Alan DeKok wrote:
Riccardo Veraldi wrote:
radtest "user@myrealm.org" "password" localhost 10 testing123
...
[root@radius ~]# kinit user Password for user@MYREALMG.ORG:
The realm names are different. Is this intentional?
Try placing the name && password into a text file. Cut & paste them into radtest, and into kinit. That way you'll know that you're testing the same thing.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
yes it is intentional... it is my mistake when I obscured my real domain and IP Addresses. Actually there must be something wrong with the kerberos configuration in the krb5.keytab because I keep getting "wrong principal" error, so it is not freeradius2 configuration fault in my opinion, neverless I don't understand what is wrong with kerberos since I added the radius server to the KDC configuration correctly... Using only LDAP works flawlessy, when I add Auth-Type := kerberos it does not work anymore... Rick