- Freeradius-Users - lists.freeradius.org

custom script for access
by d.tom.schmitt＠L-3com.com 26 Oct '09

26 Oct '09

I have an Asterisk (PBX-in-a-Flash) system running freeRADIUS version 1.1.3 i686-redhat-linux-gnu. Running on CentOS 5.2 - soon to be upgraded to 5.3. I need to setup an account on the freeradius server that can be accessed by another system as a radius server - not the problem. I then need to have freeradius call a script that checks additional credentials before allowing the user to be accepted or rejected access to the system they are on. This check can take a few seconds to complete. This could be similar to someone using an RSA or other token - but it is not a token. So basically I need to have freeradius after verifying login/password, call the script and depending upon the outcome either allow or deny the user access. The script for testing could be as simple as: If minute is EVEN = allow in and say an appropriate message If minute is ODD = do not allow access and say an appropriate message I have read most of the .conf files but am still confused. Is there a HOW-TO that shows a simple example? Thanks, Tom Schmitt Senior IT Staff - R&D Phone (801) 594-3030

1 0

Segmentation fault in rlm_sql_postgresql
by Olivn 26 Oct '09

26 Oct '09

Hi all radiusd crashes when Postgresql returns PGRES_FATAL_ERROR. Olivier -------- environment ----------- OS: Centos 5.3 Freeradius : 2.1.7 (also occurred in 2.1.6) packages are from http://people.redhat.com/jdennis/freeradius-rhel-centos/i386/ Postgresql : 8.1 <http://people.redhat.com/jdennis/freeradius-rhel-centos/i386/freeradius2-2.…> ------- debug output ----------- radius -X output: ... } rlm_sql (sql_secondary): Driver rlm_sql_postgresql (module rlm_sql_postgresql) loaded and linked rlm_sql (sql_secondary): Attempting to connect to radius@100.100.100.131:5432/radius rlm_sql (sql_secondary): starting 0 rlm_sql (sql_secondary): Attempting to connect rlm_sql_postgresql #0 rlm_sql (sql_secondary): Connected new DB handle, #0 rlm_sql (sql_secondary): starting 1 rlm_sql (sql_secondary): Attempting to connect rlm_sql_postgresql #1 rlm_sql (sql_secondary): Connected new DB handle, #1 rlm_sql (sql_secondary): starting 2 rlm_sql (sql_secondary): Attempting to connect rlm_sql_postgresql #2 rlm_sql (sql_secondary): Connected new DB handle, #2 rlm_sql (sql_secondary): starting 3 rlm_sql (sql_secondary): Attempting to connect rlm_sql_postgresql #3 rlm_sql (sql_secondary): Connected new DB handle, #3 rlm_sql (sql_secondary): starting 4 rlm_sql (sql_secondary): Attempting to connect rlm_sql_postgresql #4 rlm_sql (sql_secondary): Connected new DB handle, #4 Module: Checking post-proxy {...} for more modules to load } # modules } # server radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 1812 } Listening on authentication address * port 1812 Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 100.100.100.2 port 12048, id=38, length=116 NAS-Identifier = "XXXXXX" User-Name = "U0123456" User-Password = "XXXXXXX" NAS-IP-Address = 100.100.100.2 NAS-Port = 0 Acct-Session-Id = "XXXXXXX(ZZZ)\"Sun Oct 25 10:16:45 2009\"HcSrdUv5" +- entering group authorize {...