Hi, I am trying to configure netscreen 208 firewall to authenticate and account for users traffic when they login via the captive portal. I have installed freeradius 2.1.9 on Fedora core 13. in the /etc/raddusers I added the bellow entry for rsa rsa Cleartext-Password := "nopass" Service-Type = Framed-User in the /etc/raddb/clients.conf I added client 193.188.129.33 { nastype = other secret = 12345 shortname = vdk-u-nsaaa when user rsa logs in to the captive portal the authentication is successful however user rsa still can not access the internet rad_recv: Access-Request packet from host 193.188.129.33 port 49715, id=1, length=49 User-Name = "rsa" User-Password = "nopass" NAS-IP-Address = 193.188.129.33 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "rsa", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound [files] users: Matched entry rsa at line 70 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated Found Auth-Type = PAP +- entering group PAP {...} [pap] login attempt with password "nopass" [pap] Using clear text password "nopass" [pap] User authenticated successfully ++[pap] returns ok +- entering group post-auth {...} ++[exec] returns noop Sending Access-Accept of id 1 to 193.188.129.33 port 49715 Service-Type = Framed-User Finished request 1. Going to the next request Waking up in 4.9 seconds. Cleaning up request 1 ID 1 with timestamp +135 Ready to process requests. thank you for your help Regards, Ramzi
Ramzi Abdallah wrote:
when user rsa logs in to the captive portal the authentication is successful however user rsa still can not access the internet
Read the NAS documentation to see which attributes in needs in the Access-Accept. This isn't a FreeRADIUS problem. Alan DeKok.
It's possible that this don't work? http://freeradius.org/list/users.html :? Martín Ruiz Ibersystems Solutions, SL Dpto. Redes Inalámbricas Tel. 902 430 367 669 37 95 21 Fax 93 758 63 01 http://www.ibersystems.es [http://www.ibersystems.es/] martinruiz@ibersystems.es [mailto:martinruiz@ibersystems.es] Estemensaje puede contener información confidencial y/o privilegiada. Siusted no es el destinatario o una persona expresamente autorizada pararecibir este envío no debe utilizar, copiar, reenviar, distribuir, o engeneral disponer de ninguna forma de la información incluida. Sihubiera recibido este mensaje por error, sírvase informar al emisormediante una respuesta inmediata y bórrelo, por favor. Muchas gracias. PAntes de imprimir este e-mail, piensa en si es realmente necesario: El Medio Ambiente es responsabilidad de todos -----Original Message----- From: Alan DeKok <aland@deployingradius.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Date: Wed, 13 Oct 2010 12:00:52 +0200 Subject: Re: Netscreen 208 and Freeradius Ramzi Abdallah wrote:
when user rsa logs in to the captive portal the authentication is
successful however user rsa still can not access the internet
Read the NAS documentation to see which attributes in needs in the Access-Accept. This isn't a FreeRADIUS problem. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html [http://www.freeradius.org/list/users.html]
participants (3)
-
Alan DeKok -
Martín @ Ibersystems -
Ramzi Abdallah