mac-based authentification fail
Hello gentlemen's, After one week search the web for a solution, i come to this maling list. I have to set up a mac-based authentication system (pretty simple) with HP procurve swtichs. I have see lot of tutorials, buy a book, download more, but it still don't work (access-request denied). I hope somebody can look at my basic problem a few minute. User is reconized (found at line X), but freeradius don't know how to interprete the password (I think). I have see that the CHAP-password attribute send by the client (HP Procurve 2800), is not the same heach time. Is it normal (I don't think). The switch look like he is well configured (running-config in attachement). In attachement, you will find initialisation of freeradius (radius_init), an acces-request from the client (acces-request), the entry of my test user (users), and the running config of the HP Procurve. I hope somebody know this problem. Kind regards Sébastien Serre -- Service informatique IBGC CNRS 1 rue Camille Saint Saens 33077 BORDEAUX CEDEX Tel. +33 (0)5 56 99 90 04 Fax. +33 (0)5 56 99 90 59 http://www.ibgc.cnrs.fr
After one week search the web for a solution, i come to this maling list.
That's a week wasted. Freeradius is under active development and information on the Internet is in most cases out of date. Like the instructions you followed. If only you followed examples in users file ...
I have to set up a mac-based authentication system (pretty simple) with HP procurve swtichs. I have see lot of tutorials, buy a book, download more, but it still don't work (access-request denied).
Because Auth-Type Local is breaking chap. Remove that. And change password attribute and operator to Cleartext-Password := like in all the examples in users file. Ivan Kalik Kalik Informatika ISP
Le Tuesday 28 April 2009 11:42:27 Ivan Kalik, vous avez écrit :
adius is under active development and information on the Internet i
Youre right. It works! I m so ... disapointed. Thanks a lot kalik. -- Service informatique IBGC CNRS 1 rue Camille Saint Saens 33077 BORDEAUX CEDEX Tel. +33 (0)5 56 99 90 04 Fax. +33 (0)5 56 99 90 59 http://www.ibgc.cnrs.fr
On 28/4/09 12:30, sserre wrote:
Le Tuesday 28 April 2009 11:42:27 Ivan Kalik, vous avez écrit :
adius is under active development and information on the Internet i
Youre right. It works! I m so ... disapointed.
Thanks a lot kalik.
Loads of people seem to be asking for this, so i've hashed out a quick example in the wiki for FR v2. http://wiki.freeradius.org/Mac-Auth Thanks, Arran -- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk), Authentication, Authorisation and Accounting Officer, Infrastructure Services (IT Services), E1-1-08, Engineering 1, University Of Sussex, Brighton, BN1 9QT DDI+FAX: +44 1273 873900 | INT: 3900 GPG: 86FF A285 1AA1 EE40 D228 7C2E 71A9 25BB 1E68 54A2
participants (3)
-
Arran Cudbard-Bell -
Ivan Kalik -
sserre