} [suffix] No '@' in User-Name = "U0123456", looking up realm NULL [suffix] Found realm "NULL" [suffix] Adding Stripped-User-Name = "U0123456" [suffix] Adding Realm = "NULL" [suffix] Proxying request from user U0123456 to realm NULL [suffix] Preparing to proxy authentication request to realm "NULL" ++[suffix] returns updated ++- entering policy redundant {...} [sql_primary] expand: %{User-Name} -> U0123456 [sql_primary] sql_set_user escaped user --> 'U0123456' rlm_sql (sql_primary): Reserving sql socket id: 4 [sql_primary] expand: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribud rlm_sql_postgresql: Status: PGRES_FATAL_ERROR rlm_sql_postgresql: Error (null) Program received signal SIGSEGV, Segmentation fault. 0x00c6040a in strcmp () from /lib/libc.so.6 (gdb) info threads * 1 Thread 0xb7fcead0 (LWP 30560) 0x00c6040a in strcmp () from /lib/libc.so.6 (gdb) thread apply all bt full Thread 1 (Thread 0xb7fcead0 (LWP 30560)): #0 0x00c6040a in strcmp () from /lib/libc.so.6 No symbol table info available. #1 0x006c790f in sql_query (sqlsocket=0x867a968, config=0x8657cf8, querystr=0xbfc78fdc "SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = 'U0123456' ORDER BY id") at sql_postgresql.c:118 status =<value optimized out> pg_sock =<value optimized out> numfields =<value optimized out> errorcode = 0x0 errormsg =<value optimized out> #2 0x008911e2 in rlm_sql_select_query (sqlsocket=0x867a968, inst=0x8657cc0, query=0xbfc78fdc "SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = 'U0123456' ORDER BY id") at sql.c:559 ret =<value optimized out> #3 0x00891782 in sql_getvpdata (inst=0x8657cc0, sqlsocket=0x867a968, pair=0xbfc78fd8, query=0xbfc78fdc "SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = 'U0123456' ORDER BY id") at sql.c:606 row =<value optimized out> rows = 0 #4 0x0088efae in rlm_sql_authorize (instance=0x8657cc0, request=0x86b2048) at rlm_sql.c:1007 check_tmp = (VALUE_PAIR *) 0x0 reply_tmp = (VALUE_PAIR *) 0x0 user_profile =<value optimized out> found =<value optimized out> dofallthrough = 1 rows =<value optimized out> sqlsocket = (SQLSOCK *) 0x867a968 inst =<value optimized out> querystr = "SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = 'U0123456' ORDER BY id\000o/'\006?o/'X?o/'?\017?\000\b\222o/'|\220o/'h\221o/'5b?\000|\220o/'A?\. sqlusername = "U0123456", '\0'<repeats 38 times>, " ?o/'(xe\b??\210\000\214+\000\000\000\000\000u<?o/'X?o/'_N\006O\t\000\000\000\200?\210\000H?\210\000^N\006O\000\000\000\000\r\. profileusername = "@?\021\000?*k\b?*k\b\000i$q0%Z\000@rd\b\000\000\000\000\210?o/'&\205Y\000?*k\b?\202W\b?*\000\000\001\000\000\000\230,X\000\200\n\022\000?(k\b?\202W\b?