Hi guys! I got this error as you can see from the subject, as far as I have learned now this is due to me not having any sites-enabled, problem is I don't even know which ones to enable. So here's what I am actually trying to accomplish: Currently we have a freeradius in the version 1.1.13 running on Debian Etch and I want to port this to 2.1.18 on Lenny, which isn't that easy as the config files/structure have completely changed... The server does not ask for any user-names or passwords but simply authenticates/authorizes with certificates (which have to be "unlocked" with a password). I'd be very thankful if you could tell me what to enter to sites-enabled, further if you could look over my config to see if i got any other parameters set wrong: falcon:/etc/freeradius# freeradius -Xxx Mon Mar 8 15:02:43 2010 : Info: FreeRADIUS Version 2.1.8, for host i486-pc-linux-gnu, built on Jan 3 2010 at 15:51:52 Mon Mar 8 15:02:43 2010 : Info: Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. Mon Mar 8 15:02:43 2010 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Mon Mar 8 15:02:43 2010 : Info: PARTICULAR PURPOSE. Mon Mar 8 15:02:43 2010 : Info: You may redistribute copies of FreeRADIUS under the terms of the Mon Mar 8 15:02:43 2010 : Info: GNU General Public License v2. Mon Mar 8 15:02:43 2010 : Info: Starting - reading configuration files ... Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/radiusd.conf Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/proxy.conf Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/clients.conf Mon Mar 8 15:02:43 2010 : Debug: including files in directory /etc/freeradius/modules/ Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/files Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/digest Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/detail.example.com Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/always Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/exec Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/perl Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/radutmp Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/sql_log Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/sqlcounter_expire_on_login Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/logintime Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/echo Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/sradutmp Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/etc_group Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/smbpasswd Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/expr Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/krb5 Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/ippool Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/chap Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/otp Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/mac2vlan Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/cui Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/policy Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/mac2ip Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/linelog Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/acct_unique Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/mschap Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/attr_filter Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/expiration Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/preprocess Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/pam Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/ntlm_auth Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/passwd Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/attr_rewrite Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/checkval Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/smsotp Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/ldap Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/pap Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/wimax Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/detail.log Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/realm Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/unix Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/counter Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/inner-eap Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/modules/detail Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/eap.conf Mon Mar 8 15:02:43 2010 : Debug: including configuration file /etc/freeradius/policy.conf Mon Mar 8 15:02:43 2010 : Debug: including files in directory /etc/freeradius/sites-enabled/ Mon Mar 8 15:02:43 2010 : Debug: main { Mon Mar 8 15:02:43 2010 : Debug: user = "freerad" Mon Mar 8 15:02:43 2010 : Debug: group = "freerad" Mon Mar 8 15:02:43 2010 : Debug: allow_core_dumps = no Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: including dictionary file /etc/freeradius/dictionary Mon Mar 8 15:02:43 2010 : Debug: main { Mon Mar 8 15:02:43 2010 : Debug: prefix = "/usr" Mon Mar 8 15:02:43 2010 : Debug: localstatedir = "/var" Mon Mar 8 15:02:43 2010 : Debug: logdir = "/var/log/freeradius" Mon Mar 8 15:02:43 2010 : Debug: libdir = "/usr/lib/freeradius" Mon Mar 8 15:02:43 2010 : Debug: radacctdir = "/var/log/freeradius/radacct" Mon Mar 8 15:02:43 2010 : Debug: hostname_lookups = no Mon Mar 8 15:02:43 2010 : Debug: max_request_time = 30 Mon Mar 8 15:02:43 2010 : Debug: cleanup_delay = 5 Mon Mar 8 15:02:43 2010 : Debug: max_requests = 1024 Mon Mar 8 15:02:43 2010 : Debug: pidfile = "/var/run/freeradius/freeradius.pid" Mon Mar 8 15:02:43 2010 : Debug: checkrad = "/usr/sbin/checkrad" Mon Mar 8 15:02:43 2010 : Debug: debug_level = 0 Mon Mar 8 15:02:43 2010 : Debug: proxy_requests = yes Mon Mar 8 15:02:43 2010 : Debug: log { Mon Mar 8 15:02:43 2010 : Debug: stripped_names = no Mon Mar 8 15:02:43 2010 : Debug: auth = yes Mon Mar 8 15:02:43 2010 : Debug: auth_badpass = yes Mon Mar 8 15:02:43 2010 : Debug: auth_goodpass = yes Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: security { Mon Mar 8 15:02:43 2010 : Debug: max_attributes = 200 Mon Mar 8 15:02:43 2010 : Debug: reject_delay = 1 Mon Mar 8 15:02:43 2010 : Debug: status_server = yes Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: radiusd: #### Loading Realms and Home Servers #### Mon Mar 8 15:02:43 2010 : Debug: proxy server { Mon Mar 8 15:02:43 2010 : Debug: retry_delay = 5 Mon Mar 8 15:02:43 2010 : Debug: retry_count = 3 Mon Mar 8 15:02:43 2010 : Debug: default_fallback = no Mon Mar 8 15:02:43 2010 : Debug: dead_time = 120 Mon Mar 8 15:02:43 2010 : Debug: wake_all_if_all_dead = no Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: home_server localhost { Mon Mar 8 15:02:43 2010 : Debug: ipaddr = 127.0.0.1 Mon Mar 8 15:02:43 2010 : Debug: port = 1812 Mon Mar 8 15:02:43 2010 : Debug: type = "auth" Mon Mar 8 15:02:43 2010 : Debug: secret = "testing123" Mon Mar 8 15:02:43 2010 : Debug: response_window = 20 Mon Mar 8 15:02:43 2010 : Debug: max_outstanding = 65536 Mon Mar 8 15:02:43 2010 : Debug: require_message_authenticator = no Mon Mar 8 15:02:43 2010 : Debug: zombie_period = 40 Mon Mar 8 15:02:43 2010 : Debug: status_check = "status-server" Mon Mar 8 15:02:43 2010 : Debug: ping_interval = 30 Mon Mar 8 15:02:43 2010 : Debug: check_interval = 30 Mon Mar 8 15:02:43 2010 : Debug: num_answers_to_alive = 3 Mon Mar 8 15:02:43 2010 : Debug: num_pings_to_alive = 3 Mon Mar 8 15:02:43 2010 : Debug: revive_interval = 120 Mon Mar 8 15:02:43 2010 : Debug: status_check_timeout = 4 Mon Mar 8 15:02:43 2010 : Debug: irt = 2 Mon Mar 8 15:02:43 2010 : Debug: mrt = 16 Mon Mar 8 15:02:43 2010 : Debug: mrc = 5 Mon Mar 8 15:02:43 2010 : Debug: mrd = 30 Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: home_server_pool my_auth_failover { Mon Mar 8 15:02:43 2010 : Debug: type = fail-over Mon Mar 8 15:02:43 2010 : Debug: home_server = localhost Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: realm example.com { Mon Mar 8 15:02:43 2010 : Debug: auth_pool = my_auth_failover Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: realm LOCAL { Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: radiusd: #### Loading Clients #### Mon Mar 8 15:02:43 2010 : Debug: client 193.170.38.103 { Mon Mar 8 15:02:43 2010 : Debug: require_message_authenticator = no Mon Mar 8 15:02:43 2010 : Debug: secret = "wlan-ap7" Mon Mar 8 15:02:43 2010 : Debug: shortname = "ap7" Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: client 193.170.38.101 { Mon Mar 8 15:02:43 2010 : Debug: require_message_authenticator = no Mon Mar 8 15:02:43 2010 : Debug: secret = "wlan-ap9" Mon Mar 8 15:02:43 2010 : Debug: shortname = "ap9" Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: client 193.170.38.100 { Mon Mar 8 15:02:43 2010 : Debug: require_message_authenticator = no Mon Mar 8 15:02:43 2010 : Debug: secret = "wlan-ap10" Mon Mar 8 15:02:43 2010 : Debug: shortname = "ap10" Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: client 193.170.39.105 { Mon Mar 8 15:02:43 2010 : Debug: require_message_authenticator = no Mon Mar 8 15:02:43 2010 : Debug: secret = "wlan-ap5" Mon Mar 8 15:02:43 2010 : Debug: shortname = "ap5" Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: client 193.170.37.94 { Mon Mar 8 15:02:43 2010 : Debug: require_message_authenticator = no Mon Mar 8 15:02:43 2010 : Debug: secret = "wlan-ap5" Mon Mar 8 15:02:43 2010 : Debug: shortname = "ap5" Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: client 127.0.0.1 { Mon Mar 8 15:02:43 2010 : Debug: require_message_authenticator = no