Hi All, I have suffered enough, now I d like to expose my nightmare. Freeradius-server-2.1.6 + OpenLdap. Both of the servers work perfectly, there is no firewall between them or something that can block the traffic: All Correct! but the server still has no response with the weird radclient message ! At the radius debug , authentication is mentioned as successfully (bind was successfully) What's going on ? Best! -- JJohnny R. vasiana09@gmail.com
RANDRIAMAMPIONONA José Johnny wrote:
Hi All, I have suffered enough, now I d like to expose my nightmare. Freeradius-server-2.1.6 + OpenLdap. Both of the servers work perfectly, there is no firewall between them or something that can block the traffic: All Correct! but the server still has no response with the weird radclient message ! At the radius debug , authentication is mentioned as successfully (bind was successfully) What's going on ?
Post the debug output as suggested in the FAQ, README, INSTALL, "man" page, and daily on this list. Alan DeKok.
Here are the debug from the radius server: ************************************************************************************************************************************************************* *Wed Aug 19 04:32:30 2009 : Info: FreeRADIUS Version 2.1.6, for host i686-pc-linux-gnu, built on Jul 29 2009 at 23:42:06 Wed Aug 19 04:32:30 2009 : Info: Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. Wed Aug 19 04:32:30 2009 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Wed Aug 19 04:32:30 2009 : Info: PARTICULAR PURPOSE. Wed Aug 19 04:32:30 2009 : Info: You may redistribute copies of FreeRADIUS under the terms of the Wed Aug 19 04:32:30 2009 : Info: GNU General Public License v2. Wed Aug 19 04:32:30 2009 : Info: Starting - reading configuration files ... Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/radiusd.conf Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/proxy.conf Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/clients.conf Wed Aug 19 04:32:30 2009 : Debug: including files in directory /usr/local/freeradius-server-2.1.6/etc/raddb/modules/ Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/pap Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/smsotp Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/radutmp Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/detail Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/sqlcounter_expire_on_login Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/policy Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/files Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/attr_filter Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/echo Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/passwd Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/ldap Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/realm Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/checkval Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/perl Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/wimax Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/counter Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/expiration Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/smbpasswd Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/logintime Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/unix Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/sradutmp Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/etc_group Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/digest Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/attr_rewrite Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/mac2ip Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/detail.log Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/sql_log Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/inner-eap Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/always Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