------------------------------
Message: 2 Date: Mon, 23 Nov 2009 15:25:32 +0100 From: Alan DeKok <aland@deployingradius.com> Subject: Re: "No NAS-PORT seen" To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4B0A9B5C.6000102@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1
Peter Carlstedt wrote:
Well all of that works but from that point and forward it doesnt, I cant get my new user to authenticate towards the radius server and I get from attr_filter that the request matched entry DEFAULT at line 11, which sends a reject message if I have understood it correctly. Also I?ve commented out that the radius server should use the users file to do checks against when someone tries to authenticate, well that dont seem to work because when i try to authenticate towards the radius server with a user in the users file I succeed while i do not succeed when i try to authenticate by using the user that i created in the mysql database.
Have I missed something?
It shouldn't be that hard. If you change the configuration, re-start the server.
I re-start the server all the time when I change the configuration...so that is not the case. I´ve checked if it works with radtest and it does. So in my mind it feels like i´ve missed something in the peap configuration?
And READ the debug output. There's a lot of text in it, but it describes which modules its using, and what it's doing. The ONLY answer to configuration problems is in the debug output.
But something i also noticed is that when i authenticate as the user who is in the users file and have commented out that it should use the users file it gets a message from rlm_radutmp saying "No NAS-Port seen. Cannot do anything."
That only comes from accounting traffic, not from authentication traffic. Please do NOT confuse the two.
Ive installed and made my own build of Freeradius 2.1.7 after i installed mysql client and all those libraries and mysql server. also I installed OpenSSL 0.9.8l before installation of the Freeradius server.
Since the log is so big from radiusd -X is there any possibility to save it into a file? And how do i do that?
$ script radius.log $ radiusd -X .... (run) $ exit
And then look at the file "radius.log"
Alan DeKok.
Ok thanks! I´ll do that. Peter Carlstedt
------------------------------
Message: 4 Date: Mon, 23 Nov 2009 14:53:42 +0000 From: Peter Carlstedt <pc_007@hotmail.com> Subject: Update of "No NAS-PORT seen" To: <freeradius-users@lists.freeradius.org> Message-ID: <SNT120-W79B8526AA982DAA24E059B49E0@phx.gbl> Content-Type: text/plain; charset="iso-8859-1"
Hello again!
I have an update of the problem.
I also got an error which I?ve had before, then Ivan Kalik I think told me that i need to enable copy_request_to_tunnel = yes. Well I have that enabled so I can authenticate by peap. But now I get the same error when I try to authenticate the user which has been created in the MySQL database. The error I get is: (only mentioning the mschapv2 & mschap response from the output)
"[mschapv2] +- entering group MS-CHAP {...}
[mschap] No Cleartext-Password configured. Cannot create LM-Password.
[mschap] No Cleartext-Password configured. Cannot create NT-Password.
[mschap] Told to do MS-CHAPv2 for test-user with NT-Password
[mschap] FAILED: No NT/LM-Password. Cannot perform authentication.
[mschap] FAILED: MS-CHAP2-Response is incorrect
++[mschap] returns reject
Also as a side note, the user in the database has a Cleartext-Password := test-pass.
I read on the wiki that I should use ":=" and not "==" to do the check of the password.
Also I have not set a AUTH-TYPE, i let the server figure it out on its own.
Best regards/ Peter
_________________________________________________________________ Windows Live: Make it easier for your friends to see what you’re up to on Facebook. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/soc...