*k\b?. #5 0x08062dfe in modcall (component=1, c=0x8657570, request=0x86b2048) at modcall.c:292 myresult = 1 stack = {pointer = -1, priority = {0, 4, 0, -1077435628, 13600512, 140868088, 0, 0, 2, 0, 0, 12952177, -1077435732, 140861472, 140861480, 140861476, -1208162612, -1077435192, 140867624, 0, -1208147968, 12509120, 12508320, 140861464, -1077435560, 12509760, 12455465, 12572564, 1172048, 12936180, 12952177, 20}, result = {6, 8, 6, 12940957, -1077435604, -1077435316, -1077435061, -1077435032, 13832180, -1077435316, -1077435604, -1077435368, 13460021, -1077435604, 134726134, -1077435032, -1077435316, 0, -1077435444, 255, -72515583, -1077435316, -1077435316, -1077435316, -1077435316, -1077435289, -1077435061, -1077435316, -1077435061, 0, 0, 0}, children = {0x8657570, 0x86575c0, 0x8683280, 0x4, 0xbedfc0, 0x0, 0x0, 0xbfc7a414, 0xbfc7a33c, 0xbe0e29, 0xd32140, 0x0, 0x8656fc8, 0x101, 0xffffffff, 0xd832ca, 0xd18918, 0x86577a8, 0x8655dc8, 0xbfc7a3c8, 0xd832ca, 0x8656fc8, 0x101, 0xd80f9b, 0xd8575c, 0xd30940, 0x0, 0xbfc7a3f8, 0xd81470, 0x0, 0xd30ff4, 0x71246900}, start = {0x8085e9c, 0x8657518, 0x8683280, 0xbfc7a418, 0x805d2ae, 0x1, 0x80786f1, 0xbfc7a428, 0x0, 0x0, 0xc5769d, 0xbfc7a448, 0x8085e9c, 0xbfc7a428, 0x8085e9c, 0xbfc7a558, 0x80519bd, 0x1, 0x80786f1, 0xbfc7a44c, 0x100, 0x807c1f6, 0xbfc7a568, 0xbfc7a8b8, 0x0, 0xc5a271, 0xff, 0xbfc7a568, 0x74736e49, 0x69746e61, 0x6e697461, 0x71732067}} parent = (modcallable *) 0x86575c0 child = (modcallable *) 0x8683280 if_taken = 0 was_if = 0 #6 0x0805fa65 in indexed_modcall (comp=1, idx=0, request=0x86b2048) at modules.c:691 rcode =<value optimized out> list = (modcallable *) 0x8657570 server =<value optimized out> #7 0x0805fe0c in module_authorize (autz_type=0, request=0x86b2048) at modules.c:1453 No locals. #8 0x0804e678 in rad_authenticate (request=0x86b2048) at auth.c:565 namepair =<value optimized out> check_item =<value optimized out> auth_item = (VALUE_PAIR *) 0x86b23e0 module_msg =<value optimized out> tmp =<value optimized out> result = 12 autz_retry = 0 '\0' autz_type = 7112497 #9 0x0806e4d5 in radius_handle_request (request=0x86b2048, fun=0x804e550 <rad_authenticate>) at event.c:3693 No locals. #10 0x08065a5c in thread_pool_addrequest (request=0x86b2048, fun=0x804e550<rad_authenticate>) at threads.c:841 now = 1256462126 #11 0x0806aef2 in event_socket_handler (xel=0x86ae3e0, fd=18, ctx=0x86b1e58) at event.c:3317 fun = (RAD_REQUEST_FUNP) 0x804e550<rad_authenticate> request = (REQUEST *) 0x86b2048 #12 0x0059ad15 in fr_event_loop (el=<value optimized out>) at event.c:400 ef = (fr_event_fd_t *) 0x86ae490 i =<value optimized out> rcode = 1 when = Could not find the frame base for "fr_event_loop". -------------sql_postgresql.c code -------------------- freeradius-server-2.1.7/src/modules/rlm_sql/drivers/rlm_sql_postgresql/sql_postgresql.c static int check_fatal_error (char *errorcode) { int x = 0; /* Check the error code to see if we should reconnect or not Error Code table taken from http://www.postgresql.org/docs/8.1/interactive/errcodes-appendix.html */ while(errorcodes[x].errorcode != NULL){ line 118--> if (strcmp(errorcodes[x].errorcode, errorcode) == 0){ radlog(L_DBG, "rlm_sql_postgresql: Postgresql Fatal Error: [%s: %s] Occurred!!", errorcode, errorcodes[x]. meaning); if (errorcodes[x].shouldreconnect == 1) return SQL_DOWN; else return -1; } x++; } radlog(L_DBG, "rlm_sql_postgresql: Postgresql Fatal Error: [%s] Occurred!!", errorcode); /* We don't seem to have a matching error class/code */ return -1; }

