here the debug after authentication:

Found Auth-Type = PAP

# Executing group from file /etc/raddb/sites-enabled/default

+- entering group PAP {...}

[pap] login attempt with password "secret"

[pap] Using CRYPT password "$6$GW4SlOPp$TZhPalub.qyMY8Z9zU03FMz3A.hSv0b6ycuZT5bYeyG89HPb2Gm/FINd2pdtU79NkgYhE5TUgp5e5/w6iNA40/"

[pap] User authenticated successfully

++[pap] returns ok

# Executing section post-auth from file /etc/raddb/sites-enabled/default

+- entering group post-auth {...}

++[exec] returns noop

Sending Access-Accept of id 70 to 172.31.61.224 port 1812

Finished request 0.

Going to the next request

Waking up in 4.9 seconds.

Cleaning up request 0 ID 70 with timestamp +12

Ready to process requests.

i don't understand when he tried to find the authorizaziont because if i add a comment in the row of the user in the Users file, i get the same error.

Marco Aresu

On 22 July 2013 16:37, Alan DeKok <aland@deployingradius.com> wrote:

Marco Aresu wrote:
> i am getting some problem with authorization in free radius
> i configured the users file as below :
>
> DEFAULT Auth-Type := System
> cisco Auth-Type := System
> Service-Type = NAS-Prompt-User
> cisco-avpair = "shell:priv-lvl=15",

Is it *exactly* that? i.e. did you format the entries correctly?

> When i try to login into a switch i receive the errore : Authorization
> Failed
> and during the debug i ve got :
>
> # Executing section post-auth from file /etc/raddb/sites-enabled/default
> +- entering group post-auth {...}
> [++[reply_log] returns ok
> ++[exec] returns noop

You have rather a lot more than that.

The whole point of the debug output is to READ IT.

ALL of it.

What ELSE does it say? Does the server return an Access-Accept? If
so, blame the switch. Otherwise, READ THE DEBUG OUTPUT to see what's
going on.

Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html