Hi - we recently upgraded to version 2.1.8 (freeradius) and my authentication does not work any more.<div><br></div><div>This used to work (configured in Radius):<br><div><br></div><div><div>basic-a   User-Password == &quot;csetestp&quot;</div>
<div>            User-Name =~ &quot;^([aA-zZ]+)-([aA-zZ]+)$&quot;,</div><div>            Framed-Pool := &quot;21&quot;,</div><div>            Class := 2,</div><div>            Session-Timeout := 600,</div><div>            Fall-Through = No</div>
</div></div><div><br></div><div><br></div><div>This is not pap/chap authentication -  our NAS is sending auth-req for a DHCP user.</div><div><br></div><div>I also tried to change to cleartext-password. </div><div>Also I tried this: </div>
<div>basic-a     Auth-Type := Local, User-Password == &quot;csetestp&quot;  but no luck</div><div><br></div><div><br></div><div>This is what I&#39;m getting on Radius:</div><div><br></div><div><div>rad_recv: Access-Request packet from host 114.0.1.11 port 50633, id=62, length=78</div>
<div>        User-Name = &quot;basic-a&quot;</div><div>        User-Password = &quot;csetestp&quot;</div><div>        NAS-IP-Address = 2.2.2.2</div><div>        NAS-Port-Type = Ethernet</div><div>        NAS-Port-Id = &quot;1/1/5:4&quot;</div>
<div>        NAS-Identifier = &quot;right-b4&quot;</div><div>+- entering group authorize {...}</div><div>++[preprocess] returns ok</div><div>++[chap] returns noop</div><div>++[mschap] returns noop</div><div>[suffix] No &#39;@&#39; in User-Name = &quot;basic-a&quot;, looking up realm NULL</div>
<div>[suffix] No such realm &quot;NULL&quot;</div><div>++[suffix] returns noop</div><div>[eap] No EAP-Message, not doing EAP</div><div>++[eap] returns noop</div><div>++[unix] returns notfound</div><div>[files]         expand: %{User-Name} -&gt; basic-a</div>
<div>[files]         expand: %{User-Name} -&gt; basic-a</div><div>[files]         expand: %{User-Name} -&gt; basic-a</div><div>[files]         expand: %{User-Name} -&gt; basic-a</div><div>WARNING: Found User-Password == &quot;...&quot;.</div>
<div>WARNING: Are you sure you don&#39;t mean Cleartext-Password?</div><div>WARNING: See &quot;man rlm_pap&quot; for more information.</div><div>[files] users: Matched entry basic-a at line 106</div><div>++[files] returns ok</div>
<div>++[expiration] returns noop</div><div>++[logintime] returns noop</div><div>[pap] WARNING! No &quot;known good&quot; password found for the user.  Authentication may fail because of this.</div><div>++[pap] returns noop</div>
<div>Found Auth-Type = Local</div><div>WARNING: Please update your configuration, and remove &#39;Auth-Type = Local&#39;</div><div>WARNING: Use the PAP or CHAP modules instead.</div><div>No &quot;known good&quot; password was configured for the user.</div>
<div>As a result, we cannot authenticate the user.</div><div>Failed to authenticate the user.</div><div>Using Post-Auth-Type Reject</div><div>+- entering group REJECT {...}</div><div>[attr_filter.access_reject]     expand: %{User-Name} -&gt; basic-a</div>
<div> attr_filter: Matched entry DEFAULT at line 11</div><div>++[attr_filter.access_reject] returns updated</div><div>Delaying reject of request 1 for 1 seconds</div><div>Going to the next request</div><div>Waking up in 0.9 seconds.</div>
<div>Sending delayed reject for request 1</div><div>Sending Access-Reject of id 62 to 114.0.1.11 port 50633</div><div>Waking up in 4.9 seconds.</div><div>Cleaning up request 1 ID 62 with timestamp +37</div><div>Ready to process requests.</div>
</div><div><br></div>