[Help] radtest mschap problem
Hello All, I'm trying to test mschap with radtest but it gives me strange error message. I've tried to solve it several days, but had no success. I'm using syntax like that: $ radtest -t mschap user password 127.0.0.1 0 secret radclient : Failed to find IP address for host user: Success radclient: $Id$ built on Jan 22 2013 at 23:55:37 FreeRADIUS Version 2.1.1, for host x86_64-suse-linux-gnu, built on Jan 22 2013 host file looks fine I would appreciate it if someone can help me , Andres
Most likely your host file didnt have entry of your domain name, dump your hostname and /etc/hosts file here and then we can comment better On Thu, Apr 25, 2013 at 10:52 PM, Andres <arvutihooldus@gmail.com> wrote:
Hello All,
I'm trying to test mschap with radtest but it gives me strange error message. I've tried to solve it several days, but had no success.
I'm using syntax like that:
$ radtest -t mschap user password 127.0.0.1 0 secret
radclient : Failed to find IP address for host user: Success
radclient: $Id$ built on Jan 22 2013 at 23:55:37 FreeRADIUS Version 2.1.1, for host x86_64-suse-linux-gnu, built on Jan 22 2013
host file looks fine
I would appreciate it if someone can help me ,
Andres
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
this way looks my hosts file: # IP-Address Full-Qualified-Hostname Short-Hostname # 127.0.0.1 localhost # special IPv6 addresses ::1 localhost ipv6-localhost ipv6-loopback fe00::0 ipv6-localnet ff00::0 ipv6-mcastprefix ff02::1 ipv6-allnodes ff02::2 ipv6-allrouters ff02::3 ipv6-allhosts 10.58.5.58 radius.mydomain.com radius Andres 2013/4/26 Chitrang Srivastava <chitrang.srivastava@gmail.com>
Most likely your host file didnt have entry of your domain name, dump your hostname and /etc/hosts file here and then we can comment better
On Thu, Apr 25, 2013 at 10:52 PM, Andres <arvutihooldus@gmail.com> wrote:
Hello All,
I'm trying to test mschap with radtest but it gives me strange error message. I've tried to solve it several days, but had no success.
I'm using syntax like that:
$ radtest -t mschap user password 127.0.0.1 0 secret
radclient : Failed to find IP address for host user: Success
radclient: $Id$ built on Jan 22 2013 at 23:55:37 FreeRADIUS Version 2.1.1, for host x86_64-suse-linux-gnu, built on Jan 22 2013
host file looks fine
I would appreciate it if someone can help me ,
Andres
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Andres wrote:
this way looks my hosts file:
Well... something is wrong with DNS on your system. The only advantage to using radtest is that it's simpler than radclient. But it's just a wrapper around radclient. You can edit radtest to remove the DNS lookups, or write your own wrapper which doesn't do DNS lookups. Alan DeKok.
whats the hostname of ur system ? On Fri, Apr 26, 2013 at 6:30 PM, Andres <arvutihooldus@gmail.com> wrote:
this way looks my hosts file:
# IP-Address Full-Qualified-Hostname Short-Hostname #
127.0.0.1 localhost
# special IPv6 addresses ::1 localhost ipv6-localhost ipv6-loopback
fe00::0 ipv6-localnet
ff00::0 ipv6-mcastprefix ff02::1 ipv6-allnodes ff02::2 ipv6-allrouters ff02::3 ipv6-allhosts 10.58.5.58 radius.mydomain.com radius
Andres
2013/4/26 Chitrang Srivastava <chitrang.srivastava@gmail.com>
Most likely your host file didnt have entry of your domain name, dump your hostname and /etc/hosts file here and then we can comment better
On Thu, Apr 25, 2013 at 10:52 PM, Andres <arvutihooldus@gmail.com> wrote:
Hello All,
I'm trying to test mschap with radtest but it gives me strange error message. I've tried to solve it several days, but had no success.
