I put the next line im jradius module: # configure the rlm_jradius module jradius { name = "example" # The "Requester" name (a single # JRadius server can have # multiple "applications") primary = "localhost" # Uses default port 1814 secondary = "localhost" # Fail-over server tertiary = "localhost" # Fail-over server on port 8002 timeout = 1 # Connect Timeout onfail = NOOP # What to do if no JRadius # Server is found. Options are: # FAIL (default), OK, REJECT, NOOP keepalive = yes # Keep connections to JRadius pooled connections = 8 # Number of pooled JRadius connections allow_codechange = yes } But still the same problem appears. Sincerelly, Žagar Jelena -----Original Message----- From: freeradius-users-bounces+jelena.zagar=logos.hr@lists.freeradius.org [mailto:freeradius-users-bounces+jelena.zagar=logos.hr@lists.freeradius.org] On Behalf Of wlanmac Sent: Thursday, September 25, 2008 8:16 AM To: freeradius-users@lists.freeradius.org Subject: Re: Jradius & FreeRadius problem! If you are trying to change an AccessReject into an AccessAccept in the post-auth section, then you must have the following option configured for the rlm_jradius module: jradius { ... allow_codechange = yes } David
Date: Thu, 25 Sep 2008 07:58:56 +0200 From: Jelena ?agar <jelena.zagar@logos.hr> Subject: Jradius & FreeRadius problem! To: <freeradius-users@lists.freeradius.org> Message-ID: <C5F1749C7722D74585F0B099D0392C757C386C@dionis.logos.hr> Content-Type: text/plain; charset="iso-8859-2"
I installed FreeRadius on the Windows machine. I started JRadius as well. I started the client. The JRadius sends back to the FreeRadius the access accept packet, but Free Radius always sends to the client the Access Reject packet. Only the Reply-Message is read correctly from the returned packet. What is the reason for such an error. Down is the log trace. With the red color, the access accept packet is marked. I hope that somebody will help me solving this issue.
rad_recv: Access-Request packet from host 127.0.0.1:1376, id=1, length=108 User-Name = "testuser" User-Password = "testpw" NAS-Port-Type = Wireless-802.11 NAS-Port = 1 NAS-IP-Address = 127.0.0.1 X-Ascend-Send-Passwd = "\000\000\000\001" Calling-Station-Id = "0982331361" Service-Type = Login-User Message-Authenticator = 0x58c175d66fd2fd81043794526cc39783 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 9 rlm_jradius: Trying to (re)connect unconnected handle 5 rlm_jradius: Reserving JRadius socket id: 5 rlm_jradius: got socket 5 after skipping 0 unconnected handles, tried to reconne ct 1 though rlm_jradius: packing attribute User-Name (type: 1; len: 8) rlm_jradius: packing attribute User-Password (type: 2; len: 6) rlm_jradius: packing attribute NAS-Port-Type (type: 61; len: 4) rlm_jradius: packing attribute NAS-Port (type: 5; len: 4) rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4) rlm_jradius: packing attribute X-Ascend-Send-Passwd (type: 232; len: 4) rlm_jradius: packing attribute Calling-Station-Id (type: 31; len: 10) rlm_jradius: packing attribute Service-Type (type: 6; len: 4) rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16) rlm_jradius: packing packet with code: 1 (attr length: 168) rlm_jradius: packing packet with code: 0 (attr length: 0) rlm_jradius: sending 197 bytes to socket 5 rlm_jradius: return code 8; receiving 2 packets rlm_jradius: reading packet: code=1 len=168 rlm_jradius: reading attribute: type=1; len=8 rlm_jradius: reading attribute: type=2; len=6 rlm_jradius: reading attribute: type=61; len=4 rlm_jradius: reading attribute: type=5; len=4 rlm_jradius: reading attribute: type=4; len=4 rlm_jradius: reading attribute: type=232; len=4 rlm_jradius: reading attribute: type=31; len=10 rlm_jradius: reading attribute: type=6; len=4 rlm_jradius: reading attribute: type=80; len=16 