Use MS RAS as RADIUS client, FreeRADIUS got no User-Password

11 Dec 2006


      Hello everyone, 
I am newbie to FreeRADIUS. Using Windows RAS (VPN server) as RADIUS client, 
but from output, I can see that there is no User-Password field in request 
from RAS at all, I am using rlm_jradius inside freeradius to forward 
username/password to my own authentication program. 
Only found one post about this issue, someone suggested to put mschap in 
conf file, but I am sure it's there already. Do I need to change anything 
on RAS side? I am using freeradius 1.1.2.
Anybody can help me out? 
Thank you in advance 
Jeffrey 


rad_recv: Access-Request packet from host 192.168.2.151:1382, id=8, 
length=289 
       Acct-Session-Id = "108" 
       NAS-IP-Address = 192.168.2.151 
       Service-Type = Framed-User 
       Framed-Protocol = PPP 
       NAS-Port = 129 
       MS-RAS-Vendor = 311 
       MS-RAS-Version = "MSRASV5.20" 
       NAS-Port-Type = Virtual 
       Tunnel-Type:0 = PPTP 
       Tunnel-Medium-Type:0 = IP 
       Calling-Station-Id = "10.11.14.105" 
       Tunnel-Client-Endpoint:0 = "10.11.14.105" 
       Microsoft-Attr-35 = 0x4d5352415356352e3030 
       Microsoft-Attr-34 = 0x4d535241532d312d4a454646324b 
       User-Name = "dvmh00000055@DVVPN.COM" 
       MS-CHAP-Challenge = 0xe6e76c750472fb5879986d8b8e75df6e 
       MS-CHAP2-Response = 
0x0000f21eb6c0b591297af094964bb6e9417c0000000000000000f990636a5a5237f4c3456225c9c475b07004e32cb758fdf2 


