free radius server sends Shared secret is incorrect
Hello, Iam running the free radius server which i downloaded from freeradius.org I am using my own radius client and not the radius client which is provided along with the server. This is the response which i get Listening on authentication 132.186.71.56:1812 Listening on accounting 132.186.71.56:1813 Listening on proxy 132.186.71.56:1814 Ready to process requests. rad_recv: Accounting-Request packet from host 132.186.71.55:1813, id=60, length=20 Received Accounting-Request packet from 132.186.71.55 with invalid signature! (Shared secret is incorrect.) Server rejecting request 0. Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- However in the /usr/local/etc/raddb/clients.conf i have specified as client 132.186.71.55 { secret = geheimesPasswort shortname = imscpt1 } This 132.186.71.55 is the client from where is send the RADIUS Accounting request. The client's secrets.cfg has the following info. # # RADIUS Secrets Configuration File # # Example: # 12.34.45.67 sOMEsTUPIDsECRET 132.186.71.56 geheimesPasswort Could you tell me where i'm going wrong.How to make the server accept my request and how do i get back a response?? Regards, tester --------------------------------- Do you Yahoo!? New and Improved Yahoo! Mail - 1GB free storage!
Geraldin Arthy <geraldinarthy@yahoo.co.in> wrote:
I am using my own radius client and not the radius client which is provided along with the server. This is the response which i get .. Received Accounting-Request packet from 132.186.71.55 with invalid signature! (Shared secret is incorrect.) ... Could you tell me where i'm going wrong.How to make the server accept my request and how do i get back a response??
You fix your client to properly implement the RFC. Good luck debugging it. It's not a FreeRADIUS issue, so I suggest you don't ask further questions about it here. And why the heck is this so complicated? FreeRADIUS comes with source code that implements this already! Is it really so difficult to read that code, and learn from it? Alan DeKok.
participants (2)
-
Alan DeKok -
Geraldin Arthy