I configure Freeradius , when the client try to connect with CHAP i have this error, and only connect with linux system users. When I connect locally with radtest i connect ok but when i connect remotely whit Windows Xp using CHAP don't connect. I run radius in debug mode with -X option. Part of clients.conf usuario1 Auth-Type := Local, Cleartext-Password := "testusuario1" usuario2 Auth-Type := Local, Password := "testusuario2" usuario3 Cleartext-Password := "testusuario3" Error of freeradius running with -X option: rad_recv: Access-Request packet from host 192.168.1.100:1645, id=106, length=126 Framed-Protocol = PPP User-Name = "chap" CHAP-Password = 0x019c1a0fb685942ed07fdb1e2d100e93f0 NAS-Port-Type = Virtual NAS-Port = 1586 Calling-Station-Id = "1141323200" Called-Station-Id = "8003450410" Connect-Info = "TLS-MISERVER-DIALUP" Service-Type = Framed-User NAS-IP-Address = 192.168.1.100 Processing the authorize section of radiusd.confmodcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 2 modcall[authorize]: module "mschap" returns noop for request 2 rlm_realm: No '@' in User-Name = "chap", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 2 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 2 users: Matched entry DEFAULT at line 173 users: Matched entry DEFAULT at line 185 modcall[authorize]: module "files" returns ok for request 2rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 2modcall: leaving group authorize (returns ok) for request 2 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 2 rlm_chap: login attempt by "chap" with CHAP password rlm_chap: Could not find clear text password for user chap modcall[authenticate]: module "chap" returns invalid for request 2modcall: leaving group CHAP (returns invalid) for request 2auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [chap/<CHAP-Password>] (from client rasiplan2 port 1586 cli 1141323200)Delaying request 2 for 1 secondsFinished request 2Going to the next request--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Sending Access-Reject of id 106 to 192.168.1.1 port 1645Waking up in 4 seconds...--- Walking the entire request list ---Cleaning up request 2 ID 106 with timestamp 47472e23Nothing to do. Sleeping until we see a request. _________________________________________________________________ Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&...
Do you have user chap in your users file? You have posted entries for some other usernames. Ivan Kalik Kalik Informatika ISP Dana 23/11/2007, "Javier Fernando" <jcomputacion@hotmail.com> piše:
I configure Freeradius , when the client try to connect with CHAP i have this error, and only connect with linux system users. When I connect locally with radtest i connect ok but when i connect remotely whit Windows Xp using CHAP don't connect. I run radius in debug mode with -X option.
Part of clients.conf
usuario1 Auth-Type := Local, Cleartext-Password := "testusuario1" usuario2 Auth-Type := Local, Password := "testusuario2" usuario3 Cleartext-Password := "testusuario3"
Error of freeradius running with -X option:
rad_recv: Access-Request packet from host 192.168.1.100:1645, id=106, length=126 Framed-Protocol = PPP User-Name = "chap" CHAP-Password = 0x019c1a0fb685942ed07fdb1e2d100e93f0 NAS-Port-Type = Virtual NAS-Port = 1586 Calling-Station-Id = "1141323200" Called-Station-Id = "8003450410" Connect-Info = "TLS-MISERVER-DIALUP" Service-Type = Framed-User NAS-IP-Address = 192.168.1.100 Processing the authorize section of radiusd.confmodcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 2 modcall[authorize]: module "mschap" returns noop for request 2 rlm_realm: No '@' in User-Name = "chap", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 2 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 2 users: Matched entry DEFAULT at line 173 users: Matched entry DEFAULT at line 185 modcall[authorize]: module "files" returns ok for request 2rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 2modcall: leaving group authorize (returns ok) for request 2 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 2 rlm_chap: login attempt by "chap" with CHAP password rlm_chap: Could not find clear text password for user chap modcall[authenticate]: module "chap" returns invalid for request 2modcall: leaving group CHAP (returns invalid) for request 2auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [chap/<CHAP-Password>] (from client rasiplan2 port 1586 cli 1141323200)Delaying request 2 for 1 secondsFinished request 2Going to the next request--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Sending Access-Reject of id 106 to 192.168.1.1 port 1645Waking up in 4 seconds....--- Walking the entire request list ---Cleaning up request 2 ID 106 with timestamp 47472e23Nothing to do. Sleeping until we see a request. _________________________________________________________________ Tecnología, moda, motor, viajes,�suscríbete a nuestros boletines para estar a la última http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&...
