struggling getting freeradius to authorize a dialup session
I am confused, as to the layout of the users file. I have a simple: DEFAULT Auth-Type = System Service-Type = Framed-User, Framed-Protocol = PPP, Framed-MTU = 1500 yet, when I start radius (in debug), and attempt a dial-in, it nags the following: WARNING: Empty authorize section. Using default return values. ERROR: No authenticate method (Auth-Type) founf for the request: Rejecting the user So the WARNING is clear enough, but I am getting lost in setup files. the "sites-available/README" suggests that on a simply setup, everything can be in the radiusd.conf file; I don't see anything in my radiusd.conf which suggests an authenticate section. I could post the radiusd.conf, but would like permission (first). Thanks! -- Jim Pazarena work:250 559-7777 Box 550 - 405 2nd Avenue fax: 866 279-3608 Queen Charlotte BC V0T 1S0 mailto:jim@paz.bz
Jim Pazarena wrote:
I am confused, as to the layout of the users file. I have a simple:
DEFAULT Auth-Type = System Service-Type = Framed-User, Framed-Protocol = PPP, Framed-MTU = 1500
yet, when I start radius (in debug), and attempt a dial-in, it nags the following: WARNING: Empty authorize section. Using default return values.
You edited the default configuration and broke it. Don't do that.
ERROR: No authenticate method (Auth-Type) founf for the request: Rejecting the user
Again, this comes only if you edit the configuration and break it.
So the WARNING is clear enough, but I am getting lost in setup files.
Why? Don't change anything. This is stated *clearly* in the "man" page.
the "sites-available/README" suggests that on a simply setup, everything can be in the radiusd.conf file;
It's possible, but only if you know what you're doing.
I don't see anything in my radiusd.conf which suggests an authenticate section.
Then don't edit it. Do one step at a time. Use the default configuration. Take the "users" file entry above, and put it at the TOP of the "users" file. It should work. Alan DeKok.
Alan DeKok wrote, On 2011-11-29 9:34 AM:
Jim Pazarena wrote:
I am confused, as to the layout of the users file. I have a simple:
DEFAULT Auth-Type = System Service-Type = Framed-User, Framed-Protocol = PPP, Framed-MTU = 1500
yet, when I start radius (in debug), and attempt a dial-in, it nags the following: WARNING: Empty authorize section. Using default return values.
You edited the default configuration and broke it. Don't do that.
Actually, I loaded the freeradius from the freebsd ports system, and IT never placed any of the raddb folders & sub folders OR CONTENTS in place. I didn't know that; so I started commenting out the sections in the radiusd.conf which would not load. yes, I clearly saw that you aren't supposed to mess with the configs. But I think it was freebsd which messed with it. OR, rather, failed to completely install it. -- Jim Pazarena work:250 559-7777 Box 550 - 405 2nd Avenue fax: 866 279-3608 Queen Charlotte BC V0T 1S0 mailto:jim@paz.bz
Jim Pazarena wrote:
Actually, I loaded the freeradius from the freebsd ports system, and IT never placed any of the raddb folders & sub folders OR CONTENTS in place.
Well... that's broken.
I didn't know that; so I started commenting out the sections in the radiusd.conf which would not load.
yes, I clearly saw that you aren't supposed to mess with the configs. But I think it was freebsd which messed with it. OR, rather, failed to completely install it.
I don't recall others having the same issue on FreeBSD. The ports system normally works pretty well. Alan DeKok.
participants (2)
-
Alan DeKok -
Jim Pazarena