1 0

Failed to initialize type tls
by Francisco Javier Valdera Garcia 26 Oct '09

26 Oct '09

Hi, I'm installing a 2.1.7 radius server, using a configuration developed in a test environment. The configuration worked great in th test environment, but I'm finding some problems in the production environment. The output from radiusd -CX is as follows: Module: Instantiating eap eap { default_eap_type = "ttls" timer_expire = 60 ignore_unknown_eap_types = yes cisco_accounting_username_bug = yes max_sessions = 2048 } Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/etc/raddb/certs/servicios.key" certificate_file = "/etc/raddb/certs/servicios.pem" CA_file = "/etc/raddb/certs/ca_globalsign.pem" dh_file = "/etc/raddb/certs/dh" random_file = "/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no } rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) rlm_eap_tls: Error loading randomness rlm_eap: Failed to initialize type tls /etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /etc/raddb/sites-enabled/default[293]: Failed to find module "eap". /etc/raddb/sites-enabled/default[240]: Errors parsing authenticate section. Can anyone help me? Thanks a lot. Francisco Javier Valdera.

2 5

rlm_sql: usergroup lookup if User-Profile is defined
by Bjørn Mork 25 Oct '09

25 Oct '09

Hello, I am wondering if I'm the only one who finds the following default behaviour a bit confusing: Given a user defined like this: user1 Cleartext-Password := "foo", User-Profile := "profile1" I would expect "profile1" to always be looked up in the the usergroup table for this user. However, this won't happen if "user1" is defined in that table without Fall-Through. rlm_sql will lookup "user1" first and only lookup "profile1" if either "user1" is not found or Fall-Through is set vy the "user1" groups. Bjørn

1 1

Re: dialup-admin problem
by liran tal 25 Oct '09

25 Oct '09

There is also daloRADIUS available which is a web platform to manage freeradius based on mysql. On Mon, Sep 21, 2009 at 5:16 PM, Franz X. Maier <franz.x.maier(a)inode.at>wrote: > I have the same problem: installed freeradius on Suse Linux 11.2 and got > the dialupadmin partially working, but the web-interface only shows the > dialup-admin Page with no main menu on the left side – only white. I get no > errors in the logs, but I also had to remove the two lines > > > > >> # Scott Added for freeradius dialup-admin > > >> #LoadModule php4_module libexec/libphp4.so > > >> #AddModule mod_php4.c > > > > or it didn’t work at all. > > > > Any help? > > > > Franz X. Maier > > IT-Berater > > Promenadegasse 11-13/2/1 > > 1170 Wien > > Tel.: 01-8904222 > > Mobil: 0664-1004513 > > eMail: franz.x.maier(a)inode.at > > Mobile eMail: franzxmaier(a)mobileemail.vodafone.at > > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0

Status X User
by Sergio Belkin 24 Oct '09

24 Oct '09

Hi, Is there a way to get the las time that user got Accept-Accept and Accept-Reject, of course I can parse log files but I wonder if there a radius tool that can do it. Thanks in advance -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 3

cannot upgrade 2.1.6 to 2.1.7
by kachin Agarwal 23 Oct '09

23 Oct '09

Hi, If i dont ve pthread.h in my system.. then how did the 2.1.6 build work.? but i remove the line callback=wait_for_child_to_die; there is no error. can i remove this line and build or is there any other solution to fix it Thanx & Regards, kachin Keep up with people you care about with Yahoo! India Mail. Learn how. http://in.overview.mail.yahoo.com/connectmore

2 1

cannot upgrade 2.1.6 to 2.1.7
by kachin Agarwal 22 Oct '09

22 Oct '09

Hi, i m trying to upgrade my radius server from 2.1.6 to 2.1.7 but when ever i try to make the build i m getting the following error xlat.c:548: warning: passing argument 3 of 'xlat_register' discards qualifiers from pointer target type xlat.c:557: warning: passing argument 3 of 'xlat_register' discards qualifiers from pointer target type xlat.c:569: warning: passing argument 3 of 'xlat_register' discards qualifiers from pointer target type xlat.c:577: warning: passing argument 3 of 'xlat_register' discards qualifiers from pointer target type xlat.c:582: warning: passing argument 3 of 'xlat_register' discards qualifiers from pointer target type event.c: In function 'wait_a_bit': event.c:1166: warning: implicit declaration of function 'pthread_equal' event.c:1177: error: 'wait_for_child_to_die' undeclared (first use in this function) event.c:1177: error: (Each undeclared identifier is reported only once event.c:1177: error: for each function it appears in.) event.c: In function 'radius_event_init': event.c:3441: warning: unused variable 'attr' make[5]: *** [event.lo] Error 1 make[4]: *** [common] Error 2 make[3]: *** [all] Error 2 make[2]: *** [common] Error 2 make[1]: *** [all] Error 2 make: *** [*/*/*/*/*/*/freeradius-server-2.1.7/src/main/radiusd] Error 2 plz help me. where should i declare it?? Thanx & Regards, Kachin Try the new Yahoo! India Homepage. Click here. http://in.yahoo.com/trynew