I think that this is a CHAP USER: usuario3 Cleartext-Password := "testusuario3" How to add a Chap user to the users file? Javier.
Do you have user chap in your users file? You have posted entries for> some other usernames.> > Ivan Kalik> Kalik Informatika ISP> > > Dana 23/11/2007, "Javier Fernando" <jcomputacion@hotmail.com> piše:> > >> >I configure Freeradius , when the client try to connect with CHAP i have this error, and only connect with linux system users. When I connect locally with radtest i connect ok but when i connect remotely whit Windows Xp using CHAP don't connect. I run radius in debug mode with -X option.> > > >Part of clients.conf> > > >usuario1 Auth-Type := Local, Cleartext-Password := "testusuario1"> >usuario2 Auth-Type := Local, Password := "testusuario2"> >usuario3 Cleartext-Password := "testusuario3"> > > >Error of freeradius running with -X option:> > > >rad_recv: Access-Request packet from host 192.168.1.100:1645, id=106, length=126 Framed-Protocol = PPP User-Name = "chap" CHAP-Password = 0x019c1a0fb685942ed07fdb1e2d100e93f0 NAS-Port-Type = Virtual NAS-Port = 1586 Calling-Station-Id = "1141323200" Called-Station-Id = "8003450410" Connect-Info = "TLS-MISERVER-DIALUP" Service-Type = Framed-User NAS-IP-Address = 192.168.1.100 Processing the authorize section of radiusd.confmodcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 2 modcall[authorize]: module "mschap" returns noop for request 2 rlm_realm: No '@' in User-Name = "chap", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 2 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 2 users: Matched entry DEFAULT at line 173 users: Matched entry DEFAULT at line 185 modcall[authorize]: module "files" returns ok for request 2rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 2modcall: leaving group authorize (returns ok) for request 2 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 2 rlm_chap: login attempt by "chap" with CHAP password rlm_chap: Could not find clear text password for user chap modcall[authenticate]: module "chap" returns invalid for request 2modcall: leaving group CHAP (returns invalid) for request 2auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [chap/<CHAP-Password>] (from client rasiplan2 port 1586 cli 1141323200)Delaying request 2 for 1 secondsFinished request 2Going to the next request--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Sending Access-Reject of id 106 to 192.168.1.1 port 1645Waking up in 4 seconds....--- Walking the entire request list ---Cleaning up request 2 ID 106 with timestamp 47472e23Nothing to do. Sleeping until we see a request.> >_________________________________________________________________> >Tecnología, moda, motor, viajes,�suscríbete a nuestros boletines para estar a la última> >http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com> >> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&...
You are not sending that username: User-Name = "chap" Put usuario3 as a username on XP PC. Ivan Kalik Kalik Informatika ISP Dana 23/11/2007, "Javier Fernando" <jcomputacion@hotmail.com> piše:
I think that this is a CHAP USER:
usuario3 Cleartext-Password := "testusuario3"
How to add a Chap user to the users file?
Javier.
