OK, that entry in the users file was in as part of the prebuild package. I will have to check why that is there with the guys that make the package. For the moment I have commented it out so that it truly reflects the config on your website. I have been through the steps again and found that final radtest shows an access-reject and the debug shows: ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Now presumably this is because there is nothing in the users file (by putting the DEFAULT EAP-Message !* "", Auth-Type := Accept back the access-request is accepted). The website says to delete the previous test entry, so now I am left with nothing in the users file. Is this correct? Cheers, Andi -----Original Message----- From: freeradius-users-bounces+amorris=cardiffmet.ac.uk@lists.freeradius.org [mailto:freeradius-users-bounces+amorris=cardiffmet.ac.uk@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 24 April 2012 12:41 To: FreeRadius users mailing list Subject: Re: falling back to local auth and not ads Morris, Andi wrote:
Great website! I've been through all the steps on that and I get an Access-Accept when running the radtest against MSCHAP at the end, however when I connect from a supplicant I'm still seeing the following in the debug output.
If you follow the instructions on the web site, then it will work.
The only thing in my users file is: DEFAULT EAP-Message !* "", Auth-Type := Accept
The web site does NOT say to do this. Do you understand what it does? It tries to bypass all authentication! Follow the web site. Don't do *more* changes than the web site says. It *will* work. The web site contains DETAILED descriptions of what to configure, what to test, and what to do when the tests don't work. It's clear you're *not* following the web site. If you were, you would be saying which step you tried, which ones worked, and which test failed. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ________________________________ From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. Please could you ensure that all of your contact records and databases are updated to reflect this change. Further information can be found on the website here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>