       Message-Authenticator = 0x25fa1bd20b0a0f3fa273ae4fc66eb8d5 
Processing the authorize section of radiusd.conf 
modcall: entering group authorize for request 0 
modcall[authorize]: module "preprocess" returns ok for request 0 
modcall[authorize]: module "chap" returns noop for request 0 
rlm_mschap: Found MS-CHAP attributes.  Setting 'Auth-Type  = mschap' 
modcall[authorize]: module "mschap" returns ok for request 0 
   rlm_realm: Looking up realm "DVVPN.COM" for User-Name = 
"dvmh00000055@DVVPN.COM" 
   rlm_realm: No such realm "DVVPN.COM" 
modcall[authorize]: module "suffix" returns noop for request 0 
rlm_eap: No EAP-Message, not doing EAP 
modcall[authorize]: module "eap" returns noop for request 0 
   users: Matched entry DEFAULT at line 152 
   users: Matched entry DEFAULT at line 171 
   users: Matched entry DEFAULT at line 183 
modcall[authorize]: module "files" returns ok for request 0 
rlm_jradius: packing attribute Acct-Session-Id (type: 44; len: 3) 
rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4) 
rlm_jradius: packing attribute Service-Type (type: 6; len: 4) 
rlm_jradius: packing attribute Framed-Protocol (type: 7; len: 4) 
rlm_jradius: packing attribute NAS-Port (type: 5; len: 4) 
rlm_jradius: packing attribute MS-RAS-Vendor (type: 20381705; len: 4) 
rlm_jradius: packing attribute MS-RAS-Version (type: 20381714; len: 10) 
rlm_jradius: packing attribute NAS-Port-Type (type: 61; len: 4) 
rlm_jradius: packing attribute Tunnel-Type (type: 64; len: 4) 
rlm_jradius: packing attribute Tunnel-Medium-Type (type: 65; len: 4) 
rlm_jradius: packing attribute Calling-Station-Id (type: 31; len: 12) 
rlm_jradius: packing attribute Tunnel-Client-Endpoint (type: 66; len: 12) 
rlm_jradius: packing attribute Microsoft-Attr-35 (type: 20381731; len: 10) 
rlm_jradius: packing attribute Microsoft-Attr-34 (type: 20381730; len: 14) 
rlm_jradius: packing attribute User-Name (type: 1; len: 22) 
rlm_jradius: packing attribute MS-CHAP-Challenge (type: 20381707; len: 16) 
rlm_jradius: packing attribute MS-CHAP2-Response (type: 20381721; len: 50) 
rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16) 
rlm_jradius: packing attribute Client-IP-Address (type: 1052; len: 4) 
rlm_jradius: packing packet with code: 1 (attr length: 429) 
rlm_jradius: packing attribute Framed-IP-Address (type: 8; len: 4) 
rlm_jradius: packing attribute Framed-MTU (type: 12; len: 4) 
rlm_jradius: packing attribute Service-Type (type: 6; len: 4) 
rlm_jradius: packing attribute Framed-Protocol (type: 7; len: 4) 
rlm_jradius: packing attribute Framed-Compression (type: 13; len: 4) 
rlm_jradius: packing packet with code: 0 (attr length: 80) 
rlm_jradius: packing attribute Auth-Type (type: 1000; len: 4) 
rlm_jradius: packing attribute Service-Type (type: 6; len: 4) 
rlm_jradius: packing attribute Framed-Protocol (type: 7; len: 4) 
rlm_jradius: sending 586 bytes to jradius server 
rlm_jradius: return code 8; receiving 2 packets 
rlm_jradius: reading packet: code=1 len=429 
rlm_jradius: reading attribute: type=44; len=3 
rlm_jradius: reading attribute: type=4; len=4 
rlm_jradius: reading attribute: type=6; len=4 
rlm_jradius: reading attribute: type=7; len=4 
rlm_jradius: reading attribute: type=5; len=4 
rlm_jradius: reading attribute: type=20381705; len=4 
rlm_jradius: reading attribute: type=20381714; len=10 
rlm_jradius: reading attribute: type=61; len=4 
rlm_jradius: reading attribute: type=64; len=4 
rlm_jradius: reading attribute: type=65; len=4 
rlm_jradius: reading attribute: type=31; len=12 
rlm_jradius: reading attribute: type=66; len=12 
rlm_jradius: reading attribute: type=20381731; len=10 
rlm_jradius: received attribute we do not recognize (type: 20381731) 
rlm_jradius: reading attribute: type=20381730; len=14 
rlm_jradius: received attribute we do not recognize (type: 20381730) 
rlm_jradius: reading attribute: type=1; len=22 
rlm_jradius: reading attribute: type=20381707; len=16 
rlm_jradius: reading attribute: type=20381721; len=50 
rlm_jradius: reading attribute: type=80; len=16 
rlm_jradius: reading attribute: type=1052; len=4 
rlm_jradius: reading packet: code=0 len=80 
rlm_jradius: reading attribute: type=8; len=4 
rlm_jradius: reading attribute: type=12; len=4 
rlm_jradius: reading attribute: type=6; len=4 
rlm_jradius: reading attribute: type=7; len=4 
rlm_jradius: reading attribute: type=13; len=4 
rlm_jradius: reading request: config_item: len=48 
rlm_jradius: reading attribute: type=1000; len=4 
rlm_jradius: reading attribute: type=6; len=4 
rlm_jradius: reading attribute: type=7; len=4 
modcall[authorize]: module "jradius" returns updated for request 0 
modcall: leaving group authorize (returns updated) for request 0 
rad_check_password:  Found Auth-Type 
auth: type "MS-CHAP" 
Processing the authenticate section of radiusd.conf 
modcall: entering group MS-CHAP for request 0 
rlm_mschap: No User-Password configured.  Cannot create LM-Password. 