Do you have user chap in your users file? You have posted entries for> some other usernames.> > Ivan Kalik> Kalik Informatika ISP> > > Dana 23/11/2007, "Javier Fernando" <jcomputacion@hotmail.com> pi�e:> > >> >I configure Freeradius , when the client try to connect with CHAP i have this error, and only connect with linux system users. When I connect locally with radtest i connect ok but when i connect remotely whit Windows Xp using CHAP don't connect. I run radius in debug mode with -X option.> > > >Part of clients.conf> > > >usuario1 Auth-Type := Local, Cleartext-Password := "testusuario1"> >usuario2 Auth-Type := Local, Password := "testusuario2"> >usuario3 Cleartext-Password := "testusuario3"> > > >Error of freeradius running with -X option:> > > >rad_recv: Access-Request packet from host 192.168..1.100:1645, id=106, length=126 Framed-Protocol = PPP User-Name = "chap" CHAP-Password = 0x019c1a0fb685942ed07fdb1e2d100e93f0 NAS-Port-Type = Virtual NAS-Port = 1586 Calling-Station-Id = "1141323200" Called-Station-Id = "8003450410" Connect-Info = "TLS-MISERVER-DIALUP" Service-Type = Framed-User NAS-IP-Address = 192.168.1.100 Processing the authorize section of radiusd.confmodcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 2 modcall[authorize]: module "mschap" returns noop for request 2 rlm_realm: No '@' in User-Name = "chap", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 2 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 2 users: Matched entry DEFAULT at line 173 users: Matched entry DEFAULT at line 185 modcall[authorize]: module "files" returns ok for request 2rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 2modcall: leaving group authorize (returns ok) for request 2 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 2 rlm_chap: login attempt by "chap" with CHAP password rlm_chap: Could not find clear text password for user chap modcall[authenticate]: module "chap" returns invalid for request 2modcall: leaving group CHAP (returns invalid) for request 2auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [chap/<CHAP-Password>] (from client rasiplan2 port 1586 cli 1141323200)Delaying request 2 for 1 secondsFinished request 2Going to the next request--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Sending Access-Reject of id 106 to 192.168.1.1 port 1645Waking up in 4 seconds.....--- Walking the entire request list ---Cleaning up request 2 ID 106 with timestamp 47472e23Nothing to do. Sleeping until we see a request.> >_________________________________________________________________> >Tecnología, moda, motor, viajes,�suscríbete a nuestros boletines para estar a la última> >http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com> >> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Tecnología, moda, motor, viajes,�suscríbete a nuestros boletines para estar a la última http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&...
I connect to the radius over a dialup modem, I add a CHAP user with this line in the users file: usuario3 Cleartext-Password := "testusuario3" When I connect I use this username and password and the radius don't validate the request. Javier.
To: freeradius-users@lists.freeradius.org> Subject: RE: Problem with CHAP> Date: Sat, 24 Nov 2007 01:16:04 +0100> From: tnt@kalik.co.yu> > You are not sending that username:> > User-Name = "chap"> > Put usuario3 as a username on XP PC.> > Ivan Kalik> Kalik Informatika ISP> > > Dana 23/11/2007, "Javier Fernando" <jcomputacion@hotmail.com> piše:> > >> >I think that this is a CHAP USER:> > > >usuario3 Cleartext-Password := "testusuario3"> > > >How to add a Chap user to the users file?> > > >Javier.> >> > Do you have user chap in your users file? You have posted entries for> some other usernames.> > Ivan Kalik> Kalik Informatika ISP> > > Dana 23/11/2007, "Javier Fernando" <jcomputacion@hotmail.com> pi�e:> > >> >I configure Freeradius , when the client try to connect with CHAP i have this error, and only connect with linux system users. When I connect locally with radtest i connect ok but when i connect remotely whit Windows Xp using CHAP don't connect. I run radius in debug mode with -X option.> > > >Part of clients.conf> > > >usuario1 Auth-Type := Local, Cleartext-Password := "testusuario1"> >usuario2 Auth-Type := Local, Password := "testusuario2"> >usuario3 Cleartext-Password := "testusuario3"> > > >Error of freeradius running with -X option:> > > >rad_recv: Access-Request packet from host 192.168..1.100:1645, id=106, length=126 Framed-Protocol = PPP User-Name = "chap" CHAP-Password = 0x019c1a0fb685942ed07fdb1e2d100e93f0 NAS-Port-Type = Virtual NAS-Port = 1586 Calling-Station-Id = "1141323200" Called-Station-Id = "8003450410" Connect-Info = "TLS-MISERVER-DIALUP" Service-Type = Framed-User NAS-IP-Address = 192.168.1.100 Processing the authorize section of radiusd.confmodcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 2 modcall[authorize]: module "mschap" returns noop for request 2 rlm_realm: No '@' in User-Name = "chap", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 2 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 2 users: Matched entry DEFAULT at line 173 users: Matched entry DEFAULT at line 185 modcall[authorize]: module "files" returns ok for request 2rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 2modcall: leaving group authorize (returns ok) for request 2 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 2 rlm_chap: login attempt by "chap" with CHAP password rlm_chap: Could not find clear text password for user chap modcall[authenticate]: module "chap" returns invalid for request 2modcall: leaving group CHAP (returns invalid) for request 2auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [chap/<CHAP-Password>] (from client rasiplan2 port 1586 cli 1141323200)Delaying request 2 for 1 secondsFinished request 2Going to the next request--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Sending Access-Reject of id 106 to 192.168.1.1 port 1645Waking up in 4 seconds.....--- Walking the entire request list ---Cleaning up request 2 ID 106 with timestamp 47472e23Nothing to do. Sleeping until we see a request.> >_________________________________________________________________> >Tecnología, moda, motor, viajes,�suscríbete a nuestros boletines para estar a la última> >http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com> >> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html> >_________________________________________________________________> >Tecnología, moda, motor, viajes,�suscríbete a nuestros boletines para estar a la última> >http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com> >> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&...
