Hi, I'm brand new to FreeRadius and just installed server 2.2.5. I have followed the wiki instruction (basic Configuration section) to do the simple test. The only thing I added is to add Testing Cleartext-Password := "password" in the /raddb/users Here is the debug information I had when I run Radtesting testing password localhost 0 testing123 rad_recv: Access-Request packet from host 127.0.0.1 port 32775, id=195, length=77 User-Name = "testing" User-Password = "password" NAS-IP-Address = 127.0.0.1 NAS-Port = 10 Message-Authenticator = 0x024f3a845461e5597651150741f365fd # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] No '@' in User-Name = "testing", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] = noop [eap] No EAP-Message, not doing EAP ++[eap] = noop ++[files] = noop ++[expiration] = noop ++[logintime] = noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] = noop +} # group authorize = ok ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Using Post-Auth-Type REJECT # Executing group from file /usr/local/etc/raddb/sites-enabled/default +group REJECT { [attr_filter.access_reject] expand: %{User-Name} -> testing attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] = updated +} # group REJECT = updated Delaying reject of request 2 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 2 Sending Access-Reject of id 195 to 127.0.0.1 port 32775 Waking up in 4.9 seconds. Cleaning up request 2 ID 195 with timestamp +530 Could anybody help to me to explain why it was rejected? (it looks like a no "known good" password issue but I don't know why) Great thanks, 4RF Limited The information in this email communication (inclusive of attachments) is confidential to 4RF Limited and the intended recipient(s). If you are not the intended recipient(s), please note that any use, disclosure, distribution or copying of this information or any part thereof is strictly prohibited and that the author accepts no liability for the consequences of any action taken on the basis of the information provided. If you have received this email in error, please notify the sender immediately by return email and then delete all instances of this email from your system. 4RF Limited will not accept responsibility for any consequences associated with the use of this email (including, but not limited to, damages sustained as a result of any viruses and/or any action or lack of action taken in reliance on it).
Hi,
I have followed the wiki instruction (basic Configuration section) to do the simple test. The only thing I added is to add
Testing Cleartext-Password := “password”
T
User-Name = "testing"
t and so:
++[files] = noop
Stefan -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
Hi Stefan, Actually I was using small "t" on both users file and client command but I still see ++[files] = noop What is the really problem? Cheers, -----Original Message----- From: freeradius-users-bounces+frank.wei=4rf.com@lists.freeradius.org [mailto:freeradius-users-bounces+frank.wei=4rf.com@lists.freeradius.org] On Behalf Of Stefan Winter Sent: Monday, 8 September 2014 6:22 p.m. To: freeradius-users@lists.freeradius.org Subject: Re: Beginner need help Hi,
I have followed the wiki instruction (basic Configuration section) to do the simple test. The only thing I added is to add
Testing Cleartext-Password := "password"
T
User-Name = "testing"
t and so:
++[files] = noop
Stefan -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66 The information in this email communication (inclusive of attachments) is confidential to 4RF Limited and the intended recipient(s). If you are not the intended recipient(s), please note that any use, disclosure, distribution or copying of this information or any part thereof is strictly prohibited and that the author accepts no liability for the consequences of any action taken on the basis of the information provided. If you have received this email in error, please notify the sender immediately by return email and then delete all instances of this email from your system. 4RF Limited will not accept responsibility for any consequences associated with the use of this email (including, but not limited to, damages sustained as a result of any viruses and/or any action or lack of action taken in reliance on it).
Frank Wei wrote:
Hi Stefan,
Actually I was using small "t" on both users file and client command but I still see
++[files] = noop
What is the really problem?
The user isn't being found in the "users" file. You're not editing the "users" file which the server is reading. Or, the username sent by radclient isn't the same as the username in the "users" file. Alan DeKok.
Hi Alan, The users file I edited is in etc/raddb. testing Cleartext-Password := "password" The client command I was using is "radtest testing password 127.0.0.1 0 testing123" Anything wrong with them? Cheers, -----Original Message----- From: freeradius-users-bounces+frank.wei=4rf.com@lists.freeradius.org [mailto:freeradius-users-bounces+frank.wei=4rf.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, 9 September 2014 10:10 a.m. To: FreeRadius users mailing list Subject: Re: Beginner need help Frank Wei wrote:
Hi Stefan,
Actually I was using small "t" on both users file and client command but I still see
++[files] = noop
What is the really problem?
