></p>
<p class="MsoNormal">Found Auth-Type = PAP<o:p></o:p></p>
<p class="MsoNormal"># Executing group from file /storage/app/radius/raddb/auth/sites-enabled/default<o:p></o:p></p>
<p class="MsoNormal">+- entering group PAP {...}<o:p></o:p></p>
<p class="MsoNormal">[pap] login attempt with password "l2tp"<o:p></o:p></p>
<p class="MsoNormal">[pap] Using SSHA encryption.<o:p></o:p></p>
<p class="MsoNormal">[pap] User authenticated successfully<o:p></o:p></p>
<p class="MsoNormal">++[pap] returns ok<o:p></o:p></p>
<p class="MsoNormal">Login OK: [l2tp@radiustest.sk/l2tp] (from client localhost port 0 cli 421905012405)<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:gray;mso-fareast-language:SK">Peter Balšianok<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:gray;mso-fareast-language:SK">Data Service Operation Coordinator,
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:gray;mso-fareast-language:SK">Voice & Data Services Operations<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";mso-fareast-language:SK"><span style="color:gray"><o:p></o:p></span></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:gray;mso-fareast-language:SK">Orange Slovensko, a. s.<br>
</span></b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:gray;mso-fareast-language:SK">Metodova 8, 821 08 Bratislava</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";mso-fareast-language:SK">
<br>
<span style="color:gray">tel: +421 908 00 2405 </span><br>
<span style="color:gray">mobil: +421 905 012 405 </span><br>
<span style="color:gray">e-mail: <a href="mailto:peter.balsianok@orange.sk"><span style="color:blue">peter.balsianok@orange.sk</span></a></span></span><span style="mso-fareast-language:SK"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>