/preprocess Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/ippool Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/mschap Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/expr Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/otp Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/linelog Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/chap Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/acct_unique Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/exec Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/mac2vlan Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/pam Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/krb5 Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/modules/detail.example.com Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/eap.conf Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/policy.conf Wed Aug 19 04:32:30 2009 : Debug: including files in directory /usr/local/freeradius-server-2.1.6/etc/raddb/sites-enabled/ Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/sites-enabled/control-socket Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/sites-enabled/inner-tunnel Wed Aug 19 04:32:30 2009 : Debug: including configuration file /usr/local/freeradius-server-2.1.6/etc/raddb/sites-enabled/default Wed Aug 19 04:32:30 2009 : Debug: including dictionary file /usr/local/freeradius-server-2.1.6/etc/raddb/dictionary Wed Aug 19 04:32:30 2009 : Debug: main { Wed Aug 19 04:32:30 2009 : Debug: prefix = "/usr/local/freeradius-server-2.1.6" Wed Aug 19 04:32:30 2009 : Debug: localstatedir = "/usr/local/freeradius-server-2.1.6/var" Wed Aug 19 04:32:30 2009 : Debug: logdir = "/usr/local/freeradius-server-2.1.6/var/log/radius" Wed Aug 19 04:32:30 2009 : Debug: libdir = "/usr/local/freeradius-server-2.1.6/lib" Wed Aug 19 04:32:30 2009 : Debug: radacctdir = "/usr/local/freeradius-server-2.1.6/var/log/radius/radacct" Wed Aug 19 04:32:30 2009 : Debug: hostname_lookups = no Wed Aug 19 04:32:30 2009 : Debug: max_request_time = 30 Wed Aug 19 04:32:30 2009 : Debug: cleanup_delay = 5 Wed Aug 19 04:32:30 2009 : Debug: max_requests = 1024 Wed Aug 19 04:32:30 2009 : Debug: allow_core_dumps = no Wed Aug 19 04:32:30 2009 : Debug: pidfile = "/usr/local/freeradius-server-2.1.6/var/run/radiusd/radiusd.pid" Wed Aug 19 04:32:30 2009 : Debug: checkrad = "/usr/local/freeradius-server-2.1.6/sbin/checkrad" Wed Aug 19 04:32:30 2009 : Debug: debug_level = 0 Wed Aug 19 04:32:30 2009 : Debug: proxy_requests = yes Wed Aug 19 04:32:30 2009 : Debug: log { Wed Aug 19 04:32:30 2009 : Debug: stripped_names = no Wed Aug 19 04:32:30 2009 : Debug: auth = no Wed Aug 19 04:32:30 2009 : Debug: auth_badpass = no Wed Aug 19 04:32:30 2009 : Debug: auth_goodpass = no Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: security { Wed Aug 19 04:32:30 2009 : Debug: max_attributes = 200 Wed Aug 19 04:32:30 2009 : Debug: reject_delay = 1 Wed Aug 19 04:32:30 2009 : Debug: status_server = yes Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: radiusd: #### Loading Realms and Home Servers #### Wed Aug 19 04:32:30 2009 : Debug: proxy server { Wed Aug 19 04:32:30 2009 : Debug: retry_delay = 5 Wed Aug 19 04:32:30 2009 : Debug: retry_count = 3 Wed Aug 19 04:32:30 2009 : Debug: default_fallback = no Wed Aug 19 04:32:30 2009 : Debug: dead_time = 120 Wed Aug 19 04:32:30 2009 : Debug: wake_all_if_all_dead = no Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: home_server localhost { Wed Aug 19 04:32:30 2009 : Debug: ipaddr = 127.0.0.1 Wed Aug 19 04:32:30 2009 : Debug: port = 1812 Wed Aug 19 04:32:30 2009 : Debug: type = "auth" Wed Aug 19 04:32:30 2009 : Debug: secret = "testing123" Wed Aug 19 04:32:30 2009 : Debug: response_window = 20 Wed Aug 19 04:32:30 2009 : Debug: max_outstanding = 65536 Wed Aug 19 04:32:30 2009 : Debug: require_message_authenticator = no Wed Aug 19 04:32:30 2009 : Debug: zombie_period = 40 Wed Aug 19 04:32:30 2009 : Debug: status_check = "status-server" Wed Aug 19 04:32:30 2009 : Debug: ping_interval = 30 Wed Aug 19 04:32:30 2009 : Debug: check_interval = 30 Wed Aug 19 04:32:30 2009 : Debug: num_answers_to_alive = 3 Wed Aug 19 04:32:30 2009 : Debug: num_pings_to_alive = 3 Wed Aug 19 04:32:30 2009 : Debug: revive_interval = 120 Wed Aug 19 04:32:30 2009 : Debug: status_check_timeout = 4 Wed Aug 19 04:32:30 2009 : Debug: irt = 2 Wed Aug 19 04:32:30 2009 : Debug: mrt = 16 Wed Aug 19 04:32:30 2009 : Debug: mrc = 5 Wed Aug 19 04:32:30 2009 : Debug: mrd = 30 Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: home_server_pool my_auth_failover { Wed Aug 19 04:32:30 2009 : Debug: type = fail-over Wed Aug 19 04:32:30 2009 : Debug: home_server = localhost Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: realm example.com { Wed Aug 19 04:32:30 2009 : Debug: auth_pool = my_auth_failover Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: realm LOCAL { Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: radiusd: #### Loading Clients #### Wed Aug 19 04:32:30 2009 : Debug: client 127.0.0.1 { Wed Aug 19 04:32:30 2009 : Debug: require_message_authenticator = no Wed Aug 19 04:32:30 2009 : Debug: secret = "testtest" Wed Aug 19 04:32:30 2009 : Debug: shortname = "localhost" Wed Aug 19 04:32:30 2009 : Debug: nastype = "other" Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: client 192.168.0.0/16 { Wed Aug 19 04:32:30 2009 : Debug: require_message_authenticator = no Wed Aug 19 04:32:30 2009 : Debug: secret = "testtest" Wed Aug 19 04:32:30 2009 : Debug: shortname = "private-network-2" Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: radiusd: #### Instantiating modules #### Wed Aug 19 04:32:30 2009 : Debug: instantiate { Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_exec, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_exec Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating exec Wed Aug 19 04:32:30 2009 : Debug: exec { Wed Aug 19 04:32:30 2009 : Debug: wait = no Wed Aug 19 04:32:30 2009 : Debug: input_pairs = "request" Wed Aug 19 04:32:30 2009 : Debug: shell_escape = yes Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_expr, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_expr Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating expr Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_expiration, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_expiration Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating expiration Wed Aug 19 04:32:30 2009 : Debug: expiration { Wed Aug 19 04:32:30 2009 : Debug: reply-message = "Password Has Expired " Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_logintime, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_logintime Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating logintime Wed Aug 19 04:32:30 2009 : Debug: logintime { Wed Aug 19 04:32:30 2009 : Debug: reply-message = "You are calling outside your allowed timespan " Wed Aug 19 04:32:30 2009 : Debug: minimum-timeout = 60 Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: radiusd: #### Loading Virtual Servers #### Wed Aug 19 04:32:30 2009 : Debug: server inner-tunnel { Wed Aug 19 04:32:30 2009 : Debug: modules { Wed Aug 19 04:32:30 2009 : Debug: Module: Checking authenticate {...} for more modules to load Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_pap, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_pap Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating pap Wed Aug 19 04:32:30 2009 : Debug: pap { Wed Aug 19 04:32:30 2009 : Debug: encryption_scheme = "auto" Wed Aug 19 04:32:30 2009 : Debug: auto_header = no Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_chap, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_chap Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating chap Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_mschap, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_mschap Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating