Hi,

I have problem with PAP autentification on freeradius-3.0.0, but on freeradius-2.2.1 everythink works correct. Could you please help me, thx.

Debug output for freeradius-3.0.0:

radiusd@tdrad1test:/storage/app/radius/raddb/auth-new$ /storage/app/radius/freeradius-3.0.0/sbin/radiusd -X -d /storage/app/radius/raddb/auth-new

radiusd: FreeRADIUS Version 3.0.0, for host x86_64-unknown-linux-gnu, built on May 14 2013 at 16:22:54

There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A

PARTICULAR PURPOSE.

You may redistribute copies of FreeRADIUS under the terms of the

GNU General Public License.

For more information about these matters, see the file named COPYRIGHT.

Starting - reading configuration files ...

...

Listening on proxy address * port 0

Listening on auth address * port 1812 as server default

Listening on auth address * port 1645 as server default

Ready to process requests.

rad_recv: Access-Request packet from host 127.0.0.1 port 50633, id=15, length=115

NAS-Port-Type = Virtual

Service-Type = Framed-User

Calling-Station-Id = "421905012405"

Called-Station-Id = "l2tp.vps"

Framed-Protocol = PPP

User-Name = "l2tp@radiustest.sk"

User-Password = "l2tp"

Connect-Info = "8640000"

NAS-IP-Address = 213.151.234.114

(0) # Executing section authorize from file /storage/app/radius/raddb/auth-new/sites-enabled/default

(0) group authorize {

(0) - entering group authorize {...}

(0) [chap] = noop

(0) suffix : Looking up realm "radiustest.sk" for User-Name = "l2tp@radiustest.sk"

(0) suffix : Found realm "DEFAULT"

(0) suffix : Adding Stripped-User-Name = "l2tp"

(0) suffix : Adding Realm = "DEFAULT"

(0) suffix : Authentication realm is LOCAL.

(0) [suffix] = ok

rlm_perl: Added pair NAS-Port-Type = Virtual

rlm_perl: Added pair Service-Type = Framed-User

rlm_perl: Added pair Called-Station-Id = l2tp.vps

rlm_perl: Added pair Calling-Station-Id = 421905012405

rlm_perl: Added pair Framed-Protocol = PPP

rlm_perl: Added pair User-Name = l2tp@radiustest.sk

rlm_perl: Added pair User-Password = l2tp

rlm_perl: Added pair Connect-Info = 8640000

rlm_perl: Added pair Realm = DEFAULT

rlm_perl: Added pair Stripped-User-Name = l2tp

rlm_perl: Added pair NAS-IP-Address = 213.151.234.114

rlm_perl: Added pair Current-Time = 1368711260

rlm_perl: Added pair Password-With-Header = {SSHA}cAgh2LCe5649EzEAbc+nAfIOvOyOJSmU+sKiPA==

rlm_perl: Added pair VPDN_SERVICE_ID = User-GPRS-L2TP

(0) [perl] = ok

(0) [pap] = updated

(0) Found Auth-Type = PAP

(0) # Executing group from file /storage/app/radius/raddb/auth-new/sites-enabled/default

(0) group PAP {

(0) - entering group PAP {...}

(0) pap : login attempt with password "l2tp"

(0) pap : Using SSHA encryption.

(0) ERROR: pap : SSHA password check failed

(0) pap : Passwords don't match

(0) [pap] = reject

(0) Failed to authenticate the user.

(0) Login incorrect (pap: SSHA password check failed): [l2tp@radiustest.sk/l2tp] (from client localhost port 0 cli 421905012405)

Debug output for freeradius-2.2.1:

radiusd@tdrad1test:/storage/app/radius/raddb/auth$ /storage/app/radius/freeradius/sbin/radiusd -X -d /storage/app/radius/raddb/auth

radiusd: FreeRADIUS Version 2.2.1, for host x86_64-unknown-linux-gnu, built on May 2 2013 at 09:22:02

There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A

PARTICULAR PURPOSE.

You may redistribute copies of FreeRADIUS under the terms of the

GNU General Public License.

For more information about these matters, see the file named COPYRIGHT.

Starting - reading configuration files ...

...

Listening on authentication address * port 1812

Listening on authentication address * port 1645

Listening on proxy address * port 37677

Listening on command file ../../log/radius/radius_auth.sock

Ready to process requests.

rad_recv: Access-Request packet from host 127.0.0.1 port 57436, id=196, length=115

NAS-Port-Type = Virtual

Service-Type = Framed-User

Calling-Station-Id = "421905012405"

Called-Station-Id = "l2tp.vps"

Framed-Protocol = PPP

User-Name = "l2tp@radiustest.sk"

User-Password = "l2tp"

Connect-Info = "8640000"

NAS-IP-Address = 213.151.234.114

# Executing section authorize from file /storage/app/radius/raddb/auth/sites-enabled/default

+- entering group authorize {...}

++[preprocess] returns ok

++[chap] returns noop

[suffix] Looking up realm "radiustest.sk" for User-Name = "l2tp@radiustest.sk"

[suffix] Found realm "DEFAULT"

[suffix] Adding Stripped-User-Name = "l2tp"

[suffix] Adding Realm = "DEFAULT"

[suffix] Authentication realm is LOCAL.

++[suffix] returns ok

++[files] returns noop

rlm_perl: Added pair NAS-Port-Type = Virtual

rlm_perl: Added pair Service-Type = Framed-User

rlm_perl: Added pair Called-Station-Id = l2tp.vps

rlm_perl: Added pair Calling-Station-Id = 421905012405

rlm_perl: Added pair Framed-Protocol = PPP

rlm_perl: Added pair User-Name = l2tp@radiustest.sk

rlm_perl: Added pair User-Password = l2tp

rlm_perl: Added pair Connect-Info = 8640000

rlm_perl: Added pair Realm = DEFAULT

rlm_perl: Added pair Stripped-User-Name = l2tp

rlm_perl: Added pair NAS-IP-Address = 213.151.234.114

rlm_perl: Added pair Current-Time = 1368709398

rlm_perl: Added pair Password-With-Header = {SSHA}cAgh2LCe5649EzEAbc+nAfIOvOyOJSmU+sKiPA==

rlm_perl: Added pair VPDN_SERVICE_ID = User-GPRS-L2TP

++[perl] returns ok

[pap] Normalizing SSHA1-Password from base64 encoding

++[pap] returns updated

Found Auth-Type = PAP

# Executing group from file /storage/app/radius/raddb/auth/sites-enabled/default

+- entering group PAP {...}

[pap] login attempt with password "l2tp"

[pap] Using SSHA encryption.

[pap] User authenticated successfully

++[pap] returns ok

Peter Balšianok

Data Service Operation Coordinator,

Voice & Data Services Operations

Orange Slovensko, a. s.
Metodova 8, 821 08 Bratislava
tel: +421 908 00 2405
mobil: +421 905 012 405
e-mail: peter.balsianok@orange.sk