I'm using syntax like that:
$ radtest -t mschap user password 127.0.0.1 0 secret
radclient : Failed to find IP address for host user: Success
radclient: $Id$ built on Jan 22 2013 at 23:55:37 FreeRADIUS Version 2.1.1, for host x86_64-suse-linux-gnu, built on Jan 22 2013
host file looks fine
I would appreciate it if someone can help me ,
Andres
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
host name is radius ip 10.58.5.58 Full Domain host name: radius.mydomain.com radius ...... resolv.conf search mydomain.com nameserver 10.58.5.39 nameserver 10.58.5.45 ........ /etc/hosts 127.0.0.1 localhost # special IPv6 addresses ::1 localhost ipv6-localhost ipv6-loopback fe00::0 ipv6-localnet ff00::0 ipv6-mcastprefix ff02::1 ipv6-allnodes ff02::2 ipv6-allrouters ff02::3 ipv6-allhosts 10.58.5.58 radius.dpd.ee radius .................... radius:/etc # ping mydomain.com PING mydomain.com (10.58.5.39) 56(84) bytes of data. 64 bytes from fs.mydomain.com (10.58.5.39): icmp_seq=1 ttl=128 time=0.301 ms 64 bytes from fs.mydomain.com (10.58.5.39): icmp_seq=2 ttl=128 time=0.414 ms radius:/etc # ping localhost PING localhost (127.0.0.1) 56(84) bytes of data. 64 bytes from localhost (127.0.0.1): icmp_seq=1 ttl=64 time=0.025 ms 64 bytes from localhost (127.0.0.1): icmp_seq=2 ttl=64 time=0.039 ms radius:/etc # ping6 localhost PING localhost(localhost) 56 data bytes 64 bytes from localhost: icmp_seq=1 ttl=64 time=0.080 ms 64 bytes from localhost: icmp_seq=2 ttl=64 time=0.054 ms ......... radius:/etc # radtest -t mschap testing passme 127.0.0.1 0 testing123456 radclient: Failed to find IP address for host testing: Success ................. radius:/etc # radtest testing passme 127.0.0.1 0 testing123456 Sending Access-Request of id 177 to 127.0.0.1 port 1812 User-Name = "testing" User-Password = "passme" NAS-IP-Address = 10.58.5.58 NAS-Port = 0 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=177, length=20 ........................ Yast2 network settings > Hostname/DNS Network Settings ┌Global Options──Overview──Hostname/DNS──Routing───────────────────────────┐ │┌Hostname and Domain Name────────────────────────────────────────────────┐│ ││Hostname Domain Name ││ ││radius▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒ mydomain.com ▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒││ ││[x] Change Hostname via DHCPNo interface with dhcp ││ ││[ ] Assign Hostname to Loopback IP ││ │└────────────────────────────────────────────────────────────────────────┘│ │Modify DNS configuration Custom Policy Rule │ │Use Default Policy▒▒▒▒▒↓ ▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒↓ │ │┌Name Servers and Domain Search List─────────────────────────────────────┐│ ││Name Server 1 ┌Domain Search────────────────────┐ ││ ││10.58.5.45▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒ │mydomain.com │ ││ ││Name Server 2 │ │ ││ ││10.58.5.39▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒ │ │ ││ ││Name Server 3 │ │ ││ ││▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒ └─────────────────────────────────┘ ││ │└──────────────────────────────────────────────────────── I cannot figure out what is the cause of it, that radtest -t mschap dont work. Is it related to DNS or IPv6? Did I something wrong... I'm using( as Windows 2008 domain member): SUSE Linux Enterprise Server 11 (x86_64) VERSION = 11 PATCHLEVEL = 2 FreeRADIUS Version 2.1.1, for host x86_64-suse-linux-gnu, built on Jan 22 2013 at 23:55:29 I'd be very grateful if someone would care to assist me with this problem Andres 2013/4/26 Chitrang Srivastava <chitrang.srivastava@gmail.com>
whats the hostname of ur system ?
On Fri, Apr 26, 2013 at 6:30 PM, Andres <arvutihooldus@gmail.com> wrote:
this way looks my hosts file:
# IP-Address Full-Qualified-Hostname Short-Hostname #
127.0.0.1 localhost
# special IPv6 addresses ::1 localhost ipv6-localhost ipv6-loopback
fe00::0 ipv6-localnet
ff00::0 ipv6-mcastprefix ff02::1 ipv6-allnodes ff02::2 ipv6-allrouters ff02::3 ipv6-allhosts 10.58.5.58 radius.mydomain.com radius
Andres
2013/4/26 Chitrang Srivastava <chitrang.srivastava@gmail.com>
Most likely your host file didnt have entry of your domain name, dump your hostname and /etc/hosts file here and then we can comment better
On Thu, Apr 25, 2013 at 10:52 PM, Andres <arvutihooldus@gmail.com>wrote:
Hello All,
I'm trying to test mschap with radtest but it gives me strange error message. I've tried to solve it several days, but had no success.
