Personally i want freeradius just to work with IPhones or other devices. But the debug mode doesnt show any try to connect to LDAP. rad_recv: Access-Request packet from host 10.119.12.2 port 1313, id=19, length=197 Message-Authenticator = 0xb75eef411ae5dd032df4d51d75b5174e Service-Type = Framed-User User-Name = "nadine.bosshard" Framed-MTU = 1488 Called-Station-Id = "204E7FE98EF3:TCSVO-Intern" Calling-Station-Id = "9803D861E85C" NAS-Identifier = "aptcsvo02" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 54Mbps 802.11g" EAP-Message = 0x02000014016e6164696e652e626f737368617264 NAS-IP-Address = 10.119.12.2 NAS-Port = 1 NAS-Port-Id = "STA port # 1" +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "nadine.bosshard", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: EAP packet type response id 0 length 20 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated rlm_unix: [nadine.bosshard]: invalid shell [/bin/false] ++[unix] returns reject Invalid user: [nadine.bosshard/<via Auth-Type = EAP>] (from client aptcsvo02 port 1 cli 9803D861E85C) Found Post-Auth-Type Reject +- entering group REJECT expand: %{User-Name} -> nadine.bosshard attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 1 for 1 seconds Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Request packet from host 10.119.12.2 port 1313, id=19, length=197 Waiting to send Access-Reject to client aptcsvo02 port 1313 - ID: 19 Sending delayed reject for request 1 Sending Access-Reject of id 19 to 10.119.12.2 port 1313 Waking up in 4.9 seconds. Cleaning up request 1 ID 19 with timestamp +53655 Ready to process requests. rad_recv: Access-Request packet from host 10.119.12.2 port 1314, id=20, length=197 Message-Authenticator = 0x0893415ae4d24bc109a2109f68e2035b Service-Type = Framed-User User-Name = "nadine.bosshard" Framed-MTU = 1488 Called-Station-Id = "204E7FE98EF3:TCSVO-Intern" Calling-Station-Id = "9803D861E85C" NAS-Identifier = "aptcsvo02" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 54Mbps 802.11g" EAP-Message = 0x02000014016e6164696e652e626f737368617264 NAS-IP-Address = 10.119.12.2 NAS-Port = 1 NAS-Port-Id = "STA port # 1" +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "nadine.bosshard", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: EAP packet type response id 0 length 20 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated rlm_unix: [nadine.bosshard]: invalid shell [/bin/false] ++[unix] returns reject Invalid user: [nadine.bosshard/<via Auth-Type = EAP>] (from client aptcsvo02 port 1 cli 9803D861E85C) Found Post-Auth-Type Reject +- entering group REJECT expand: %{User-Name} -> nadine.bosshard attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 2 for 1 seconds Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Request packet from host 10.119.12.2 port 1314, id=20, length=197 Waiting to send Access-Reject to client aptcsvo02 port 1314 - ID: 20 Sending delayed reject for request 2 Sending Access-Reject of id 20 to 10.119.12.2 port 1314 Waking up in 4.9 seconds. Cleaning up request 2 ID 20 with timestamp +53680 Ready to process requests. I now configured the whole thing new. But I dont find any entries in logs, which give me a hint what my problem with LDAP is... Thanks for the help... Mihajlo Joksimovic Am 09/07/2012 04:41 PM, schrieb Fajar A. Nugraha:
On Fri, Sep 7, 2012 at 8:37 PM, Mihajlo Joksimovic <mihajlo.joksimovic@adfinis-sygroup.ch> wrote:
ii freeradius 2.0.4+dfsg-6.61.201011221519 a high-performance and highly configurable R
it's version 2.0.4. Upgrade.
well i deactivated inner tunnel and configured everything in default. is that wrong? If you want to use EAP, it's VERY wrong.
-- Adfinis SyGroup AG Mihajlo Joksimovic, System Engineer Güterstrasse 86 | CH-4053 Basel Tel. 061 333 80 33