I have this users in the users file: # Usuarios de prueba chap Auth-Type := Local, Cleartext-Password := "test2007" test Auth-Type := Local, Password := "test2007" lock Auth-Type := Reject Reply-Message = "Cuenta deshabilitada." steve Cleartext-Password := "test" javier Cleartext-Password := "test" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = -----------------, Framed-IP-Netmask = --------------------, Framed-Routing = Broadcast-Listen, Framed-Filter-Id = "std.ppp", Framed-MTU = 1500, Framed-Compression = Van-Jacobsen-TCP-IP bob User-Password == "test" prueba1 Auth-Type := CHAP, Password := "test" I try with all of this users and again have the error: modcall: leaving group authorize (returns ok) for request 5 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 5 rlm_chap: login attempt by "javier" with CHAP password rlm_chap: Could not find clear text password for user javier modcall[authenticate]: module "chap" returns invalid for request 5modcall: leaving group CHAP (returns invalid) for request 5auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [javier/<CHAP-Password>] (from client rasiplan2 port 2119 cli 1141323200)Delaying request 5 for 1 seconds THANKS!!! Javier.
To: freeradius-users@lists.freeradius.org> Subject: RE: Problem with CHAP> Date: Mon, 26 Nov 2007 14:05:07 +0100> From: tnt@kalik.co.yu> > >When I connect I use this username and password and the radius don't validate the request.> > > No. You didn't use username usuario3. Look at the request:> > User-Name = "chap"> > Ivan Kalik> Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&...
Can you send the whole debug from the request. I can't see if anything matched in users file or not. Ivan Kalik Kalik Informatika ISP Dana 26/11/2007, "Javier Fernando" <jcomputacion@hotmail.com> piše:
I have this users in the users file:
# Usuarios de prueba chap Auth-Type := Local, Cleartext-Password := "test2007" test Auth-Type := Local, Password := "test2007" lock Auth-Type := Reject Reply-Message = "Cuenta deshabilitada." steve Cleartext-Password := "test" javier Cleartext-Password := "test" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = -----------------, Framed-IP-Netmask = --------------------, Framed-Routing = Broadcast-Listen, Framed-Filter-Id = "std.ppp", Framed-MTU = 1500, Framed-Compression = Van-Jacobsen-TCP-IP bob User-Password == "test" prueba1 Auth-Type := CHAP, Password := "test"
I try with all of this users and again have the error:
modcall: leaving group authorize (returns ok) for request 5 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 5 rlm_chap: login attempt by "javier" with CHAP password rlm_chap: Could not find clear text password for user javier modcall[authenticate]: module "chap" returns invalid for request 5modcall: leaving group CHAP (returns invalid) for request 5auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [javier/<CHAP-Password>] (from client rasiplan2 port 2119 cli 1141323200)Delaying request 5 for 1 seconds
THANKS!!!
Javier.
To: freeradius-users@lists.freeradius.org> Subject: RE: Problem with CHAP> Date: Mon, 26 Nov 2007 14:05:07 +0100> From: tnt@kalik.co.yu> > >When I connect I use this username and password and the radius don't validate the request.> > > No. You didn't use username usuario3. Look at the request:> > User-Name = "chap"> > Ivan Kalik> Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Tecnología, moda, motor, viajes, suscríbete a nuestros boletines para estar a la última http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&...