3 2

FreeRADIUS + Postgresql dies unexpectedly
by Duarte Fonseca 22 Oct '09

22 Oct '09

Hi, I've got a freeRadius (v2.1.7) install running on CentOs using postgresql to store accounting data and have noticed that occasionally freeRadius seems to die unexpectedly. After some time investigating this and going over the logs I can now reproduce this behavior easily by following these steps: 1 - In my sql configuration file (/etc/raddb/postgresql.conf) I specify server = "localhost" (freeRADIUS connects to the database through TCP/IP) 2 - Restart radiusd 3 - Use radclient to send several accounting requests without an Acct-session-Time attribute (radclient -p 200 -f 1.txt 10.1.60.141:1813 acct secret) After a few requests radiusd dies. If i change my sql configuration file (/etc/raddb/postgresql.conf) so server = "" (freeRADIUS connects to DB using Unix-domain socket) radiusd doesn't die. If i run radiusd in debug mode it doesn't die. If i send accounting requests with the Acct-Session-Time set to a positive integer radiusd doesn't die. The following are extracts from the freeRADIUS log and Postgresql log during a test where the radiusd dies extract from radius.log # cat /var/log/radius/radius.log Thu Oct 22 16:20:30 2009 : Info: rlm_sql (sql): Driver rlm_sql_postgresql (module rlm_sql_postgresql) loaded and linked Thu Oct 22 16:20:30 2009 : Info: rlm_sql (sql): Attempting to connect to postgres@localhost:/gapdb Thu Oct 22 16:20:30 2009 : Info: Loaded virtual server <default> Thu Oct 22 16:20:30 2009 : Info: Ready to process requests. Thu Oct 22 16:20:51 2009 : Error: [sql] stop packet with zero session length. [user '0017f24eff31', nas '172.20.200.66'] Thu Oct 22 16:20:51 2009 : Error: [sql] stop packet with zero session length. [user '0012f0aac218', nas '172.20.200.66'] Thu Oct 22 16:20:55 2009 : Error: [sql] stop packet with zero session length. [user 'admin', nas '172.20.200.226'] Thu Oct 22 16:20:55 2009 : Error: [sql] stop packet with zero session length. [user 'JoePublic7', nas '172.20.200.226'] Thu Oct 22 16:20:55 2009 : Error: [sql] stop packet with zero session length. [user 'admin', nas '172.20.200.226'] Thu Oct 22 16:20:55 2009 : Error: [sql] stop packet with zero session length. [user 'admin', nas '172.20.200.226'] extract from postgresql log <2009-10-22 16:20:55.095 BST> LOG: SSL error: sslv3 alert bad record mac <2009-10-22 16:20:55.095 BST> LOG: could not receive data from client: Connection reset by peer <2009-10-22 16:20:55.095 BST> LOG: unexpected EOF on client connection <2009-10-22 16:20:55.097 BST> LOG: could not receive data from client: Connection reset by peer <2009-10-22 16:20:55.097 BST> LOG: unexpected EOF on client connection <2009-10-22 16:20:55.097 BST> LOG: could not receive data from client: Connection reset by peer <2009-10-22 16:20:55.097 BST> LOG: unexpected EOF on client connection <2009-10-22 16:20:55.098 BST> LOG: could not receive data from client: Connection reset by peer <2009-10-22 16:20:55.098 BST> LOG: unexpected EOF on client connection <2009-10-22 16:20:55.098 BST> LOG: could not receive data from client: Connection reset by peer <2009-10-22 16:20:55.098 BST> LOG: could not receive data from client: Connection reset by peer <2009-10-22 16:20:55.098 BST> LOG: unexpected EOF on client connection <2009-10-22 16:20:55.098 BST> LOG: unexpected EOF on client connection <2009-10-22 16:20:55.103 BST> LOG: could not receive data from client: Connection reset by peer <2009-10-22 16:20:55.103 BST> LOG: unexpected EOF on client connection <2009-10-22 16:20:55.103 BST> LOG: could not receive data from client: Connection reset by peer <2009-10-22 16:20:55.103 BST> LOG: unexpected EOF on client connection <2009-10-22 16:20:55.103 BST> LOG: could not receive data from client: Connection reset by peer <2009-10-22 16:20:55.103 BST> LOG: unexpected EOF on client connection <2009-10-22 16:20:55.103 BST> LOG: could not receive data from client: Connection reset by peer <2009-10-22 16:20:55.104 BST> LOG: unexpected EOF on client connection <2009-10-22 16:20:55.105 BST> LOG: could not receive data from client: Connection reset by peer <2009-10-22 16:20:55.105 BST> LOG: unexpected EOF on client connection <2009-10-22 16:20:55.111 BST> LOG: could not receive data from client: Connection reset by peer <2009-10-22 16:20:55.111 BST> LOG: unexpected EOF on client connection # radiusd -v radiusd: FreeRADIUS Version 2.1.7, for host i386-redhat-linux-gnu, built on Sep 18 2009 at 10:59:17 How would you guys advise me to proceed with resolving this issue, is it a bug, is it something wrong in my configuration? Thank you, Duarte -- Duarte Fonseca ------------------------------ Mobile: +44 753 4262674 E-mail: fonseca.duarte(a)gmail.com