Mon Mar 8 15:02:43 2010 : Debug: secret = "wlan-ap5" Mon Mar 8 15:02:43 2010 : Debug: shortname = "ap5" Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: client 193.170.38.104 { Mon Mar 8 15:02:43 2010 : Debug: require_message_authenticator = no Mon Mar 8 15:02:43 2010 : Debug: secret = "wlan-ap6" Mon Mar 8 15:02:43 2010 : Debug: shortname = "ap6" Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: client 193.170.38.102 { Mon Mar 8 15:02:43 2010 : Debug: require_message_authenticator = no Mon Mar 8 15:02:43 2010 : Debug: secret = "wlan-ap8" Mon Mar 8 15:02:43 2010 : Debug: shortname = "ap8" Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: client 193.170.38.99 { Mon Mar 8 15:02:43 2010 : Debug: require_message_authenticator = no Mon Mar 8 15:02:43 2010 : Debug: secret = "wlan-ap11" Mon Mar 8 15:02:43 2010 : Debug: shortname = "ap11" Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: client 193.170.38.98 { Mon Mar 8 15:02:43 2010 : Debug: require_message_authenticator = no Mon Mar 8 15:02:43 2010 : Debug: secret = "wlan-ap12" Mon Mar 8 15:02:43 2010 : Debug: shortname = "ap12" Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: radiusd: #### Instantiating modules #### Mon Mar 8 15:02:43 2010 : Debug: instantiate { Mon Mar 8 15:02:43 2010 : Debug: (Loaded rlm_exec, checking if it's valid) Mon Mar 8 15:02:43 2010 : Debug: Module: Linked to module rlm_exec Mon Mar 8 15:02:43 2010 : Debug: Module: Instantiating exec Mon Mar 8 15:02:43 2010 : Debug: exec { Mon Mar 8 15:02:43 2010 : Debug: wait = no Mon Mar 8 15:02:43 2010 : Debug: input_pairs = "request" Mon Mar 8 15:02:43 2010 : Debug: shell_escape = yes Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: (Loaded rlm_expr, checking if it's valid) Mon Mar 8 15:02:43 2010 : Debug: Module: Linked to module rlm_expr Mon Mar 8 15:02:43 2010 : Debug: Module: Instantiating expr Mon Mar 8 15:02:43 2010 : Debug: (Loaded rlm_expiration, checking if it's valid) Mon Mar 8 15:02:43 2010 : Debug: Module: Linked to module rlm_expiration Mon Mar 8 15:02:43 2010 : Debug: Module: Instantiating expiration Mon Mar 8 15:02:43 2010 : Debug: expiration { Mon Mar 8 15:02:43 2010 : Debug: reply-message = "Password Has Expired " Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: (Loaded rlm_logintime, checking if it's valid) Mon Mar 8 15:02:43 2010 : Debug: Module: Linked to module rlm_logintime Mon Mar 8 15:02:43 2010 : Debug: Module: Instantiating logintime Mon Mar 8 15:02:43 2010 : Debug: logintime { Mon Mar 8 15:02:43 2010 : Debug: reply-message = "You are calling outside your allowed timespan " Mon Mar 8 15:02:43 2010 : Debug: minimum-timeout = 60 Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: radiusd: #### Loading Virtual Servers #### Mon Mar 8 15:02:43 2010 : Debug: server { Mon Mar 8 15:02:43 2010 : Debug: modules { Mon Mar 8 15:02:43 2010 : Debug: } # modules Mon Mar 8 15:02:43 2010 : Debug: } # server Mon Mar 8 15:02:43 2010 : Debug: radiusd: #### Opening IP addresses and Ports #### Mon Mar 8 15:02:43 2010 : Debug: listen { Mon Mar 8 15:02:43 2010 : Debug: type = "auth" Mon Mar 8 15:02:43 2010 : Debug: ipaddr = * Mon Mar 8 15:02:43 2010 : Debug: port = 1812 Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: listen { Mon Mar 8 15:02:43 2010 : Debug: type = "acct" Mon Mar 8 15:02:43 2010 : Debug: ipaddr = * Mon Mar 8 15:02:43 2010 : Debug: port = 0 Mon Mar 8 15:02:43 2010 : Debug: } Mon Mar 8 15:02:43 2010 : Debug: Listening on authentication address * port 1812 Mon Mar 8 15:02:43 2010 : Debug: Listening on accounting address * port 1813 Mon Mar 8 15:02:43 2010 : Debug: Listening on proxy address * port 1814 Mon Mar 8 15:02:43 2010 : Info: Ready to process requests. The complete error message was by the way: Ready to process requests. rad_recv: Access-Request packet from host 193.170.39.105 port 1027, id=1, length=109 NAS-IP-Address = 193.170.39.105 NAS-Port-Type = Wireless-802.11 NAS-Port = 1 Framed-MTU = 1400 Calling-Station-Id = "0019d296e00f" Called-Station-Id = "00118550acf5" NAS-Identifier = "wlan-ap5" EAP-Message = 0x0201000501 Message-Authenticator = 0x793e8d344397eca7613421f7d482b309 WARNING: Empty section. Using default return values. No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Login incorrect: [<no User-Name attribute>/<no User-Password attribute>] (from client ap5 port 1 cli 0019d296e00f) Delaying reject of request 3 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 3 Sending Access-Reject of id 1 to 193.170.39.105 port 1027 Waking up in 4.9 seconds. Cleaning up request 3 ID 1 with timestamp +852861 Ready to process requests I tried this with several different methods, meaning also with user-name and password... If you need me to provide any further info please let me know! Your's Klaus