This is the last log: Thanks. Javier. radiusd -X : Nothing to do. Sleeping until we see a request.rad_recv: Access-Request packet from host 10.10.200.252:1645, id=139, length=125 Framed-Protocol = PPP User-Name = "bob" CHAP-Password = 0x010ae11cfe98a4aea0f0244e3337c26de4 NAS-Port-Type = Virtual NAS-Port = 180 Calling-Station-Id = "1141323200" Called-Station-Id = "8003450410" Connect-Info = "TLS-DIALUP" Service-Type = Framed-User NAS-IP-Address = 10.10.200.252 Processing the authorize section of radiusd.confmodcall: entering group authorize for request 8 modcall[authorize]: module "preprocess" returns ok for request 8 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 8 modcall[authorize]: module "mschap" returns noop for request 8 rlm_realm: No '@' in User-Name = "bob", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 8 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 8 users: Matched entry DEFAULT at line 173 users: Matched entry DEFAULT at line 185 modcall[authorize]: module "files" returns ok for request 8rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 8modcall: leaving group authorize (returns ok) for request 8 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 8 rlm_chap: login attempt by "bob" with CHAP password rlm_chap: Could not find clear text password for user bob modcall[authenticate]: module "chap" returns invalid for request 8modcall: leaving group CHAP (returns invalid) for request 8auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [bob/<CHAP-Password>] (from client rasiplan2 port 180 cli 1141323200)Delaying request 8 for 1 secondsFinished request 8Going to the next request--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Sending Access-Reject of id 139 to 10.10.200.252 port 1645Waking up in 4 seconds...--- Walking the entire request list ---Cleaning up request 8 ID 139 with timestamp 474acfb9Nothing to do. Sleeping until we see a request.
To: freeradius-users@lists.freeradius.org> Subject: RE: Problem with CHAP> Date: Mon, 26 Nov 2007 15:38:50 +0100> From: tnt@kalik.co.yu> > Can you send the whole debug from the request. I can't see if anything> matched in users file or not.> > Ivan Kalik> Kalik Informatika ISP> > > Dana 26/11/2007, "Javier Fernando" <jcomputacion@hotmail.com> piše:> > >> >I have this users in the users file:> > > > > ># Usuarios de prueba> >chap Auth-Type := Local, Cleartext-Password := "test2007"> >test Auth-Type := Local, Password := "test2007"> >lock Auth-Type := Reject Reply-Message = "Cuenta deshabilitada."> >steve Cleartext-Password := "test"> >javier Cleartext-Password := "test" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = -----------------, Framed-IP-Netmask = --------------------, Framed-Routing = Broadcast-Listen, Framed-Filter-Id = "std.ppp", Framed-MTU = 1500, Framed-Compression = Van-Jacobsen-TCP-IP> >bob User-Password == "test"> >prueba1 Auth-Type := CHAP, Password := "test"> > > > > >I try with all of this users and again have the error:> > > >modcall: leaving group authorize (returns ok) for request 5 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 5 rlm_chap: login attempt by "javier" with CHAP password rlm_chap: Could not find clear text password for user javier modcall[authenticate]: module "chap" returns invalid for request 5modcall: leaving group CHAP (returns invalid) for request 5auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [javier/<CHAP-Password>] (from client rasiplan2 port 2119 cli 1141323200)Delaying request 5 for 1 seconds> > > >THANKS!!!> > > >Javier.> > > > > > > > > >> To: freeradius-users@lists.freeradius.org> Subject: RE: Problem with CHAP> Date: Mon, 26 Nov 2007 14:05:07 +0100> From: tnt@kalik.co.yu> > >When I connect I use this username and password and the radius don't validate the request.> > > No. You didn't use username usuario3. Look at the request:> > User-Name = "chap"> > Ivan Kalik> Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html> >_________________________________________________________________> >Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última> >http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com> >> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&...
users: Matched entry DEFAULT at line 173 users: Matched entry DEFAULT at line 185
You have added user entries at the end of users file. You should put user entries towards the front of the users file. If you need to process some default entries, user entry should have Fall-Through = Yes at the end. Ivan Kalik Kalik Informatika ISP Dana 26/11/2007, "Javier Fernando" <jcomputacion@hotmail.com> piše:
This is the last log:
Thanks.
