On Jul 10, 2020, at 10:20 AM, Luveh Keraph <1.41421@gmail.com> wrote:
Here is a copy of my users file, with all comments remove:
Please read http://wiki.freeradius.org/list-help We do NOT need to see configuration files.
DEFAULT Framed-Protocol == PPP Framed-Protocol = PPP, Framed-Compression = Van-Jacobson-TCP-IP
DEFAULT Hint == "CSLIP" Framed-Protocol = SLIP, Framed-Compression = Van-Jacobson-TCP-IP
DEFAULT Hint == "SLIP" Framed-Protocol = SLIP
abcXYZ User-Password != "MyPassword1" abcXYZ Cleartext-Password := "MyPassword1" MyAttrTag = "One"
abcxyz User-Password != "MyPassword2" abcxyz Cleartext-Password := "MyPassword2" MyAttrTag = "Two"
And here's debugging information obtained at the FreeRADIUS server, launched with -sxXf
Why use random command-line options when the documentation says what to do?
when a client is requesting to be authenticated as abcXYZ over SSH, but using the password assigned to abcxyz in the users file. A line that reads EXPAND %{%{Stripped-User-Name}:-%{tolower:%{User-Name}}} would seem to reveal that the received username is indeed converted to all lowercase by the FreeRADIUS server. I searched for references to the above in the FreeRADIUS files, and here is what I found:
That "tolower" configuration was added by someone at your site. It is NOT in the default configuration. You're free to edit the configuration to remove the "tolower"
../raddb/mods-available/couchbase: user_key = "raduser_%{md5:%{tolower:%{%{Stripped-User-Name}:-%{User-Name}}}}" ../raddb/mods-available/couchbase:# simul_vkey = "%{tolower:%{%{Stripped-User-Name}:-%{User-Name}}}" ../raddb/mods-available/files: key = "%{%{Stripped-User-Name}:-%{tolower:%{User-Name}}}"
Is it just a matter of getting rid of the 'key' line in the files directory?
No... the documentation explains what the "key" configuration does. I suggest reading it. Alan DeKok. Alan DeKok.