The user isn't being found in the "users" file. You're not editing the "users" file which the server is reading. Or, the username sent by radclient isn't the same as the username in the "users" file. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html The information in this email communication (inclusive of attachments) is confidential to 4RF Limited and the intended recipient(s). If you are not the intended recipient(s), please note that any use, disclosure, distribution or copying of this information or any part thereof is strictly prohibited and that the author accepts no liability for the consequences of any action taken on the basis of the information provided. If you have received this email in error, please notify the sender immediately by return email and then delete all instances of this email from your system. 4RF Limited will not accept responsibility for any consequences associated with the use of this email (including, but not limited to, damages sustained as a result of any viruses and/or any action or lack of action taken in reliance on it).
Frank Wei wrote:
Hi Alan,
The users file I edited is in etc/raddb. testing Cleartext-Password := "password"
The client command I was using is
"radtest testing password 127.0.0.1 0 testing123"
Anything wrong with them?
Yes. Because it isn't working. What's wrong? I don't know. All I know is that I add a user to the TOP of the "users" file, and it works. Alan DeKok.
Hi,
The users file I edited is in etc/raddb. testing Cleartext-Password := "password"
which etc/raddb ? the one in the source tree or the one that got installed? do you have multiple copies of freeradius installed? read the radiusd -X debug putput to see which users file it is editing, then edit that file also, after editing the file you need to restart the server or your changes wont be picked up alan
Oh, Thanks! -----Original Message----- From: freeradius-users-bounces+frank.wei=4rf.com@lists.freeradius.org [mailto:freeradius-users-bounces+frank.wei=4rf.com@lists.freeradius.org] On Behalf Of A.L.M.Buxey@lboro.ac.uk Sent: Tuesday, 9 September 2014 11:07 a.m. To: FreeRadius users mailing list Subject: Re: Beginner need help Hi,
The users file I edited is in etc/raddb. testing Cleartext-Password := "password"
which etc/raddb ? the one in the source tree or the one that got installed? do you have multiple copies of freeradius installed? read the radiusd -X debug putput to see which users file it is editing, then edit that file also, after editing the file you need to restart the server or your changes wont be picked up alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html The information in this email communication (inclusive of attachments) is confidential to 4RF Limited and the intended recipient(s). If you are not the intended recipient(s), please note that any use, disclosure, distribution or copying of this information or any part thereof is strictly prohibited and that the author accepts no liability for the consequences of any action taken on the basis of the information provided. If you have received this email in error, please notify the sender immediately by return email and then delete all instances of this email from your system. 4RF Limited will not accept responsibility for any consequences associated with the use of this email (including, but not limited to, damages sustained as a result of any viruses and/or any action or lack of action taken in reliance on it).
Hi, I've downloaded "freeradius-client-1.1.6.tar.bz2" and untarted. Then I tried to installed as following: ./configure Make install Now I want to test this client (I have already installed freeradius server on the same LINUX PC and this server proved to be working). The only useful information on the freeradius client is radiusclient [-f config_file] [-p nas_port] [-s | [-a] a1=v1 [a2=v2[...[aN=vN]...]]] Not how to use above to test the client. How can I create the "config_file" ? Best Regards, Frank -----Original Message----- From: freeradius-users-bounces+frank.wei=4rf.com@lists.freeradius.org [mailto:freeradius-users-bounces+frank.wei=4rf.com@lists.freeradius.org] On Behalf Of Frank Wei Sent: Tuesday, 9 September 2014 12:03 p.m. To: 'FreeRadius users mailing list' Subject: RE: Beginner need help Oh, Thanks! -----Original Message----- From: freeradius-users-bounces+frank.wei=4rf.com@lists.freeradius.org [mailto:freeradius-users-bounces+frank.wei=4rf.com@lists.freeradius.org] On Behalf Of A.L.M.Buxey@lboro.ac.uk Sent: Tuesday, 9 September 2014 11:07 a.m. To: FreeRadius users mailing list Subject: Re: Beginner need help Hi,
The users file I edited is in etc/raddb. testing Cleartext-Password := "password"
which etc/raddb ? the one in the source tree or the one that got installed? do you have multiple copies of freeradius installed? read the radiusd -X debug putput to see which users file it is editing, then edit that file also, after editing the file you need to restart the server or your changes wont be picked up alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html The information in this email communication (inclusive of attachments) is confidential to 4RF Limited and the intended recipient(s). If you are not the intended recipient(s), please note that any use, disclosure, distribution or copying of this information or any part thereof is strictly prohibited and that the author accepts no liability for the consequences of any action taken on the basis of the information provided. If you have received this email in error, please notify the sender immediately by return email and then delete all instances of this email from your system. 4RF Limited will not accept responsibility for any consequences associated with the use of this email (including, but not limited to, damages sustained as a result of any viruses and/or any action or lack of action taken in reliance on it). - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html The information in this email communication (inclusive of attachments) is confidential to 4RF Limited and the intended recipient(s). If you are not the intended recipient(s), please note that any use, disclosure, distribution or copying of this information or any part thereof is strictly prohibited and that the author accepts no liability for the consequences of any action taken on the basis of the information provided. If you have received this email in error, please notify the sender immediately by return email and then delete all instances of this email from your system. 4RF Limited will not accept responsibility for any consequences associated with the use of this email (including, but not limited to, damages sustained as a result of any viruses and/or any action or lack of action taken in reliance on it).