mschap Wed Aug 19 04:32:30 2009 : Debug: mschap { Wed Aug 19 04:32:30 2009 : Debug: use_mppe = yes Wed Aug 19 04:32:30 2009 : Debug: require_encryption = no Wed Aug 19 04:32:30 2009 : Debug: require_strong = no Wed Aug 19 04:32:30 2009 : Debug: with_ntdomain_hack = no Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_unix, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_unix Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating unix Wed Aug 19 04:32:30 2009 : Debug: unix { Wed Aug 19 04:32:30 2009 : Debug: radwtmp = "/usr/local/freeradius-server-2.1.6/var/log/radius/radwtmp" Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_eap, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_eap Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating eap Wed Aug 19 04:32:30 2009 : Debug: eap { Wed Aug 19 04:32:30 2009 : Debug: default_eap_type = "md5" Wed Aug 19 04:32:30 2009 : Debug: timer_expire = 60 Wed Aug 19 04:32:30 2009 : Debug: ignore_unknown_eap_types = no Wed Aug 19 04:32:30 2009 : Debug: cisco_accounting_username_bug = no Wed Aug 19 04:32:30 2009 : Debug: max_sessions = 2048 Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to sub-module rlm_eap_md5 Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating eap-md5 Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to sub-module rlm_eap_leap Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating eap-leap Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to sub-module rlm_eap_gtc Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating eap-gtc Wed Aug 19 04:32:30 2009 : Debug: gtc { Wed Aug 19 04:32:30 2009 : Debug: challenge = "Password: " Wed Aug 19 04:32:30 2009 : Debug: auth_type = "PAP" Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to sub-module rlm_eap_tls Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating eap-tls Wed Aug 19 04:32:30 2009 : Debug: tls { Wed Aug 19 04:32:30 2009 : Debug: rsa_key_exchange = no Wed Aug 19 04:32:30 2009 : Debug: dh_key_exchange = yes Wed Aug 19 04:32:30 2009 : Debug: rsa_key_length = 512 Wed Aug 19 04:32:30 2009 : Debug: dh_key_length = 512 Wed Aug 19 04:32:30 2009 : Debug: verify_depth = 0 Wed Aug 19 04:32:30 2009 : Debug: pem_file_type = yes Wed Aug 19 04:32:30 2009 : Debug: private_key_file = "/usr/local/freeradius-server-2.1.6/etc/raddb/certs/server.pem" Wed Aug 19 04:32:30 2009 : Debug: certificate_file = "/usr/local/freeradius-server-2.1.6/etc/raddb/certs/server.pem" Wed Aug 19 04:32:30 2009 : Debug: CA_file = "/usr/local/freeradius-server-2.1.6/etc/raddb/certs/ca.pem" Wed Aug 19 04:32:30 2009 : Debug: private_key_password = "whatever" Wed Aug 19 04:32:30 2009 : Debug: dh_file = "/usr/local/freeradius-server-2.1.6/etc/raddb/certs/dh" Wed Aug 19 04:32:30 2009 : Debug: random_file = "/usr/local/freeradius-server-2.1.6/etc/raddb/certs/random" Wed Aug 19 04:32:30 2009 : Debug: fragment_size = 1024 Wed Aug 19 04:32:30 2009 : Debug: include_length = yes Wed Aug 19 04:32:30 2009 : Debug: check_crl = no Wed Aug 19 04:32:30 2009 : Debug: cipher_list = "DEFAULT" Wed Aug 19 04:32:30 2009 : Debug: make_cert_command = "/usr/local/freeradius-server-2.1.6/etc/raddb/certs/bootstrap" Wed Aug 19 04:32:30 2009 : Debug: cache { Wed Aug 19 04:32:30 2009 : Debug: enable = no Wed Aug 19 04:32:30 2009 : Debug: lifetime = 24 Wed Aug 19 04:32:30 2009 : Debug: max_entries = 255 Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to sub-module rlm_eap_ttls Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating eap-ttls Wed Aug 19 04:32:30 2009 : Debug: ttls { Wed Aug 19 04:32:30 2009 : Debug: default_eap_type = "md5" Wed Aug 19 04:32:30 2009 : Debug: copy_request_to_tunnel = no Wed Aug 19 04:32:30 2009 : Debug: use_tunneled_reply = no Wed Aug 19 04:32:30 2009 : Debug: virtual_server = "inner-tunnel" Wed Aug 19 04:32:30 2009 : Debug: include_length = yes Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to