Everyone -
I'm being a bit brain dead most likely. I have been tinkering with Freeradius and MAC authentication successfully. Now I have a real server to build FR on so I proceeded to build the new server. After going through the *same* steps to build FR, duplicating the clients.conf and users file, I can't get the auth to work again. In my notes these were the two files I touched to get it going, but I'm hoping I missed something simple.
My -Xy output looks like this:
--- Walking the entire request list --- Waking up in 1 seconds... rad_recv: Access-Request packet from host 10.10.18.208:1030, id=16, length=53 User-Name = "000e35-84610a" User-Password = "000e35-84610a" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_realm: No '@' in User-Name = "000e35-84610a", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 1 modcall[authorize]: module "files" returns notfound for request 1 rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 1 modcall: leaving group authorize (returns ok) for request 1 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Delaying request 1 for 1 seconds Finished request 1 Going to the next request Waking up in 1 seconds...
My users file:
000E35-84610A Cleartext-Password := "000E35-84610A"
Any help to recover from my brain lapse would be greatly appreciated. Did I miss some other config tweak so it's looking at the user file?
Thx in advance!
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks, tried that, still no go. How does FR know to look at the users file? Should I see something in the debug that's it's looking for local (users) authentication? Seems like it's missing that step. Thx - Steve ----- Original Message ----- From: "Kenneth Grady" <klg@lanl.gov> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, June 11, 2009 12:50:26 PM GMT -05:00 US/Canada Eastern Subject: Re: MAC Authentication case counts, try adding the entry in your users file with lowercase. Steve Wu wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html