2 1

mysql freeradius "rlm_pap: empty password supplied"
by serre 22 Oct '09

22 Oct '09

Hello, After some hours of googling my problem, i come. I hope somebody will be able to help me! I set up a mac based authentication, with users in mysql database. It is working properly when users are difined in the users file, but did not work with empty Cleartext-Password in the database. Any idea? It is the only problem I've found when following this EXELLENT howto page: http://wiki.freeradius.org/SQL_HOWTO Thanks in advance I show you to of my test users, one with password, the other without (hope i'm clear): Sory, this post post is bigest that wath i was think. Mysql tables: mysql> select * from radcheck; +----+----------+--------------------+----+----------+ | id | username | attribute | op | value | +----+----------+--------------------+----+----------+ | 7 | seb | Cleartext-Password | := | password | | 8 | chris | Cleartext-Password | := | | mysql> select * from radreply -> ; +----+----------+-----------+----+--------+ | id | username | attribute | op | value | +----+----------+-----------+----+--------+ | 5 | seb | Auth-Type | := | Accept | | 6 | chris | Auth-Type | := | Accept | RADTEST whith user seb: radius:/etc/freeradius# radtest seb password localhost 1812 testing123 Sending Access-Request of id 70 to 127.0.0.1 port 1812 User-Name = "seb" User-Password = "password" NAS-IP-Address = 172.18.100.19 NAS-Port = 1812 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=70, length=20 DEBUG OUTPUT: ++[sql] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated rad_check_password: Found Auth-Type auth: type "PAP" +- entering group PAP rlm_pap: login attempt with password "password" rlm_pap: Using clear text password "password" rlm_pap: User authenticated successfully ++[pap] returns ok Login OK: [seb/password] (from client localhost port 1812) +- entering group post-auth RADTEST WITH user tof: radius:/etc/freeradius# radtest tof "" localhost 1812 testing123 Sending Access-Request of id 220 to 127.0.0.1 port 1812 User-Name = "tof" User-Password = "" NAS-IP-Address = 172.18.100.19 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=220, length=20 DEBUG OUTPUT: ++[sql] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated rad_check_password: Found Auth-Type auth: type "PAP" +- entering group PAP ++[pap] returns invalid auth: Failed to validate the user. Login incorrect (rlm_pap: empty password supplied): [tof/] (from client localhost port 1812) Found Post-Auth-Type Reject +- entering group REJECT expand: %{User-Name} -> tof attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated

1 1