sub-module rlm_eap_peap Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating eap-peap Wed Aug 19 04:32:30 2009 : Debug: peap { Wed Aug 19 04:32:30 2009 : Debug: default_eap_type = "mschapv2" Wed Aug 19 04:32:30 2009 : Debug: copy_request_to_tunnel = no Wed Aug 19 04:32:30 2009 : Debug: use_tunneled_reply = no Wed Aug 19 04:32:30 2009 : Debug: proxy_tunneled_request_as_eap = yes Wed Aug 19 04:32:30 2009 : Debug: virtual_server = "inner-tunnel" Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to sub-module rlm_eap_mschapv2 Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating eap-mschapv2 Wed Aug 19 04:32:30 2009 : Debug: mschapv2 { Wed Aug 19 04:32:30 2009 : Debug: with_ntdomain_hack = no Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Module: Checking authorize {...} for more modules to load Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_realm, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_realm Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating suffix Wed Aug 19 04:32:30 2009 : Debug: realm suffix { Wed Aug 19 04:32:30 2009 : Debug: format = "suffix" Wed Aug 19 04:32:30 2009 : Debug: delimiter = "@" Wed Aug 19 04:32:30 2009 : Debug: ignore_default = no Wed Aug 19 04:32:30 2009 : Debug: ignore_null = no Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_files, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_files Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating files Wed Aug 19 04:32:30 2009 : Debug: files { Wed Aug 19 04:32:30 2009 : Debug: usersfile = "/usr/local/freeradius-server-2.1.6/etc/raddb/users" Wed Aug 19 04:32:30 2009 : Debug: acctusersfile = "/usr/local/freeradius-server-2.1.6/etc/raddb/acct_users" Wed Aug 19 04:32:30 2009 : Debug: preproxy_usersfile = "/usr/local/freeradius-server-2.1.6/etc/raddb/preproxy_users" Wed Aug 19 04:32:30 2009 : Debug: compat = "no" Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Module: Checking session {...} for more modules to load Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_radutmp, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_radutmp Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating radutmp Wed Aug 19 04:32:30 2009 : Debug: radutmp { Wed Aug 19 04:32:30 2009 : Debug: filename = "/usr/local/freeradius-server-2.1.6/var/log/radius/radutmp" Wed Aug 19 04:32:30 2009 : Debug: username = "%{User-Name}" Wed Aug 19 04:32:30 2009 : Debug: case_sensitive = yes Wed Aug 19 04:32:30 2009 : Debug: check_with_nas = yes Wed Aug 19 04:32:30 2009 : Debug: perm = 384 Wed Aug 19 04:32:30 2009 : Debug: callerid = yes Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Module: Checking post-proxy {...} for more modules to load Wed Aug 19 04:32:30 2009 : Debug: Module: Checking post-auth {...} for more modules to load Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_attr_filter, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_attr_filter Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating attr_filter.access_reject Wed Aug 19 04:32:30 2009 : Debug: attr_filter attr_filter.access_reject { Wed Aug 19 04:32:30 2009 : Debug: attrsfile = "/usr/local/freeradius-server-2.1.6/etc/raddb/attrs.access_reject" Wed Aug 19 04:32:30 2009 : Debug: key = "%{User-Name}" Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: } # modules Wed Aug 19 04:32:30 2009 : Debug: } # server Wed Aug 19 04:32:30 2009 : Debug: server { Wed Aug 19 04:32:30 2009 : Debug: modules { Wed Aug 19 04:32:30 2009 : Debug: Module: Checking authenticate {...