FreeRADIUS server: Error in testing user access!
Dear all, Ive installed and configured FreeRADIUS 3.0.12 on Ubuntu 16.04 LTS. In the file /usr/local/etc/raddb/mods-available/eap Ive specified: - default_eap_type = peap in the general eap section, and - default_eap_type = mschapv2 in the peap section. After running the server with radiusd X, I test it with the default user bob defined in /usr/local/etc/raddb/users: radtest bob hello localhost 0 testing123 Regretfully, the authentication fails, the debugger saying: } # server radiusd: #### Opening IP addresses and Ports #### Listening on auth address 127.0.0.1 port 1812 Listening on acct address 127.0.0.1 port 1813 Listening on proxy address * port 39814 Ready to process requests (0) Received Access-Request Id 239 from 127.0.0.1:39509 to 127.0.0.1:1812 length 73 (0) User-Name = "bob" (0) User-Password = "hello" (0) NAS-IP-Address = 127.0.1.1 (0) NAS-Port = 0 (0) Message-Authenticator = 0x5456ab996d2c7087d14a1529bd8c950d (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user (0) Using Post-Auth-Type Reject (0) Post-Auth-Type sub-section not found. Ignoring. (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 239 from 127.0.0.1:1812 to 127.0.0.1:39509 length 20 Waking up in 3.9 seconds. (0) Cleaning up request packet ID 239 with timestamp +32 Ready to process requests Ive tried radtest with other auth methods (-t pap/chap/mschap) but it always fails! Whats wrong? Can someone help me, please? Thanks in advance, Pedro
On Nov 28, 2016, at 9:05 AM, Pedro García Teodoro <pgteodor@ugr.es> wrote:
Dear all,
I don't know what mail program you're using, but it's butchering your messages. That makes it very hard to read.
Regretfully, the authentication fails, the debugger saying: ... (0) Received Access-Request Id 239 from 127.0.0.1:39509 to 127.0.0.1:1812 length 73 (0) User-Name = "bob" (0) User-Password = "hello" (0) NAS-IP-Address = 127.0.1.1 (0) NAS-Port = 0 (0) Message-Authenticator = 0x5456ab996d2c7087d14a1529bd8c950d (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject
You edited the configuration and broke it. Don't do that. i.e. you edited raddb/sites-enabled/default, and destroyed it. Or, you removed it entirely. The default configuration works. The default installation of the server uses the default configuration. Which works. If you don't know how the server works, don't destroy the configuration files. Alan DeKok.
i,
Ive installed and configured FreeRADIUS 3.0.12 on Ubuntu 16.04 LTS.
In the file /usr/local/etc/raddb/mods-available/eap Ive specified:
- default_eap_type = peap in the general eap section, and
- default_eap_type = mschapv2 in the peap section.
After running the server with radiusd X, I test it with the default user bob defined in /usr/local/etc/raddb/users:
radtest bob hello localhost 0 testing123
radtest just does a PAP test....so it wont be testing EAP - you need to use either radeaptest or eapol_test (thats part of the wpa_supplicant package) what you've dont would pretty much work out of the box (for PAP) - so it suggests that other config files have been edited (the default virtual server should be present and will call files module by default)...thats assuming that you have actually 1) uncommented the bob user in files 2) ensured the server is reading your edited config files and isnt reading from some other locations (radiusd -X will show you what config files its reading! :) ) alan
On Mon, Nov 28, 2016 at 03:05:41PM +0100, Pedro García Teodoro wrote:
radiusd: #### Opening IP addresses and Ports ####
Listening on auth address 127.0.0.1 port 1812 Listening on acct address 127.0.0.1 port 1813 Listening on proxy address * port 39814 Ready to process requests (0) Received Access-Request Id 239 from 127.0.0.1:39509 to 127.0.0.1:1812 length 73 (0) User-Name = "bob" (0) User-Password = "hello" (0) NAS-IP-Address = 127.0.1.1 (0) NAS-Port = 0 (0) Message-Authenticator = 0x5456ab996d2c7087d14a1529bd8c950d (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user (0) Using Post-Auth-Type Reject
...
