On Sun, Aug 6, 2017 at 5:16 AM, Diggins Mike <diggins@mcmaster.ca> wrote:
I built a new server using FreeRadius 3.0.4 (the one that comes with RHEL7) and attempted to port my FR v2 configuration but it's failing.
You should be able to easily build latest FR3 stable RPM from the source.
The error (from radius -X) is:
reading pairlist file /etc/raddb/mods-config/files/authorize /etc/raddb/mods-config/files/authorize[5]: Parse error (check) for entry DEFAULT: Unknown value 'ntlm_auth' for attribute 'Auth-Type' Failed reading /etc/raddb/mods-config/files/authorize /etc/raddb/mods-enabled/files[9]: Instantiation failed for module "files"
Did you read http://wiki.freeradius.org/guide/freeradius-active-directory-integration-how... ?
My /etc/raddb/mods-config/files/authorize contains only:
# Begin DEFAULT Auth-Type = ntlm_auth # end of user file
That shouldn't be needed.
I added ntlm_auth to the authenticate sections in sites-enabled/default and sites-enabled/inner-tunnel.
# Auth-Type LDAP { # ldap # }
# # Allow EAP authentication. eap
I don't remember this one on top of my head, but IIRC you simply need to have mods-enabled/eap dan mods-enabled/mschap links.
# Allow NTLM_AUTH ntlm_auth #
Definitely don't do that.
I've searched this error for the last hour but can't find anything that points to my problem.
Don't copy-paste FR2 config in FR3. Start with the default config, and follow known-good recipes. -- Fajar