} for more modules to load Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_ldap, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_ldap Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating ldap Wed Aug 19 04:32:30 2009 : Debug: ldap { Wed Aug 19 04:32:30 2009 : Debug: server = "ldap.uae.ac.ma" Wed Aug 19 04:32:30 2009 : Debug: port = 389 Wed Aug 19 04:32:30 2009 : Debug: password = "" Wed Aug 19 04:32:30 2009 : Debug: identity = "" Wed Aug 19 04:32:30 2009 : Debug: net_timeout = 1 Wed Aug 19 04:32:30 2009 : Debug: timeout = 8 Wed Aug 19 04:32:30 2009 : Debug: timelimit = 3 Wed Aug 19 04:32:30 2009 : Debug: tls_mode = no Wed Aug 19 04:32:30 2009 : Debug: start_tls = no Wed Aug 19 04:32:30 2009 : Debug: tls_require_cert = "allow" Wed Aug 19 04:32:30 2009 : Debug: tls { Wed Aug 19 04:32:30 2009 : Debug: start_tls = no Wed Aug 19 04:32:30 2009 : Debug: require_cert = "allow" Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: basedn = "dc=uae,dc=ac,dc=ma" Wed Aug 19 04:32:30 2009 : Debug: filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" Wed Aug 19 04:32:30 2009 : Debug: base_filter = "(objectclass=radiusprofile)" Wed Aug 19 04:32:30 2009 : Debug: password_attribute = "userPassword" Wed Aug 19 04:32:30 2009 : Debug: auto_header = no Wed Aug 19 04:32:30 2009 : Debug: access_attr_used_for_allow = yes Wed Aug 19 04:32:30 2009 : Debug: groupname_attribute = "cn" Wed Aug 19 04:32:30 2009 : Debug: groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" Wed Aug 19 04:32:30 2009 : Debug: dictionary_mapping = "/usr/local/freeradius-server-2.1.6/etc/raddb/ldap.attrmap" Wed Aug 19 04:32:30 2009 : Debug: ldap_debug = 0 Wed Aug 19 04:32:30 2009 : Debug: ldap_connections_number = 5 Wed Aug 19 04:32:30 2009 : Debug: compare_check_items = no Wed Aug 19 04:32:30 2009 : Debug: do_xlat = yes Wed Aug 19 04:32:30 2009 : Debug: set_auth_type = yes Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: Registering ldap_groupcmp for Ldap-Group Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: Registering ldap_xlat with xlat_name ldap Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: reading ldap<->radius mappings from file /usr/local/freeradius-server-2.1.6/etc/raddb/ldap.attrmap Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusClass mapped to RADIUS Class Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type Wed Aug 19 04:32:30 2009 : Debug: rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id Wed Aug 19 04:32:30 2009 : Debug: conns: 0x93eee08 Wed Aug 19 04:32:30 2009 : Debug: Module: Checking authorize {...} for more modules to load Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_preprocess, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_preprocess Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating preprocess Wed Aug 19 04:32:30 2009 : Debug: preprocess { Wed Aug 19 04:32:30 2009 : Debug: huntgroups = "/usr/local/freeradius-server-2.1.6/etc/raddb/huntgroups" Wed Aug 19 04:32:30 2009 : Debug: hints = "/usr/local/freeradius-server-2.1.6/etc/raddb/hints" Wed Aug 19 04:32:30 2009 : Debug: with_ascend_hack = no Wed Aug 19 04:32:30 2009 : Debug: ascend_channels_per_line = 23 Wed Aug 19 04:32:30 2009 : Debug: with_ntdomain_hack = no Wed Aug 19 04:32:30 2009 : Debug: with_specialix_jetstream_hack = no Wed Aug 19 04:32:30 2009 : Debug: with_cisco_vsa_hack = no Wed Aug 19 04:32:30 2009 : Debug: with_alvarion_vsa_hack = no Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Module: Checking preacct {...} for more modules to load Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_acct_unique, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_acct_unique Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating acct_unique Wed Aug 19 04:32:30 2009 : Debug: acct_unique { Wed Aug 19 04:32:30 2009 : Debug: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Module: Checking accounting {...