I went ahead and recompiled
from source and also used the --disable-shared options.
It is not core-dumping but PEAP is still
failing though
Here is a complete debug
output as you requested:
freebsd# radiusd -X -A
Starting - reading configuration files
...
reread_config: reading radiusd.conf
Config:
including file: /usr/local/etc/raddb/clients.conf
Config:
including file: /usr/local/etc/raddb/eap.conf
main: prefix =
"/usr/local"
main: localstatedir = "/usr/local/var"
main:
logdir = "/usr/local/var/log/radius"
main: libdir =
"/usr/local/lib"
main: radacctdir =
"/usr/local/var/log/radius/radacct"
main: hostname_lookups =
no
main: max_request_time = 30
main: cleanup_delay =
5
main: max_requests = 1024
main: delete_blocked_requests =
0
main: port = 0
main: allow_core_dumps = no
main:
log_stripped_names = no
main: log_file =
"/usr/local/var/log/radius/radius.log"
main: log_auth =
no
main: log_auth_badpass = no
main: log_auth_goodpass =
no
main: pidfile =
"/usr/local/var/run/radiusd/radiusd.pid"
main: user =
"(null)"
main: group = "(null)"
main: usercollide =
no
main: lower_user = "no"
main: lower_pass =
"no"
main: nospace_user = "no"
main: nospace_pass =
"no"
main: checkrad = "/usr/local/sbin/checkrad"
main:
proxy_requests = no
security: max_attributes = 200
security:
reject_delay = 1
security: status_server = no
main:
debug_level = 0
read_config_files: reading
dictionary
read_config_files: reading naslist
Using deprecated
naslist file. Support for this will go away
soon.
read_config_files: reading clients
read_config_files:
reading realms
radiusd: entering modules setup
Module: Library
search path is /usr/local/lib
Module: Loaded exec
exec: wait =
yes
exec: program = "(null)"
exec: input_pairs =
"request"
exec: output_pairs = "(null)"
exec: packet_type =
"(null)"
rlm_exec: Wait=yes but no output defined. Did you mean
output=none?
Module: Instantiated exec (exec)
Module: Loaded expr
Module: Instantiated expr (expr)
Module: Loaded PAP
pap:
encryption_scheme = "crypt"
Module: Instantiated pap (pap)
Module: Loaded
CHAP
Module: Instantiated chap (chap)
Module: Loaded MS-CHAP
mschap: use_mppe = yes
mschap: require_encryption =
yes
mschap: require_strong = yes
mschap: with_ntdomain_hack =
yes
mschap: passwd = "(null)"
mschap: authtype =
"MS-CHAP"
mschap: ntlm_auth = "(null)"
Module: Instantiated mschap
(mschap)
Module: Loaded System
unix: cache = no
unix:
passwd = "(null)"
unix: shadow = "(null)"
unix: group =
"(null)"
unix: radwtmp =
"/usr/local/var/log/radius/radwtmp"
unix: usegroup = no
unix:
cache_reload = 600
Module: Instantiated unix (unix)
Module: Loaded LDAP
ldap: server = "orion.puyenet.com"
ldap: port =
389
ldap: net_timeout = 1
ldap: timeout = 4
ldap:
timelimit = 3
ldap: identity =
"cn=administrator,ou=users,dc=ad,dc=puyenet,dc=com"
ldap: tls_mode =
no
ldap: start_tls = no
ldap: tls_cacertfile =
"(null)"
ldap: tls_cacertdir = "(null)"
ldap: tls_certfile =
"(null)"
ldap: tls_keyfile = "(null)"
ldap: tls_randfile =
"(null)"
ldap: tls_require_cert = "allow"
ldap: password =
""
ldap: basedn = "DC=ad,DC=puyenet,DC=com"
ldap: filter =
"(uid=%{Stripped-User-Name:-%{User-Name}})"
ldap: base_filter =
"(objectclass=radiusprofile)"
ldap: default_profile =
"(null)"
ldap: profile_attribute = "(null)"
ldap:
password_header = "(null)"
ldap: password_attribute =
"M4a8ccarthy6"
ldap: access_attr = "dialupAccess"
ldap:
groupname_attribute = "cn"
ldap: groupmembership_filter =
"(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))"
ldap:
groupmembership_attribute = "(null)"
ldap: dictionary_mapping =
"/usr/local/etc/raddb/ldap.attrmap"
ldap: ldap_debug = 0
ldap:
ldap_connections_number = 5
ldap: compare_check_items =
no
ldap: access_attr_used_for_allow = yes
ldap: do_xlat =
yes
rlm_ldap: Registering ldap_groupcmp for Ldap-Group
rlm_ldap:
Registering ldap_xlat with xlat_name ldap
rlm_ldap: reading
ldap<->radius mappings from file
/usr/local/etc/raddb/ldap.attrmap