Javier.
radiusd -X :
Nothing to do. Sleeping until we see a request.rad_recv: Access-Request packet from host 10.10.200.252:1645, id=139, length=125 Framed-Protocol = PPP User-Name = "bob" CHAP-Password = 0x010ae11cfe98a4aea0f0244e3337c26de4 NAS-Port-Type = Virtual NAS-Port = 180 Calling-Station-Id = "1141323200" Called-Station-Id = "8003450410" Connect-Info = "TLS-DIALUP" Service-Type = Framed-User NAS-IP-Address = 10.10.200.252 Processing the authorize section of radiusd.confmodcall: entering group authorize for request 8 modcall[authorize]: module "preprocess" returns ok for request 8 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 8 modcall[authorize]: module "mschap" returns noop for request 8 rlm_realm: No '@' in User-Name = "bob", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 8 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 8 users: Matched entry DEFAULT at line 173 users: Matched entry DEFAULT at line 185 modcall[authorize]: module "files" returns ok for request 8rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 8modcall: leaving group authorize (returns ok) for request 8 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 8 rlm_chap: login attempt by "bob" with CHAP password rlm_chap: Could not find clear text password for user bob modcall[authenticate]: module "chap" returns invalid for request 8modcall: leaving group CHAP (returns invalid) for request 8auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [bob/<CHAP-Password>] (from client rasiplan2 port 180 cli 1141323200)Delaying request 8 for 1 secondsFinished request 8Going to the next request--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Sending Access-Reject of id 139 to 10.10.200.252 port 1645Waking up in 4 seconds...--- Walking the entire request list ---Cleaning up request 8 ID 139 with timestamp 474acfb9Nothing to do. Sleeping until we see a request.
To: freeradius-users@lists.freeradius.org> Subject: RE: Problem with CHAP> Date: Mon, 26 Nov 2007 15:38:50 +0100> From: tnt@kalik.co.yu> > Can you send the whole debug from the request. I can't see if anything> matched in users file or not.> > Ivan Kalik> Kalik Informatika ISP> > > Dana 26/11/2007, "Javier Fernando" <jcomputacion@hotmail.com> pie:> > >> >I have this users in the users file:> > > > > ># Usuarios de prueba> >chap Auth-Type := Local, Cleartext-Password := "test2007"> >test Auth-Type := Local, Password := "test2007"> >lock Auth-Type := Reject Reply-Message = "Cuenta deshabilitada."> >steve Cleartext-Password := "test"> >javier Cleartext-Password := "test" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = -----------------, Framed-IP-Netmask = --------------------, Framed-Routing = Broadcast-Listen, Framed-Filter-Id = "std.ppp", Framed-MTU = 1500, Framed-Compression = Van-Jacobsen-TCP-IP> >bob User-Password == "test"> >prueba1 Auth-Type := CHAP, Password := "test"> > > > > >I try with all of this users and again have the error:> > > >modcall: leaving group authorize (returns ok) for request 5 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 5 rlm_chap: login attempt by "javier" with CHAP password rlm_chap: Could not find clear text password for user javier modcall[authenticate]: module "chap" returns invalid for request 5modcall: leaving group CHAP (returns invalid) for request 5auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [javier/<CHAP-Password>] (from client rasiplan2 port 2119 cli 1141323200)Delaying request 5 for 1 seconds> > > >THANKS!!!> > > >Javier.> > > > > > > > > >> To: freeradius-users@lists.freeradius..org> Subject: RE: Problem with CHAP> Date: Mon, 26 Nov 2007 14:05:07 +0100> From: tnt@kalik.co.yu> > >When I connect I use this username and password and the radius don't validate the request.> > > No. You didn't use username usuario3. Look at the request:> > User-Name = "chap"> > Ivan Kalik> Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html> >_________________________________________________________________> >Tecnología, moda, motor, viajes, suscríbete a nuestros boletines para estar a la última> >http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com> >> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Tecnología, moda, motor, viajes, suscríbete a nuestros boletines para estar a la última http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&...
Thanks, i put the users at the top of the users file and connect. I don't read in any place that the users must be added in the top of the file. Javier.