rlm_jradius: reading packet: code=0 len=0 rlm_jradius: reading request: config_item: len=57 rlm_jradius: reading attribute: type=1259012098; len=32 rlm_jradius: reading attribute: type=1259012097; len=1 rlm_jradius: Released JRadius socket id: 5 modcall[authorize]: module "jradius" returns updated for request 9 modcall: leaving group authorize (returns updated) for request 9 auth: No authenticate method (Auth-Type) configuration found for the request: Re jecting the user auth: Failed to validate the user. Login incorrect: [testuser/testpw] (from client localhost port 1 cli 0982331361)
Found Post-Auth-Type Processing the post-auth section of radiusd.conf modcall: entering group REJECT for request 9 rlm_jradius: Trying to (re)connect unconnected handle 4 rlm_jradius: Reserving JRadius socket id: 4 rlm_jradius: got socket 4 after skipping 0 unconnected handles, tried to reconne ct 1 though rlm_jradius: packing attribute User-Name (type: 1; len: 8) rlm_jradius: packing attribute User-Password (type: 2; len: 6) rlm_jradius: packing attribute NAS-Port-Type (type: 61; len: 4) rlm_jradius: packing attribute NAS-Port (type: 5; len: 4) rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4) rlm_jradius: packing attribute X-Ascend-Send-Passwd (type: 232; len: 4) rlm_jradius: packing attribute Calling-Station-Id (type: 31; len: 10) rlm_jradius: packing attribute Service-Type (type: 6; len: 4) rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16) rlm_jradius: packing packet with code: 1 (attr length: 168) rlm_jradius: packing packet with code: 3 (attr length: 0) rlm_jradius: packing attribute JRadius-Session-Id (type: 1259012098; len: 32) rlm_jradius: packing attribute JRadius-Request-Id (type: 1259012097; len: 1) rlm_jradius: packing attribute Post-Auth-Type (type: 1014; len: 4) rlm_jradius: sending 270 bytes to socket 4 rlm_jradius: return code 8; receiving 2 packets rlm_jradius: reading packet: code=1 len=168 rlm_jradius: reading attribute: type=1; len=8 rlm_jradius: reading attribute: type=2; len=6 rlm_jradius: reading attribute: type=61; len=4 rlm_jradius: reading attribute: type=5; len=4 rlm_jradius: reading attribute: type=4; len=4 rlm_jradius: reading attribute: type=232; len=4 rlm_jradius: reading attribute: type=31; len=10 rlm_jradius: reading attribute: type=6; len=4 rlm_jradius: reading attribute: type=80; len=16 rlm_jradius: reading packet: code=2 len=154 rlm_jradius: reading attribute: type=18; len=8 rlm_jradius: reading attribute: type=1000; len=4 rlm_jradius: reading attribute: type=1; len=8 rlm_jradius: reading attribute: type=2; len=6 rlm_jradius: reading attribute: type=6; len=4 rlm_jradius: reading attribute: type=7; len=4 rlm_jradius: reading attribute: type=8; len=4 rlm_jradius: reading attribute: type=13; len=4 rlm_jradius: reading attribute: type=12; len=4 rlm_jradius: reading request: config_item: len=73 rlm_jradius: reading attribute: type=1259012098; len=32 rlm_jradius: reading attribute: type=1259012097; len=1 rlm_jradius: reading attribute: type=1014; len=4 rlm_jradius: Released JRadius socket id: 4 modcall[post-auth]: module "jradius" returns updated for request 9 modcall: leaving group REJECT (returns updated) for request 9 Sending Access-Reject of id 1 to 127.0.0.1 port 1376 Reply-Message := "Accepted" Finished request 9 -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/2 0080925/b4a00053/attachment.html> -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3406 bytes Desc: not available Url : <https://lists.freeradius.org/pipermail/freeradius-users/attachments/2 0080925/b4a00053/attachment.bin>
------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
End of Freeradius-Users Digest, Vol 41, Issue 113 *************************************************
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html