Salem, Yeh, I build the 2.1.3 version without problem and without installing libtool!!! it was great to see that :) but after running it, I tried to connect as test user but it was rejected! is this normal, what I did is: I run: root@kouka-desktop:/home/kouka# export LD_LIBRARY_PATH=/usr/local/lib root@kouka-desktop:/home/kouka# radiusd -X then I got many lines then: Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on proxy address * port 1814 Ready to process requests. so via another terminal I run (also as root, because with simple user it said to me you are not allowed to access a config file under /etc/....): root@kouka-desktop:/home/kouka# radtest test test localhost 0 testing123 I got in the client terminal this result: Sending Access-Request of id 210 to 127.0.0.1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=210, length=20 and in the server terminal this one: rad_recv: Access-Request packet from host 127.0.0.1 port 45738, id=210, length=56 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "test", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> test attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 210 to 127.0.0.1 port 45738 Waking up in 4.9 seconds. Cleaning up request 0 ID 210 with timestamp +322 Ready to process requests. Is that normal? how can I try that all run well? Best regards. 2008/12/10 Alan DeKok <aland@deployingradius.com>

Abdelmonam Kouka wrote:

...

I am new on FreeRadius, I tried to build it from sources on ubuntu 8.04, when I run ./configure all is OK, but when I run make I have got this error:

/home/kouka/Desktop/freeradius-server-2.1.2/src/freeradius-devel/modpriv.h:9:18:

Delete 2.1.2, and install 2.1.3. See http://freeradius.org for comments.

Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- ------------------------------------------------ عبد المنعم كوكة Abdelmonam Kouka Software Engineer GNU/Linux user #450141 GPG Fingerprint: EC21 1E4E 5B0C E4E7 0D64 3305 0D62 75C9 2C15 16E0 ================================================ "Some people see things as they are and say why. I dream things that never were and say why not?" [George Bernard Shaw] ================================================ http://www.ubuntume.com/ http://arabeyes.org/ http://www.ubuntu-tn.org/

I didn't add any user neither password, in fact I followed what I read on the INSTALL file, it indicates to test with this command and I did. 2008/12/11 <tnt@kalik.net>

...

I run: root@kouka-desktop:/home/kouka# export LD_LIBRARY_PATH=/usr/local/lib root@kouka-desktop:/home/kouka# radiusd -X

then I got many lines then: Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on proxy address * port 1814 Ready to process requests.

so via another terminal I run (also as root, because with simple user it said to me you are not allowed to access a config file under /etc/....): root@kouka-desktop:/home/kouka# radtest test test localhost 0 testing123

I got in the client terminal this result: Sending Access-Request of id 210 to 127.0.0.1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=210, length=20

and in the server terminal this one: rad_recv: Access-Request packet from host 127.0.0.1 port 45738, id=210, length=56 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "test", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> test attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 210 to 127.0.0.1 port 45738 Waking up in 4.9 seconds. Cleaning up request 0 ID 210 with timestamp +322 Ready to process requests.

Where did you put that users password? It's not in users file.

Ivan Kalik Kalik Informatika ISP

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- ------------------------------------------------ عبد المنعم كوكة Abdelmonam Kouka Software Engineer GNU/Linux user #450141 GPG Fingerprint: EC21 1E4E 5B0C E4E7 0D64 3305 0D62 75C9 2C15 16E0 ================================================ "Some people see things as they are and say why. I dream things that never were and say why not?" [George Bernard Shaw] ================================================ http://www.ubuntume.com/ http://arabeyes.org/ http://www.ubuntu-tn.org/

A.L.M.Buxey@lboro.ac.uk wrote:

Hi,

...

I didn't add any user neither password, in fact I followed what I read on the INSTALL file, it indicates to test with this command and I did.

you are right - it doesnt. a small oversight I guess.

No. The INSTALL file says: It doesn't matter if the authentication request is accepted or rejected, what matters is that the server received the request, and responded to it. Getting a Reject is FINE. It's DOCUMENTED. Alan DeKOk.

Yeh, I read it, but this "if" made me not sure, if the sentence was "the authentication request will be rejected, it is not a problem, what matters is that the server received the request, and responded to it." I wouldn't ask my question, but as I said this "if" forced me to ask to be sure of what happen exactly.

Well, some people bother to read more than just INSTALL file, discover how to create users and their requests don't get rejected. Ivan Kalik Kalik Informatika ISP

Abdelmonam Kouka wrote:

but after running it, I tried to connect as test user but it was rejected! is this normal, what I did is:

It's normal, because you haven't added a test user as suggested in the FAQ. Alan DeKok.