On Fri, May 08, 2009 at 11:35:20AM -0400, Steve Wu wrote:

Hi -

I have just started tinkering with Freeradius, I built an Ubuntu 8.10 server box and installed FR --> sudo apt-get install freeradius*. It installed in a breeze and tested fine. I have setup a HP420 AP for testing, it's chattering with the FR box fine (I think).

I want my wireless clients to do MAC authentication via the FR box. I have setup my users file to auth two of my test laptops:

000E35-84610A Auth-Type := Local, User-Password == "esradius" 00215C-08B25D Auth-Type := Local, User-Password == "esradius"

When either tries to connect up, in the FR debug I see:

rad_recv: Access-Request packet from host 10.10.18.241:2160, id=7, length=53 User-Name = "00215c-08b25d" User-Password = "00215c-08b25d" Processing the authorize section of radiusd.conf

The authentication eventually fails:

rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this.

Why is the User-Password the MAC address and not what is specified in the users file? I have only tweaked the users and clients.conf files.

That is what MAC authentication is, if the MAC is in the list it can connect. Cheers, Ken

Just simple MAC authentication, that's all I want at this point.

Thanks in advance!

- Steve

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Steve, Your wireless access point is sending the MAC address as the username and password. Change the username and password in the users file and the authentication will work. rad_recv: Access-Request packet from host 10.10.18.241:2160, id=7, length=53 User-Name = "00215c-08b25d" <--- This came from the wireless access point User-Password = "00215c-08b25d" <--- This came from the wireless access point Tim From: freeradius-users-bounces+tim.sylvester=networkradius.com@lists.freeradius.org [mailto:freeradius-users-bounces+tim.sylvester=networkradius.com@lists.freeradius.org] On Behalf Of Steve Wu Sent: Friday, May 08, 2009 8:35 AM To: freeradius-users@lists.freeradius.org Subject: FR Using MAC Authentication Hi - I have just started tinkering with Freeradius, I built an Ubuntu 8.10 server box and installed FR --> sudo apt-get install freeradius*. It installed in a breeze and tested fine. I have setup a HP420 AP for testing, it's chattering with the FR box fine (I think). I want my wireless clients to do MAC authentication via the FR box. I have setup my users file to auth two of my test laptops: 000E35-84610A Auth-Type := Local, User-Password == "esradius" 00215C-08B25D Auth-Type := Local, User-Password == "esradius" When either tries to connect up, in the FR debug I see: rad_recv: Access-Request packet from host 10.10.18.241:2160, id=7, length=53 User-Name = "00215c-08b25d" User-Password = "00215c-08b25d" Processing the authorize section of radiusd.conf The authentication eventually fails: rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. Why is the User-Password the MAC address and not what is specified in the users file? I have only tweaked the users and clients.conf files. Just simple MAC authentication, that's all I want at this point. Thanks in advance! - Steve