} for more modules to load Wed Aug 19 04:32:30 2009 : Debug: (Loaded rlm_detail, checking if it's valid) Wed Aug 19 04:32:30 2009 : Debug: Module: Linked to module rlm_detail Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating detail Wed Aug 19 04:32:30 2009 : Debug: detail { Wed Aug 19 04:32:30 2009 : Debug: detailfile = "/usr/local/freeradius-server-2.1.6/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" Wed Aug 19 04:32:30 2009 : Debug: header = "%t" Wed Aug 19 04:32:30 2009 : Debug: detailperm = 384 Wed Aug 19 04:32:30 2009 : Debug: dirperm = 493 Wed Aug 19 04:32:30 2009 : Debug: locking = no Wed Aug 19 04:32:30 2009 : Debug: log_packet_header = no Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Module: Instantiating attr_filter.accounting_response Wed Aug 19 04:32:30 2009 : Debug: attr_filter attr_filter.accounting_response { Wed Aug 19 04:32:30 2009 : Debug: attrsfile = "/usr/local/freeradius-server-2.1.6/etc/raddb/attrs.accounting_response" Wed Aug 19 04:32:30 2009 : Debug: key = "%{User-Name}" Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Module: Checking session {...} for more modules to load Wed Aug 19 04:32:30 2009 : Debug: Module: Checking post-proxy {...} for more modules to load Wed Aug 19 04:32:30 2009 : Debug: Module: Checking post-auth {...} for more modules to load Wed Aug 19 04:32:30 2009 : Debug: } # modules Wed Aug 19 04:32:30 2009 : Debug: } # server Wed Aug 19 04:32:30 2009 : Debug: radiusd: #### Opening IP addresses and Ports #### Wed Aug 19 04:32:30 2009 : Debug: listen { Wed Aug 19 04:32:30 2009 : Debug: type = "auth" Wed Aug 19 04:32:30 2009 : Debug: ipaddr = * Wed Aug 19 04:32:30 2009 : Debug: port = 0 Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: listen { Wed Aug 19 04:32:30 2009 : Debug: type = "acct" Wed Aug 19 04:32:30 2009 : Debug: ipaddr = * Wed Aug 19 04:32:30 2009 : Debug: port = 0 Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: listen { Wed Aug 19 04:32:30 2009 : Debug: type = "control" Wed Aug 19 04:32:30 2009 : Debug: listen { Wed Aug 19 04:32:30 2009 : Debug: socket = "/usr/local/freeradius-server-2.1.6/var/run/radiusd/radiusd.sock" Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: } Wed Aug 19 04:32:30 2009 : Debug: Listening on authentication address * port 1812 Wed Aug 19 04:32:30 2009 : Debug: Listening on accounting address * port 1813 Wed Aug 19 04:32:30 2009 : Debug: Listening on command file /usr/local/freeradius-server-2.1.6/var/run/radiusd/radiusd.sock Wed Aug 19 04:32:30 2009 : Debug: Listening on proxy address * port 1814 Wed Aug 19 04:32:30 2009 : Debug: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 59744, id=129, length=58 User-Name = "user" User-Password = "coucou" NAS-IP-Address = 10.1.1.12 NAS-Port = 1812 Wed Aug 19 04:33:06 2009 : Info: +- entering group authorize {...} Wed Aug 19 04:33:06 2009 : Info: ++[preprocess] returns ok Wed Aug 19 04:33:06 2009 : Info: ++[chap] returns noop Wed Aug 19 04:33:06 2009 : Info: ++[mschap] returns noop Wed Aug 19 04:33:06 2009 : Info: [suffix] No '@' in User-Name = "user", looking up realm NULL Wed Aug 19 04:33:06 2009 : Info: [suffix] No such realm "NULL" Wed Aug 19 04:33:06 2009 : Info: ++[suffix] returns noop Wed Aug 19 04:33:06 2009 : Info: [eap] No EAP-Message, not doing EAP Wed Aug 19 04:33:06 2009 : Info: ++[eap] returns noop Wed Aug 19 04:33:06 2009 : Info: ++[unix] returns notfound Wed Aug 19 04:33:06 2009 : Info: ++[files] returns noop Wed Aug 19 04:33:06 2009 : Info: [ldap] performing user authorization for user Wed Aug 19 04:33:06 2009 : Info: [ldap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details Wed Aug 19 04:33:06 2009 : Info: [ldap] expand: (uid=%{Stripped-User-Name:-%{User-Name}}) -> (uid=user) Wed Aug 19 04:33:06 2009 : Info: [ldap] expand: dc=uae,dc=ac,dc=ma -> dc=uae,dc=ac,dc=ma Wed Aug 19 04:33:06 2009 : Debug: rlm_ldap: ldap_get_conn: Checking Id: 0 Wed Aug 19 04:33:06 2009 : Debug: rlm_ldap: ldap_get_conn: Got Id: 0 Wed Aug 19 04:33:06 2009 : Debug: rlm_ldap: attempting LDAP reconnection Wed Aug 19 04:33:06 2009 : Debug: rlm_ldap: (re)connect to ldap.uae.ac.ma:389, authentication 0 Wed Aug 19 04:33:06 2009 : Debug: rlm_ldap: bind as / to ldap.uae.ac.ma:389 Wed Aug 19 04:33:22 2009 : Debug: rlm_ldap: waiting for bind result ... Wed Aug 19 04:33:22 2009 : Debug: rlm_ldap: Bind was successful Wed Aug 19 04:33:22 2009 : Debug: