Hello,
We have a Solaris 8 box running freeradius 1.0.4. This machine is being
upgraded to a bigger beast running Solaris 10. The problem I am having
has occurred on all versions of freeradius I have tested on the new
Solaris 10 machine - including 1.0.4, 1.0.5, and 1.1.1.
The error, when running radiusd -X is this:
auth: Failed to validate the user.
WARNING: Unprintable characters in the password. ? Double-check the
shared secret on the server and the NAS!
Facts:
1. We are connecting the same NAS box to the new machine and getting the
same error.
2. We are using the same exact configuration files (and obviously the
same secret.)
3. The NAS box is a Cisco Catalyst 3450 (24 DC Powered) Protocol 1645,
IOS 12.1[13]EA1C.
4. I have verified that the same configuration file with the same secret
is being read, and that the secret on the NAS box stays the same when
connecting to both hosts.
5. I am sending no extra options to ./configure at compile time.
I thank you so much for any leads anyone can give me into the cause of
this.
Here is the entire output:
bash-3.00# /usr/local/sbin/radiusd -X -p 1645
Ignoring deprecated command-line option -pStarting - reading
configuration files ...
reread_config: reading radiusd.conf
Config: including file: /usr/local/etc/raddb/proxy.conf
Config: including file: /usr/local/etc/raddb/clients.conf
Config: including file: /usr/local/etc/raddb/snmp.conf
Config: including file: /usr/local/etc/raddb/sql.conf
main: prefix = "/usr/local"
main: localstatedir = "/var"
main: logdir = "/var/log/radius"
main: libdir = "/usr/local/lib"
main: radacctdir = "/var/log/radius/radacct"
main: hostname_lookups = no
main: max_request_time = 30
main: cleanup_delay = 5
main: max_requests = 1024
main: delete_blocked_requests = 0
main: port = 1645
main: allow_core_dumps = no
main: log_stripped_names = no
main: log_file = "/var/log/radius/radius.log"
main: log_auth = no
main: log_auth_badpass = no
main: log_auth_goodpass = no
main: pidfile = "/var/run/radiusd.pid"
main: user = "root"
main: group = "root"
main: usercollide = no
main: lower_user = "no"
main: lower_pass = "no"
main: nospace_user = "no"
main: nospace_pass = "no"
main: checkrad = "/usr/local/sbin/checkrad"
main: proxy_requests = yes
proxy: retry_delay = 5
proxy: retry_count = 3
proxy: synchronous = no
proxy: default_fallback = yes
proxy: dead_time = 120
proxy: post_proxy_authorize = yes
proxy: wake_all_if_all_dead = no
security: max_attributes = 200
security: reject_delay = 1
security: status_server = no
main: debug_level = 0
read_config_files: reading dictionary
read_config_files: reading naslist
Using deprecated naslist file. Support for this will go away soon.
read_config_files: reading clients
read_config_files: reading realms
Using deprecated realms file. Support for this will go away soon.
radiusd: entering modules setup
Module: Library search path is /usr/local/lib
Module: Loaded System
unix: cache = yes
unix: passwd = "/etc/passwd"
unix: shadow = "/etc/shadow"
unix: group = "/etc/group"
unix: radwtmp = "/var/log/radius/radwtmp"
unix: usegroup = no
unix: cache_reload = 300
HASH: Reinitializing hash structures and lists for caching...
HASH: user root found in hashtable bucket 11726
HASH: user daemon found in hashtable bucket 11668
HASH: user bin found in hashtable bucket 86651
HASH: user sys found in hashtable bucket 64201
HASH: user adm found in hashtable bucket 26466
HASH: user lp found in hashtable bucket 54068
HASH: user uucp found in hashtable bucket 38541
HASH: user nuucp found in hashtable bucket 74587
HASH: user smmsp found in hashtable bucket 13600
HASH: user listen found in hashtable bucket 49327
HASH: user gdm found in hashtable bucket 50360
HASH: user webservd found in hashtable bucket 39570
HASH: user nobody found in hashtable bucket 99723
HASH: user noaccess found in hashtable bucket 80609
HASH: user nobody4 found in hashtable bucket 84789
HASH: user c927693 found in hashtable bucket 51401
HASH: Stored 16 entries from /etc/passwd
HASH: Stored 21 entries from /etc/group
Module: Instantiated unix (unix)
Module: Loaded preprocess
preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups"
preprocess: hints = "/usr/local/etc/raddb/hints"
preprocess: with_ascend_hack = no
preprocess: ascend_channels_per_line = 23
preprocess: with_ntdomain_hack = no
preprocess: with_specialix_jetstream_hack = no
preprocess: with_cisco_vsa_hack = no
Module: Instantiated preprocess (preprocess)
Module: Loaded realm
realm: format = "suffix"
realm: delimiter = "@"
realm: ignore_default = no
realm: ignore_null = no
Module: Instantiated realm (suffix)
Module: Loaded files
files: usersfile = "/usr/local/etc/raddb/users"
files: acctusersfile = "/usr/local/etc/raddb/acct_users"
files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users"
files: compat = "no"
Module: Instantiated files (files)
Module: Loaded detail
detail: detailfile =
"/var/log/radius/radacct/%{Client-IP-Address}/detail"
detail: detailperm = 384
detail: dirperm = 493
detail: locking = no
Module: Instantiated detail (detail)
Module: Loaded radutmp
radutmp: filename = "/var/log/radius/radutmp"
radutmp: username = "%{User-Name}"
radutmp: case_sensitive = yes
radutmp: check_with_nas = yes
radutmp: perm = 384
radutmp: callerid = yes
Module: Instantiated radutmp (radutmp)
Listening on authentication *:1645
Listening on accounting *:1646
Listening on proxy *:1647
Ready to process requests.