Whats wrong?
Going on that debug output... you've deleted everything out of sites-enabled/default. Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Right ... mods-enabled/ and sites-enabled/ were empty just after the installation process (./configure; make; make install)! I've linked manually mods-enabled/default, mods-enabled/inner-tunnel, sites-enabled/eap, ... and the problem is now fixed! Thank you all so much! Pedro -----Mensaje original----- De: Freeradius-Users [mailto:freeradius-users-bounces+pgteodor=ugr.es@lists.freeradius.org] En nombre de Matthew Newton Enviado el: lunes, 28 de noviembre de 2016 15:22 Para: FreeRadius users mailing list Asunto: Re: FreeRADIUS server: Error in testing user access! On Mon, Nov 28, 2016 at 03:05:41PM +0100, Pedro García Teodoro wrote:
radiusd: #### Opening IP addresses and Ports ####
Listening on auth address 127.0.0.1 port 1812 Listening on acct address 127.0.0.1 port 1813 Listening on proxy address * port 39814 Ready to process requests (0) Received Access-Request Id 239 from 127.0.0.1:39509 to 127.0.0.1:1812 length 73 (0) User-Name = "bob" (0) User-Password = "hello" (0) NAS-IP-Address = 127.0.1.1 (0) NAS-Port = 0 (0) Message-Authenticator = 0x5456ab996d2c7087d14a1529bd8c950d (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user (0) Using Post-Auth-Type Reject
...
What’s wrong?
Going on that debug output... you've deleted everything out of sites-enabled/default. Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
Right ... mods-enabled/ and sites-enabled/ were empty just after the installation process (./configure; make; make install)!
ummm, what have you done? are you sure it installed where you think it should have? never known this process to ever fail
I've linked manually mods-enabled/default, mods-enabled/inner-tunnel, sites-enabled/eap, ... and the problem is now fixed!
those paths and names are wrong. eap is a mods-enabled, default, inner-tunnel are in sites-enabled .... alan
The destination installation folder is /usr/local/etc/raddb. Everything seems to be Ok after 'make install', except folders mods-enabled and sites-enabled, which are empty! Right!... My fault in writting, as the correct links are sites-enabled/default, sites-enabled/inner-tunnel, mods-enabled/eap,... Thanks, Pedro ---- A.L.M.Buxey@lboro.ac.uk escribió ----
Hi,
Right ... mods-enabled/ and sites-enabled/ were empty just after the installation process (./configure; make; make install)!
ummm, what have you done? are you sure it installed where you think it should have? never known this process to ever fail
I've linked manually mods-enabled/default, mods-enabled/inner-tunnel, sites-enabled/eap, ... and the problem is now fixed!
those paths and names are wrong. eap is a mods-enabled, default, inner-tunnel are in sites-enabled ....
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Nov 28, 2016, at 3:05 PM, Pedro <pgteodor@ugr.es> wrote:
The destination installation folder is /usr/local/etc/raddb. Everything seems to be Ok after 'make install', except folders mods-enabled and sites-enabled, which are empty!
That doesn't happen. The only reason those directories are empty is if (a) the installation process stopped partway through with an error, or (b) you deleted those files after the installation finished. Alan DeKok.
Maybe...Anyway, the important thing at this point is that it works as expected! Best, Pedro ---- Alan DeKok escribió ----
On Nov 28, 2016, at 3:05 PM, Pedro <pgteodor@ugr.es> wrote:
The destination installation folder is /usr/local/etc/raddb. Everything seems to be Ok after 'make install', except folders mods-enabled and sites-enabled, which are empty!
That doesn't happen.
The only reason those directories are empty is if (a) the installation process stopped partway through with an error, or (b) you deleted those files after the installation finished.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (5)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Matthew Newton -
Pedro -
Pedro García Teodoro