Hello All freeradius users

 

I have been trying to get my freeradius to do authentication against a passwd-like file using the passwd module.

 

I’m running FreeRadius 2.1.8 on a Debian 4.0 Server used lenny-backports for the installation.

 

 

My specific configuration to get this working looks like this

 

Passwd module file

        filename = /etc/tac-plus/passwd

        format = *User-Name:User-Password

        hashsize = 0

        delimiter = :

        authtype = pap

 

the password file looks like this /etc/tac-plus/passwd

jmd:TLw0SiK4QfQxg:159:20::/home/jmd:/bin/bash

 

users file

DEFAULT         NAS-IP-Address == 172.31.254.4

                Cisco-AVPair += 'Wireless-WCS:role0=SuperUsers',

                Cisco-AVPair += 'Wireless-WCS:task0=Users and Groups',

                Cisco-AVPair += 'Wireless-WCS:task1=Audit Trails',

 

 

There is no problem in stating the freeradius server

 

The debug output look like this when I try to do an authentication using radtest command

rad_recv: Access-Request packet from host 127.0.0.1 port 40466, id=179, length=55

        User-Name = "jmd"

        User-Password = "password"

        NAS-IP-Address = 172.31.254.4

        NAS-Port = 0

Thu Jul  8 15:02:10 2010 : Info: +- entering group authorize {...}

Thu Jul  8 15:02:10 2010 : Info: ++[preprocess] returns ok

Thu Jul  8 15:02:10 2010 : Info: ++[chap] returns noop

Thu Jul  8 15:02:10 2010 : Info: ++[mschap] returns noop

Thu Jul  8 15:02:10 2010 : Info: [suffix] No '@' in User-Name = "jmd", looking up realm NULL

Thu Jul  8 15:02:10 2010 : Info: [suffix] No such realm "NULL"

Thu Jul  8 15:02:10 2010 : Info: ++[suffix] returns noop

Thu Jul  8 15:02:10 2010 : Info: [eap] No EAP-Message, not doing EAP

Thu Jul  8 15:02:10 2010 : Info: ++[eap] returns noop

Thu Jul  8 15:02:10 2010 : Info: [files] users: Matched entry DEFAULT at line 49

Thu Jul  8 15:02:10 2010 : Info: ++[files] returns ok

Thu Jul  8 15:02:10 2010 : Info: ++[expiration] returns noop

Thu Jul  8 15:02:10 2010 : Info: ++[logintime] returns noop

Thu Jul  8 15:02:10 2010 : Info: [pap] WARNING! No "known good" password found for the user.  Authentication may fail because of this.

Thu Jul  8 15:02:10 2010 : Info: ++[pap] returns noop

Thu Jul  8 15:02:10 2010 : Info: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user

Thu Jul  8 15:02:10 2010 : Info: Failed to authenticate the user.

Thu Jul  8 15:02:10 2010 : Info: Using Post-Auth-Type Reject

Thu Jul  8 15:02:10 2010 : Info: +- entering group REJECT {...}

Thu Jul  8 15:02:10 2010 : Info: [attr_filter.access_reject]    expand: %{User-Name} -> jmd

Thu Jul  8 15:02:10 2010 : Debug:  attr_filter: Matched entry DEFAULT at line 11

Thu Jul  8 15:02:10 2010 : Info: ++[attr_filter.access_reject] returns updated

Thu Jul  8 15:02:10 2010 : Info: Delaying reject of request 19 for 1 seconds

Thu Jul  8 15:02:10 2010 : Debug: Going to the next request

Thu Jul  8 15:02:10 2010 : Debug: Waking up in 0.9 seconds.

Thu Jul  8 15:02:11 2010 : Info: Sending delayed reject for request 19

Sending Access-Reject of id 179 to 127.0.0.1 port 40466

Thu Jul  8 15:02:11 2010 : Debug: Waking up in 4.9 seconds.

 

 

Radtest command:

radtest jmd password localhost 0 secret

 

I have no clue of what I’m doing wrong !!

Please help me

Best regards

Jan Madsen