rad_recv: Access-Request packet from host 144.133.145.11:1812, id=164,
length=82
NAS-IP-Address = 144.133.145.11
NAS-Port = 2
NAS-Port-Type = Virtual
User-Name = "c927693"
Calling-Station-Id = "144.133.188.238"
User-Password = "TI.\331\255\254Z3\036\247sj\262\274[\222"
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
Invalid operator for item Prefix: reverting to '=='
Invalid operator for item Prefix: reverting to '=='
Invalid operator for item Prefix: reverting to '=='
Invalid operator for item Prefix: reverting to '=='
Invalid operator for item Suffix: reverting to '=='
Invalid operator for item Suffix: reverting to '=='
Invalid operator for item Suffix: reverting to '=='
modcall[authorize]: module "preprocess" returns ok for request 0
rlm_realm: No '@' in User-Name = "c927693", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 0
HASH: user c927693 found in hashtable bucket 51401
users: Matched entry DEFAULT at line 40
modcall[authorize]: module "files" returns ok for request 0
modcall: group authorize returns ok for request 0
rad_check_password: Found Auth-Type System
auth: type "System"
Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 0
HASH: user c927693 found in hashtable bucket 51401
modcall[authenticate]: module "unix" returns reject for request 0
modcall: group authenticate returns reject for request 0
auth: Failed to validate the user.
WARNING: Unprintable characters in the password. ? Double-check the
shared secret on the server and the NAS!
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 164 to 144.133.145.11:1812
Waking up in 4 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 164 with timestamp 44a38917
Nothing to do. Sleeping until we see a request.
rad_recv: Access-Request packet from host 144.133.145.11:1812, id=165,
length=82
NAS-IP-Address = 144.133.145.11
NAS-Port = 2
NAS-Port-Type = Virtual
User-Name = "c927693"
Calling-Station-Id = "144.133.188.238"
User-Password = "\036\000\247\352!m\001\251\3149\220HZKqP"
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 1
Invalid operator for item Prefix: reverting to '=='
Invalid operator for item Prefix: reverting to '=='
Invalid operator for item Prefix: reverting to '=='
Invalid operator for item Prefix: reverting to '=='
Invalid operator for item Suffix: reverting to '=='
Invalid operator for item Suffix: reverting to '=='
Invalid operator for item Suffix: reverting to '=='
modcall[authorize]: module "preprocess" returns ok for request 1
rlm_realm: No '@' in User-Name = "c927693", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 1
HASH: user c927693 found in hashtable bucket 51401
users: Matched entry DEFAULT at line 40
modcall[authorize]: module "files" returns ok for request 1
modcall: group authorize returns ok for request 1
rad_check_password: Found Auth-Type System
auth: type "System"
Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 1
HASH: user c927693 found in hashtable bucket 51401
modcall[authenticate]: module "unix" returns reject for request 1
modcall: group authenticate returns reject for request 1
auth: Failed to validate the user.
WARNING: Unprintable characters in the password. ? Double-check the
shared secret on the server and the NAS!
Delaying request 1 for 1 seconds
Finished request 1
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 165 to 144.133.145.11:1812
Waking up in 4 seconds...
--- Walking the entire request list ---
Cleaning up request 1 ID 165 with timestamp 44a389a7
Nothing to do. Sleeping until we see a request.
rad_recv: Access-Request packet from host 144.133.145.11:1812, id=166,
length=79
NAS-IP-Address = 144.133.145.11
NAS-Port = 2
NAS-Port-Type = Virtual
User-Name = "fred"
Calling-Station-Id = "144.133.188.238"
User-Password = "8y\356\005\243\251\252W\234\rT\220\262{\347?"
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 2
Invalid operator for item Prefix: reverting to '=='
Invalid operator for item Prefix: reverting to '=='
Invalid operator for item Prefix: reverting to '=='
Invalid operator for item Prefix: reverting to '=='
Invalid operator for item Suffix: reverting to '=='
Invalid operator for item Suffix: reverting to '=='
Invalid operator for item Suffix: reverting to '=='
modcall[authorize]: module "preprocess" returns ok for request 2
rlm_realm: No '@' in User-Name = "fred", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 2
users: Matched entry DEFAULT at line 40
modcall[authorize]: module "files" returns ok for request 2
modcall: group authorize returns ok for request 2
rad_check_password: Found Auth-Type System
auth: type "System"
Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 2
modcall[authenticate]: module "unix" returns notfound for request 2
modcall: group authenticate returns notfound for request 2
auth: Failed to validate the user.
WARNING: Unprintable characters in the password. ? Double-check the
shared secret on the server and the NAS!
Delaying request 2 for 1 seconds
Finished request 2
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 166 to 144.133.145.11:1812
Waking up in 4 seconds...
--- Walking the entire request list ---
Cleaning up request 2 ID 166 with timestamp 44a389df
Nothing to do. Sleeping until we see a request.
^C
bash-3.00#