Frank Wei wrote:
The only useful information on the freeradius client is
radiusclient [-f config_file] [-p nas_port] [-s | [-a] a1=v1 [a2=v2[...[aN=vN]...]]]
Not how to use above to test the client. How can I create the "config_file" ?
See etc/radiusclient.conf in the "tar" file. Alan DeKok.
Hi, I wanted to authenticate username "testing" with password "password". First I used the "radtest" utility and I've got radtest testing password 127.0.0.1 0 testing123 Sending Access-Request of id 132 to 127.0.0.1 port 1812 User-Name = "testing" User-Password = "password" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=132, length=20 Then try to use "radlogin" utility to do the authentication (I uncommented the line in file /usr/local/etc/radiusclient/servers to make the shared secret to be testing 123), I got radlogin ($Id: radlogin.c,v 1.9 2008/01/09 07:04:18 sobomax Exp $) ----------------------------------------------------- Linux 2.6.9-1.667smp (softdev2.local.4rf.com) (port 2) ----------------------------------------------------- login: testing Password: RADIUS: /dev/pts/2local: Authentication failure Note during the above testing, the freeradius server did not receive any request. It looks like I missed some configure in the client side as "radtest" worked. Could somebody help me what I have missed. Cheers, -----Original Message----- From: freeradius-users-bounces+frank.wei=4rf.com@lists.freeradius.org [mailto:freeradius-users-bounces+frank.wei=4rf.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Monday, 22 September 2014 2:15 p.m. To: FreeRadius users mailing list Subject: Re: Beginner need help Frank Wei wrote:
The only useful information on the freeradius client is
radiusclient [-f config_file] [-p nas_port] [-s | [-a] a1=v1 [a2=v2[...[aN=vN]...]]]
Not how to use above to test the client. How can I create the "config_file" ?
See etc/radiusclient.conf in the "tar" file. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html The information in this email communication (inclusive of attachments) is confidential to 4RF Limited and the intended recipient(s). If you are not the intended recipient(s), please note that any use, disclosure, distribution or copying of this information or any part thereof is strictly prohibited and that the author accepts no liability for the consequences of any action taken on the basis of the information provided. If you have received this email in error, please notify the sender immediately by return email and then delete all instances of this email from your system. 4RF Limited will not accept responsibility for any consequences associated with the use of this email (including, but not limited to, damages sustained as a result of any viruses and/or any action or lack of action taken in reliance on it).
Hi,
Now I want to test this client (I have already installed freeradius server on the same LINUX PC and this server proved to be working).
there are various client testing tools with the main freeradius server package - also eapol_test from the wpa_supplicant package is very useful!
The only useful information on the freeradius client is
radiusclient [-f config_file] [-p nas_port] [-s | [-a] a1=v1 [a2=v2[...[aN=vN]...]]]
-f the config file - theres one supplied...should be in your /etc directory now. then you feed it a list of VSA/TLV values. not as friendly as eg eapol_test or radclient alan
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Frank Wei -
Stefan Winter