ok, thanks for the tip. Now receiving the following in debug screen (something with Auth-Type, but can't figure out what exactly): 1)with PAP Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: Looking up realm "mt" for User-Name = "edgars@mt" rlm_realm: Found realm "mt" rlm_realm: Adding Stripped-User-Name = "edgars" rlm_realm: Proxying request from user edgars to realm mt rlm_realm: Adding Realm = "mt" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 rlm_passwd: Added Autz-Type: 'mt' to config_items rlm_passwd: Added NAS-IP-Address: '10.5.8.103' to request_items modcall[authorize]: module "edg_check" returns ok for request 0 modcall: group authorize returns ok for request 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: Request already proxied. Ignoring. modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 rlm_passwd: Added Autz-Type: 'mt' to config_items rlm_passwd: Added NAS-IP-Address: '10.5.8.103' to request_items modcall[authorize]: module "edg_check" returns ok for request 0 modcall: group authorize returns ok for request 0 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Login incorrect: [edgars/edgars] (from client lalala port 2436 cli 1.1.1.2) 2)with mschap rad_check_password: Found Auth-Type MS-CHAP auth: type "MS-CHAP" Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 0 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for edg@mt with NT-Password rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication. rlm_mschap: FAILED: MS-CHAP2-Response is incorrect modcall[authenticate]: module "mschap" returns reject for request 0 modcall: group Auth-Type returns reject for request 0 auth: Failed to validate the user. Login incorrect: [edg/<no User-Password attribute>] (from client lalala port 2437 cli 1.1.1.2) Edgars Alan DeKok wrote:
Edgars <edzix19@inbox.lv> wrote:
Seems that somewhere is mistake caus' receiving in the debug screen the following information (pay attention to "rlm_passwd: *Unable to create Autz-Type: mt*". What could it mean?):
You didn't list "mt" as a VALUE for Autz-Type in the dictionaries.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html