Hello ! I have change the version of freeradius, before I had the 1.0.4 version and now the last CVS. I have a problem with the proxy configuration ... so I have change some things for have a "result". Like, before in the users file I rejected the request with an other realm, and at the end of the file I reject ... For example, for netA before I had DEFAULT Realm != "NetB", Realm != "NULL", Auth-type := Reject [...] DEFAULT Auth-Type := Reject And now I must comment this line for A proxy request at B. When A proxy request at B, and B try to response at B ... A "Received Unknown packet code 11from client 147.173.3.249 port 1812: Cannot validate signature Dropping packet without response." You know this error ? Thanks for your help Regards, Configuration For A ## In proxy.conf ## realm netB { type = radius authhost = IPRadiusB:1812 accthost = IPRadiusB:1813 secret = secretAB nostrip } ## In clients.conf ## client IPRadiusB { secret = secretAB shortname = cric nastype = other } /\/\/\ For B /\/\/\ ## In proxy.conf ## realm netA { type = radius authhost = IPRadiusA:1812 accthost = IPRadiusA:1813 secret = secretAB nostrip } ## In clients.conf ## client IPRadiusA { secret = secretAB shortname = cric nastype = other } ## And in the radiusd.conf ## proxy_requests = yes $INCLUDE ${confdir}/proxy.conf
mad <psymad@gmail.com> wrote:
When A proxy request at B, and B try to response at B ... A "Received Unknown packet code 11from client 147.173.3.249 port 1812: Cannot validate signature Dropping packet without response."
Huh? Code 11 is Access-Challenge. The only way that message shows up is if something is drastically wrong with your system. Are you sure you cut & pasted the error correctly? It doesn't look like it. Alan DeKok.
Yes I'm sure ... It's very strange this error ... rad_recv: Access-Challenge packet from host 147.173.3.249 port 1812, id=3, length=172 Received Unknown packet code 11from client 147.173.3.249 port 1812: Cannot validate signature Dropping packet without response. Finished request 3 With you say I see one solution ... that I don't like ... Remove FreeRadius, and install the last CVS, (Today I have install the CVS of 2006-04-18), It's a solution ? Or it's a stupid ? Thanks
mad <psymad@gmail.com> wrote:
With you say I see one solution ... that I don't like ... Remove FreeRadius, and install the last CVS, (Today I have install the CVS of 2006-04-18), It's a solution ? Or it's a stupid ?
I would say upgrade to a newer version. It's an error that should never happen. Alan DeKok.
Reading the message a little more carefully... the problem is that the client is broken. It's sending an Access-Challenge to the authentication port. ONLY Access-Request packets are allowed there. Servers send Access-Challenges to clients in response to Access-Requests. If a system is sending an Access-Challenge to the server, then that system is broken and wrong. Alan DeKok.
participants (2)
-
Alan DeKok -
mad