rlm_ldap: performing search in dc=uae,dc=ac,dc=ma, with filter (uid=ytabaa) Wed Aug 19 04:33:22 2009 : Info: [ldap] looking for check items in directory... Wed Aug 19 04:33:22 2009 : Info: [ldap] looking for reply items in directory... Wed Aug 19 04:33:22 2009 : Debug: WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly? Wed Aug 19 04:33:22 2009 : Info: [ldap] Setting Auth-Type = LDAP Wed Aug 19 04:33:22 2009 : Info: [ldap] user ytabaa authorized to use remote access Wed Aug 19 04:33:22 2009 : Debug: rlm_ldap: ldap_release_conn: Release Id: 0 Wed Aug 19 04:33:22 2009 : Info: ++[ldap] returns ok Wed Aug 19 04:33:22 2009 : Info: ++[expiration] returns noop Wed Aug 19 04:33:22 2009 : Info: ++[logintime] returns noop Wed Aug 19 04:33:22 2009 : Info: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. Wed Aug 19 04:33:22 2009 : Info: ++[pap] returns noop Wed Aug 19 04:33:22 2009 : Info: Found Auth-Type = LDAP Wed Aug 19 04:33:22 2009 : Info: +- entering group LDAP {...} Wed Aug 19 04:33:22 2009 : Info: [ldap] login attempt by "ytabaa" with password "coucou" Wed Aug 19 04:33:22 2009 : Info: [ldap] user DN: uid=ytabaa,ou=People,dc=uae,dc=ac,dc=ma Wed Aug 19 04:33:22 2009 : Debug: rlm_ldap: (re)connect to ldap.uae.ac.ma:389, authentication 1 Wed Aug 19 04:33:22 2009 : Debug: rlm_ldap: bind as uid=ytabaa,ou=People,dc=uae,dc=ac,dc=ma/coucou to ldap.uae.ac.ma:389 Wed Aug 19 04:33:37 2009 : Debug: rlm_ldap: waiting for bind result ... Wed Aug 19 04:33:37 2009 : Debug: rlm_ldap: Bind was successful Wed Aug 19 04:33:37 2009 : Info: [ldap] user ytabaa authenticated succesfully Wed Aug 19 04:33:37 2009 : Info: ++[ldap] returns ok Wed Aug 19 04:33:37 2009 : Info: +- entering group post-auth {...} Wed Aug 19 04:33:37 2009 : Info: ++[exec] returns noop Sending Access-Accept of id 129 to 127.0.0.1 port 59744 Wed Aug 19 04:33:37 2009 : Info: Finished request 0. Wed Aug 19 04:33:37 2009 : Debug: Going to the next request Wed Aug 19 04:33:37 2009 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 59744, id=129, length=58 Wed Aug 19 04:33:37 2009 : Info: Sending duplicate reply to client localhost port 59744 - ID: 129 Sending Access-Accept of id 129 to 127.0.0.1 port 59744 Wed Aug 19 04:33:37 2009 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 59744, id=129, length=58 Wed Aug 19 04:33:37 2009 : Info: Sending duplicate reply to client localhost port 59744 - ID: 129 Sending Access-Accept of id 129 to 127.0.0.1 port 59744 Wed Aug 19 04:33:37 2009 : Debug: Waking up in 4.9 seconds. * ********************************************************************************************************************************************************************* *AND THEN THE radtest COMMAND OUTPUT: Sending Access-Request of id 129 to 127.0.0.1 port 1812 User-Name = "user" User-Password = "user" NAS-IP-Address = 10.1.1.12 NAS-Port = 1812 Sending Access-Request of id 129 to 127.0.0.1 port 1812 User-Name = "user" User-Password = "user" NAS-IP-Address = 10.1.1.12 NAS-Port = 1812 Sending Access-Request of id 129 to 127.0.0.1 port 1812 User-Name = "user" User-Password = "coucou" NAS-IP-Address = 10.1.1.12 NAS-Port = 1812 radclient: No response from a server ...* 2009/8/19 Alan DeKok <aland@deployingradius.com>
RANDRIAMAMPIONONA José Johnny wrote:
Hi All, I have suffered enough, now I d like to expose my nightmare. Freeradius-server-2.1.6 + OpenLdap. Both of the servers work perfectly, there is no firewall between them or something that can block the traffic: All Correct! but the server still has no response with the weird radclient message ! At the radius debug , authentication is mentioned as successfully (bind was successfully) What's going on ?
Post the debug output as suggested in the FAQ, README, INSTALL, "man" page, and daily on this list.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- JJohnny R. vasiana09@gmail.com
participants (2)
-
Alan DeKok -
RANDRIAMAMPIONONA José Johnny