rlm_ldap: LDAP radiusCheckItem mapped to
RADIUS $GENERIC$
rlm_ldap: LDAP radiusReplyItem mapped to RADIUS
$GENERIC$
rlm_ldap: LDAP radiusAuthType mapped to RADIUS
Auth-Type
rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS
Simultaneous-Use
rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS
Called-Station-Id
rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS
Calling-Station-Id
rlm_ldap: LDAP lmPassword mapped to RADIUS
LM-Password
rlm_ldap: LDAP ntPassword mapped to RADIUS
NT-Password
rlm_ldap: LDAP acctFlags mapped to RADIUS
SMB-Account-CTRL-TEXT
rlm_ldap: LDAP radiusExpiration mapped to RADIUS
Expiration
rlm_ldap: LDAP radiusServiceType mapped to RADIUS
Service-Type
rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS
Framed-Protocol
rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS
Framed-IP-Address
rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS
Framed-IP-Netmask
rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS
Framed-Route
rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS
Framed-Routing
rlm_ldap: LDAP radiusFilterId mapped to RADIUS
Filter-Id
rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS
Framed-MTU
rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS
Framed-Compression
rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS
Login-IP-Host
rlm_ldap: LDAP radiusLoginService mapped to RADIUS
Login-Service
rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS
Login-TCP-Port
rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS
Callback-Number
rlm_ldap: LDAP radiusCallbackId mapped to RADIUS
Callback-Id
rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS
Framed-IPX-Network
rlm_ldap: LDAP radiusClass mapped to RADIUS
Class
rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS
Session-Timeout
rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS
Idle-Timeout
rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS
Termination-Action
rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS
Login-LAT-Service
rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS
Login-LAT-Node
rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS
Login-LAT-Group
rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS
Framed-AppleTalk-Link
rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to
RADIUS Framed-AppleTalk-Network
rlm_ldap: LDAP radiusFramedAppleTalkZone
mapped to RADIUS Framed-AppleTalk-Zone
rlm_ldap: LDAP radiusPortLimit mapped
to RADIUS Port-Limit
rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS
Login-LAT-Port
conns: 0x80b3780
Module: Instantiated ldap (ldap)
Module: Loaded eap
eap: default_eap_type = "peap"
eap:
timer_expire = 60
eap: ignore_unknown_eap_types = no
eap:
cisco_accounting_username_bug = no
tls: rsa_key_exchange =
no
tls: dh_key_exchange = yes
tls: rsa_key_length =
512
tls: dh_key_length = 512
tls: verify_depth =
0
tls: CA_path = "(null)"
tls: pem_file_type =
yes
tls: private_key_file =
"/usr/local/etc/raddb/certs/freebsd.puyenet.com.pem"
tls:
certificate_file =
"/usr/local/etc/raddb/certs/freebsd.puyenet.com.pem"
tls: CA_file =
"/usr/local/etc/raddb/certs/root.pem"
tls: private_key_password =
"XXXXXXXXX"
tls: dh_file =
"/usr/local/etc/raddb/certs/dh"
tls: random_file =
"/usr/local/etc/raddb/certs/random"
tls: fragment_size =
1024
tls: include_length = yes
tls: check_crl =
no
tls: check_cert_cn = "(null)"
rlm_eap: Loaded and initialized
type tls
rlm_eap: No such sub-type for default EAP type
peap
radiusd.conf[9]: eap: Module instantiation failed.
freebsd#
Thanks,
Alhagie.
On Monday 02 January 2006 07:34, Alhagie Puye wrote:
>
> >Do you have
> > >
> >
> peap {
> >
> default_eap_type
= mschapv2
> > > }
> >
>
> > >in your eap.conf?
>
> Yes, I do.
And,
was MSCHAP instantiated?
A complete debug output might help since the
problem may begin elsewhere and
only manifest itself as an error when
dependencies are required.
Zoltan Ori
-
List
info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html