Hi, The problem was a error in eap.conf, i change default eap to tls (and not md5), and work. Now has a another problem, i try to authnticate, but this messages appear. My radius client is a Access Point wl-5460AP with IP 10.254.0.254, and my pc with Airlink 802.11g authing in AP, my IP is 10.254.0.240. I use freeradius with auth eap/tls in MYSQL. Anyone can help me.... Thank's Emerson **********************************Out of radiusd -X************************************************** Sending Access-Reject of id 54 to 10.254.0.254 port 2053 Waking up in 2 seconds... rad_recv: Access-Request packet from host 10.254.0.254:2053, id=55, length=173 User-Name = "usuario1" NAS-IP-Address = 10.254.0.254 NAS-Port = 0 Called-Station-Id = "004f62087474" Calling-Station-Id = "0014a53c478d" NAS-Identifier = "Realtek Access Point. 8181" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Service-Type = Framed-User Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x0200000d017573756172696f31 Message-Authenticator = 0x7f0c4bd69d33ce3fe0cb757219d2f05e Processing the authorize section of radiusd.conf modcall: entering group authorize for request 18 modcall[authorize]: module "preprocess" returns ok for request 18 rlm_eap: EAP packet type response id 0 length 13 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 18 radius_xlat: 'usuario1' rlm_sql (sql): sql_set_user escaped user --> 'usuario1' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'usuario1' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 1 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'usuario1' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'usuario1' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'usuario1' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 1 modcall[authorize]: module "sql" returns ok for request 18 modcall: leaving group authorize (returns updated) for request 18 rad_check_password: Found Auth-Type Local auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Login incorrect: [usuario1/<no User-Password attribute>] (from client mslink-radius port 0 cli 0014a53c478d) Delaying request 18 for 1 seconds Finished request 18 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Cleaning up request 16 ID 53 with timestamp 4496c6c7 Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 55 to 10.254.0.254 port 2053 Waking up in 1 seconds... --- Walking the entire request list --- Cleaning up request 17 ID 54 with timestamp 4496c6c9 Waking up in 3 seconds... --- Walking the entire request list --- Cleaning up request 18 ID 55 with timestamp 4496c6cc Nothing to do. Sleeping until we see a request.
Emerson <emerson@mslink.com.br> wrote:
modcall: leaving group authorize (returns updated) for request 18 rad_check_password: Found Auth-Type Local auth: type Local auth: No User-Password or CHAP-Password attribute in the request
You edited the default config to break it. Don't do that. Don't set Auth-Type := Local. Alan DeKok.
participants (2)
-
Alan DeKok -
Emerson