I'm using syntax like that:
$ radtest -t mschap user password 127.0.0.1 0 secret
radclient : Failed to find IP address for host user: Success
radclient: $Id$ built on Jan 22 2013 at 23:55:37 FreeRADIUS Version 2.1.1, for host x86_64-suse-linux-gnu, built on Jan 22 2013
host file looks fine
I would appreciate it if someone can help me ,
Andres
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, what version of FreeRADIUS? are you sure you arent running old copies of radclient/radtest ie you THINK you can do "-t mschap" but the wrapper or binary doesnt radclient -v ? which radtest then cat the resulting file. alan
Hi, I have done clean SLES11 install FreeRADIUS server Version: 2.1.1-7.16.1 also installed freeradius-server-libs and utils FreeRADIUS server and libs and utils was installed via Yast. radius:/etc # radclient -v radclient: $Id$ built on Jan 22 2013 at 23:55:37 # # Version: $Id$ # prefix="/usr" exec_prefix="/usr" bindir="/usr/bin" usage() { echo "Usage: radtest user passwd radius-server[:port] nas-port-number secret [ppphint] [nasname]" >&2 exit 1 } radclient=$bindir/radclient if [ ! -x "$radclient" ] && [ -x ./radclient ] then radclient=./radclient fi if [ "$1" = "-d" ] then DICTIONARY="-d $2" shift;shift else DICTIONARY="" fi if [ $# -lt 5 ] || [ $# -gt 7 ] then usage fi if [ "$7" ] then nas=$7 else nas=`hostname` fi ( echo "User-Name = \"$1\"" echo "User-Password = \"$2\"" echo "NAS-IP-Address = $nas" echo "NAS-Port = $4" if [ "$6" ] then echo "Framed-Protocol = PPP" fi ) | $radclient $DICTIONARY -x $3 auth $5 Andres 2013/4/26 <A.L.M.Buxey@lboro.ac.uk>
Hi,
what version of FreeRADIUS? are you sure you arent running old copies of radclient/radtest
ie you THINK you can do "-t mschap" but the wrapper or binary doesnt
radclient -v ?
which radtest then cat the resulting file.
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
FreeRADIUS server Version: 2.1.1-7.16.1 also installed freeradius-server-libs and utils FreeRADIUS server and libs and utils was installed via Yast. radius:/etc # radclient -v radclient: $Id$ built on Jan 22 2013 at 23:55:37 # # Version: $Id$ # prefix="/usr" exec_prefix="/usr" bindir="/usr/bin" usage() { echo "Usage: radtest user passwd radius-server[:port] nas-port-number secret [ppphint] [nasname]" >&2
yes. thats your problem. OLD the current one says this: usage() { echo "Usage: radtest [OPTIONS] user passwd radius-server[:port] nas-port -number secret [ppphint] [nasname]" >&2 echo " -d RADIUS_DIR Set radius directory" >&2 echo " -t <type> Set authentication method" >&2 echo " type can be pap, chap, mschap, or eap- md5" >&2 echo " -x Enable debug output" >&2 etc etc etc note, the tool has OPTIONS. yours doesnt. and because yours doesnt, it thinks "-t" is the username and "mschap" is the password.... and therefore "testing" is the hostname and you have no such host! alan
Andres wrote:
FreeRADIUS server Version: 2.1.1-7.16.1 also installed freeradius-server-libs and utils
Why? That version is SEVEN YEARS old. Upgrade. Really. And you're using a version of radclient which doesn't support mschap. So... why are you trying to use mschap? We presume that you're running a recent version of the server. Also, that you read the documentation which comes with the server. If "radtest -h" doesn't say it supports the "-t" parameter, then it doesn't support the "-t" parameter. Alan DeKok.
Thank you all for your replays, I used SLES 11 freeradius standard package and it was too old, and it was my mistake and took a few days off my life. Hopefully someone else does not make the same mistake Andres 2013/4/27 Alan DeKok <aland@deployingradius.com>
Andres wrote:
FreeRADIUS server Version: 2.1.1-7.16.1 also installed freeradius-server-libs and utils
Why? That version is SEVEN YEARS old.
Upgrade. Really.
And you're using a version of radclient which doesn't support mschap. So... why are you trying to use mschap?
We presume that you're running a recent version of the server. Also, that you read the documentation which comes with the server. If "radtest -h" doesn't say it supports the "-t" parameter, then it doesn't support the "-t" parameter.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sun, Apr 28, 2013 at 1:31 AM, Andres <arvutihooldus@gmail.com> wrote:
Thank you all for your replays,
I used SLES 11 freeradius standard package and it was too old, and it was my mistake and took a few days off my life. Hopefully someone else does not make the same mistake
If all you need is mschap test function, IIRC 2.1.12 also has it, and there are packages for SLE 11: http://download.opensuse.org/repositories/network:/aaa/SLE_11/x86_64/ It will be even better if you can use 2.2.0. Search the list archive, IIRC you must manually delete references to sqlite3 in spec file to get it to build on SLE11. -- Fajar
participants (5)
-
A.L.M.Buxey@lboro.ac.uk -
Alan DeKok -
Andres -
Chitrang Srivastava -
Fajar A. Nugraha