Fwd: authentication Failure
Hello So i have setup freeradius on CentOS Linux release 7.1.1503 (Core) added a client to clients.conf *client (ip-of-client) { secret = (Secret) shortname = (Shortname) nas_type = cisco* and added a user in users *user Auth-Type := System Service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=15"* i have user and group set to radiusd in raduisd.conf and radiusd is the owner and group for raddb and all files in the raddb However, when i run a radtest...bellow is my out put *[root@xxx]# radtest username password localhost 0 testing123Sending Access-Request Id 224 from 0.0.0.0:40961 <http://0.0.0.0:40961> to 127.0.0.1:1812 <http://127.0.0.1:1812> User-Name = 'username' User-Password = 'password' NAS-IP-Address = (ip of server host) NAS-Port = 0 Message-Authenticator = 0x00Received Access-Reject Id 224 from 127.0.0.1:1812 <http://127.0.0.1:1812> to 127.0.0.1:40961 <http://127.0.0.1:40961> length 20(0) -: Expected Access-Accept got Access-Reject[root@xxx]# * Could someone please point me in the right direction to were the problem could be.. Awaiting your timely response Regards Ritah
On Dec 2, 2015, at 9:37 AM, Ryta Kashemire <rytaluv@gmail.com> wrote:
So i have setup freeradius on CentOS Linux release 7.1.1503 (Core)
OK...
added a client to clients.conf
*client (ip-of-client) { secret = (Secret) shortname = (Shortname) nas_type = cisco*
That's badly formatted and nearly content free. i.e. there wasn't much use in posting it.
and added a user in users
*user Auth-Type := System Service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=15"*
OK...
i have user and group set to radiusd in raduisd.conf and radiusd is the owner and group for raddb and all files in the radii
That's the default.
However, when i run a radtest...bellow is my out put
Yeah... no. Run the server in debugging mode as suggested in the "man" page, web pages, and daily on this list. And then *read* the output. ALL OF IT. Your other post makes it clear that you haven't bothered reading it. I guarantee you that the answer to your problem is in the debug output. Either read it yourself, or post the *entire* debug output to the list so that someone else can read it.
Awaiting your timely response
Don't post that. It's rude. This is a free list. You *cannot* ask for a timely response. Alan DeKok.
Thank you for you response Iam a newbee so i could miss something easily I have attached my debug results Ritah On Wed, Dec 2, 2015 at 5:58 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Dec 2, 2015, at 9:37 AM, Ryta Kashemire <rytaluv@gmail.com> wrote:
So i have setup freeradius on CentOS Linux release 7.1.1503 (Core)
OK...
added a client to clients.conf
*client (ip-of-client) { secret = (Secret) shortname = (Shortname) nas_type = cisco*
That's badly formatted and nearly content free. i.e. there wasn't much use in posting it.
and added a user in users
*user Auth-Type := System Service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=15"*
OK...
i have user and group set to radiusd in raduisd.conf and radiusd is the owner and group for raddb and all files in the radii
That's the default.
However, when i run a radtest...bellow is my out put
Yeah... no.
Run the server in debugging mode as suggested in the "man" page, web pages, and daily on this list.
And then *read* the output.
ALL OF IT.
Your other post makes it clear that you haven't bothered reading it. I guarantee you that the answer to your problem is in the debug output.
Either read it yourself, or post the *entire* debug output to the list so that someone else can read it.
Awaiting your timely response
Don't post that. It's rude.
This is a free list. You *cannot* ask for a timely response.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Dec 2, 2015, at 10:11 AM, Ryta Kashemire <rytaluv@gmail.com> wrote:
Thank you for you response
Iam a newbee so i could miss something easily
It's pretty simple. READ the output. Honestly, it's not hard.
I have attached my debug results
(0) Found Auth-Type = System (0) # Executing group from file /etc/raddb/sites-enabled/default (0) Failed to authenticate the user Does that mean anything to you? Did you check if "Auth-Type System" was enabled in that file? My guess is that you're following some 8 year-old guide without really understanding what's going on. Don't do that. Follow the instructions on http://freeradius.org/doc/. It WILL WORK. Alan DeKok.
You have added the user to the users file but have told freeradius to use the System auth type ....which means eg /etc/passwd entry..... have you enabled the unix module in sites-enabled/default file? Have you added the user to the system password (ie created a local account) ? alan
participants (3)
-
Alan Buxey -
Alan DeKok -
Ryta Kashemire