To: freeradius-users@lists.freeradius.org> Subject: RE: Problem with CHAP> Date: Mon, 26 Nov 2007 16:30:17 +0100> From: tnt@kalik.co.yu> > >users: Matched entry DEFAULT at line 173> >users: Matched entry DEFAULT at line 185 > > You have added user entries at the end of users file. You should put user> entries towards the front of the users file. If you need to process some> default entries, user entry should have Fall-Through = Yes at the end.> > Ivan Kalik> Kalik Informatika ISP> > > Dana 26/11/2007, "Javier Fernando" <jcomputacion@hotmail.com> piše:> > > >This is the last log:> > > >Thanks.> > > >Javier.> > > > > >radiusd -X :> > > >Nothing to do. Sleeping until we see a request.rad_recv: Access-Request packet from host 10.10.200.252:1645, id=139, length=125 Framed-Protocol = PPP User-Name = "bob" CHAP-Password = 0x010ae11cfe98a4aea0f0244e3337c26de4 NAS-Port-Type = Virtual NAS-Port = 180 Calling-Station-Id = "1141323200" Called-Station-Id = "8003450410" Connect-Info = "TLS-DIALUP" Service-Type = Framed-User NAS-IP-Address = 10.10.200.252 Processing the authorize section of radiusd.confmodcall: entering group authorize for request 8 modcall[authorize]: module "preprocess" returns ok for request 8 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 8 modcall[authorize]: module "mschap" returns noop for request 8 rlm_realm: No '@' in User-Name = "bob", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 8 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 8 users: Matched entry DEFAULT at line 173 users: Matched entry DEFAULT at line 185 modcall[authorize]: module "files" returns ok for request 8rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 8modcall: leaving group authorize (returns ok) for request 8 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 8 rlm_chap: login attempt by "bob" with CHAP password rlm_chap: Could not find clear text password for user bob modcall[authenticate]: module "chap" returns invalid for request 8modcall: leaving group CHAP (returns invalid) for request 8auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [bob/<CHAP-Password>] (from client rasiplan2 port 180 cli 1141323200)Delaying request 8 for 1 secondsFinished request 8Going to the next request--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Sending Access-Reject of id 139 to 10.10.200.252 port 1645Waking up in 4 seconds...--- Walking the entire request list ---Cleaning up request 8 ID 139 with timestamp 474acfb9Nothing to do. Sleeping until we see a request.> > > >> To: freeradius-users@lists.freeradius.org> Subject: RE: Problem with CHAP> Date: Mon, 26 Nov 2007 15:38:50 +0100> From: tnt@kalik.co.yu> > Can you send the whole debug from the request. I can't see if anything> matched in users file or not.> > Ivan Kalik> Kalik Informatika ISP> > > Dana 26/11/2007, "Javier Fernando" <jcomputacion@hotmail.com> piše:> > >> >I have this users in the users file:> > > > > ># Usuarios de prueba> >chap Auth-Type := Local, Cleartext-Password := "test2007"> >test Auth-Type := Local, Password := "test2007"> >lock Auth-Type := Reject Reply-Message = "Cuenta deshabilitada."> >steve Cleartext-Password := "test"> >javier Cleartext-Password := "test" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = -----------------, Framed-IP-Netmask = --------------------, Framed-Routing = Broadcast-Listen, Framed-Filter-Id = "std.ppp", Framed-MTU = 1500, Framed-Compression = Van-Jacobsen-TCP-IP> >bob User-Password == "test"> >prueba1 Auth-Type := CHAP, Password := "test"> > > > > >I try with all of this users and again have the error:> > > >modcall: leaving group authorize (returns ok) for request 5 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 5 rlm_chap: login attempt by "javier" with CHAP password rlm_chap: Could not find clear text password for user javier modcall[authenticate]: module "chap" returns invalid for request 5modcall: leaving group CHAP (returns invalid) for request 5auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [javier/<CHAP-Password>] (from client rasiplan2 port 2119 cli 1141323200)Delaying request 5 for 1 seconds> > > >THANKS!!!> > > >Javier.> > > > > > > > > >> To: freeradius-users@lists.freeradius..org> Subject: RE: Problem with CHAP> Date: Mon, 26 Nov 2007 14:05:07 +0100> From: tnt@kalik.co.yu> > >When I connect I use this username and password and the radius don't validate the request.> > > No. You didn't use username usuario3. Look at the request:> > User-Name = "chap"> > Ivan Kalik> Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html> >_________________________________________________________________> >Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última> >http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com> >> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html> >_________________________________________________________________> >Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última> >http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com> >> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&...
participants (2)
-
Javier Fernando -
tnt＠kalik.co.yu