rlm_mschap: No User-Password configured.  Cannot create NT-Password. 
rlm_mschap: Told to do MS-CHAPv2 for dvmh00000055@DVVPN.COM with 
NT-Password 
rlm_mschap: FAILED: No NT/LM-Password.  Cannot perform authentication. 
rlm_mschap: FAILED: MS-CHAP2-Response is incorrect 
modcall[authenticate]: module "mschap" returns reject for request 0 
modcall: leaving group MS-CHAP (returns reject) for request 0 
auth: Failed to validate the user. 
Login incorrect: [dvmh00000055@DVVPN.COM/<no User-Password attribute>] 
(from client jeff2003 port 129 cli 10.11.14.105) 
Found Post-Auth-Type 
Processing the post-auth section of radiusd.conf 
modcall: entering group REJECT for request 0 
rlm_jradius: packing attribute Acct-Session-Id (type: 44; len: 3) 
rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4) 
rlm_jradius: packing attribute Service-Type (type: 6; len: 4) 
rlm_jradius: packing attribute Framed-Protocol (type: 7; len: 4) 
rlm_jradius: packing attribute NAS-Port (type: 5; len: 4) 
rlm_jradius: packing attribute MS-RAS-Vendor (type: 20381705; len: 4) 
rlm_jradius: packing attribute MS-RAS-Version (type: 20381714; len: 10) 
rlm_jradius: packing attribute NAS-Port-Type (type: 61; len: 4) 
rlm_jradius: packing attribute Tunnel-Type (type: 64; len: 4) 
rlm_jradius: packing attribute Tunnel-Medium-Type (type: 65; len: 4) 
rlm_jradius: packing attribute Calling-Station-Id (type: 31; len: 12) 
rlm_jradius: packing attribute Tunnel-Client-Endpoint (type: 66; len: 12) 
rlm_jradius: packing attribute User-Name (type: 1; len: 22) 
rlm_jradius: packing attribute MS-CHAP-Challenge (type: 20381707; len: 16) 
rlm_jradius: packing attribute MS-CHAP2-Response (type: 20381721; len: 50) 
rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16) 
rlm_jradius: packing attribute Client-IP-Address (type: 1052; len: 4) 
rlm_jradius: packing packet with code: 1 (attr length: 381) 
rlm_jradius: packing attribute Framed-IP-Address (type: 8; len: 4) 
rlm_jradius: packing attribute Framed-MTU (type: 12; len: 4) 
rlm_jradius: packing attribute Service-Type (type: 6; len: 4) 
rlm_jradius: packing attribute Framed-Protocol (type: 7; len: 4) 
rlm_jradius: packing attribute Framed-Compression (type: 13; len: 4) 
rlm_jradius: packing attribute MS-CHAP-Error (type: 20381698; len: 10) 
rlm_jradius: packing packet with code: 3 (attr length: 102) 
rlm_jradius: packing attribute Auth-Type (type: 1000; len: 4) 
rlm_jradius: packing attribute Service-Type (type: 6; len: 4) 
rlm_jradius: packing attribute Framed-Protocol (type: 7; len: 4) 
rlm_jradius: packing attribute Post-Auth-Type (type: 1014; len: 4) 
rlm_jradius: sending 576 bytes to jradius server 
rlm_jradius: return code 7; receiving 2 packets 
rlm_jradius: reading packet: code=1 len=381 
rlm_jradius: reading attribute: type=44; len=3 
rlm_jradius: reading attribute: type=4; len=4 
rlm_jradius: reading attribute: type=6; len=4 
rlm_jradius: reading attribute: type=7; len=4 
rlm_jradius: reading attribute: type=5; len=4 
rlm_jradius: reading attribute: type=20381705; len=4 
rlm_jradius: reading attribute: type=20381714; len=10 
rlm_jradius: reading attribute: type=61; len=4 
rlm_jradius: reading attribute: type=64; len=4 
rlm_jradius: reading attribute: type=65; len=4 
rlm_jradius: reading attribute: type=31; len=12 
rlm_jradius: reading attribute: type=66; len=12 
rlm_jradius: reading attribute: type=1; len=22 
rlm_jradius: reading attribute: type=20381707; len=16 
rlm_jradius: reading attribute: type=20381721; len=50 
rlm_jradius: reading attribute: type=80; len=16 
rlm_jradius: reading attribute: type=1052; len=4 
rlm_jradius: reading packet: code=3 len=102 
rlm_jradius: reading attribute: type=8; len=4 
rlm_jradius: reading attribute: type=12; len=4 
rlm_jradius: reading attribute: type=6; len=4 
rlm_jradius: reading attribute: type=7; len=4 
rlm_jradius: reading attribute: type=13; len=4 
rlm_jradius: reading attribute: type=20381698; len=10 
rlm_jradius: reading request: config_item: len=64 
rlm_jradius: reading attribute: type=1000; len=4 
rlm_jradius: reading attribute: type=6; len=4 
rlm_jradius: reading attribute: type=7; len=4 
rlm_jradius: reading attribute: type=1014; len=4 
modcall[post-auth]: module "jradius" returns noop for request 0 
modcall: leaving group REJECT (returns noop) for request 0 
Delaying request 0 for 1 seconds 
Finished request 0 
Going to the next request 
--- Walking the entire request list --- 
Waking up in 1 seconds... 
--- Walking the entire request list --- 
Sending Access-Reject of id 8 to 192.168.2.151 port 1382 
Waking up in 3 seconds... 
--- Walking the entire request list --- 
Cleaning up request 0 ID 8 with timestamp 457dbde0 
Nothing to do.  Sleeping until we see a request

_________________________________________________________________
享用世界上最大的电子邮件系统― MSN Hotmail。 http://www.hotmail.com

Cui Jeffrey

tags

participants (1)