Failed to authenticate the user
Hi; I am getting the attached logs on debug. What could be the problem? -- Regards: George Innocent.
Hi,
Hi;
I am getting the attached logs on debug. What could be the problem?
heavily edited radiusd -X file I see after transferring your binary doc file to another system to view it. HOW are you meant to be authenticating this user? as none of your configured modules are dealing with it.... I also note that the user-name and password dont match User-Name = "P1Z1X2C7S9Y9B0O8[" User-Password = "P1Z1X2C7S9Y9B0O8" the username appears to have an extra character in it - these sorts of packets are usually identical.... alan
Hi; The only file that i edited is the clients and user file. When i use the default users on installation it works fine until i add the real thing. Rgds On Wed, Aug 1, 2012 at 1:27 PM, alan buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
Hi;
I am getting the attached logs on debug. What could be the problem?
heavily edited radiusd -X file I see after transferring your binary doc file to another system to view it.
HOW are you meant to be authenticating this user? as none of your configured modules are dealing with it....
I also note that the user-name and password dont match
User-Name = "P1Z1X2C7S9Y9B0O8[" User-Password = "P1Z1X2C7S9Y9B0O8"
the username appears to have an extra character in it - these sorts of packets are usually identical....
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
Hi,
Hi;
The only file that i edited is the clients and user file. When i use the default users on installation it works fine until i add the real thing.
...and what do those 2 files look like? I dont have mystic powers.... you need to ensure that they match - i've already pointed out what your RADIUS server is receiving.... alan
Hi; The two files that i have edited are attached. User and Client configuration files Thanks to advice on where i could be going wrong on the authentification Rgds On Wed, Aug 1, 2012 at 2:34 PM, alan buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
Hi;
The only file that i edited is the clients and user file. When i use the default users on installation it works fine until i add the real thing.
...and what do those 2 files look like? I dont have mystic powers.... you need to ensure that they match - i've already pointed out what your RADIUS server is receiving....
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
Hi;
The two files that i have edited are attached. User and Client configuration files Thanks to advice on where i could be going wrong on the authentification Rgds
On Wed, Aug 1, 2012 at 2:34 PM, alan buxey <A.L.M.Buxey@lboro.ac.uk>wrote:
Hi,
Hi;
The only file that i edited is the clients and user file. When i use the default users on installation it works fine until i add the real thing.
...and what do those 2 files look like? I dont have mystic powers.... you need to ensure that they match - i've already pointed out what your RADIUS server is receiving....
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
-- Regards: George Innocent.
Hi, I have checked on previous forums to this issue amended but still finds errors on debug Thanks to assist On 8/1/12, alan buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
The two files that i have edited are attached. User and Client configuration files Thanks to advice on where i could be going wrong on the authentification
..and where is this username: P1Z1X2C7S9Y9B0O8[
??
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
George, Is this still on Ubuntu 12.04 or did you end up rebuilding to CentOS 6.2? Forgive me if this is redundant information. -----Original Message----- From: freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org [mailto:freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org] On Behalf Of George Innocent Sent: Friday, August 03, 2012 6:58 AM To: FreeRadius users mailing list Subject: Re: Failed to authenticate the user Hi, I have checked on previous forums to this issue amended but still finds errors on debug Thanks to assist On 8/1/12, alan buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
The two files that i have edited are attached. User and Client configuration files Thanks to advice on where i could be going wrong on the authentification
..and where is this username: P1Z1X2C7S9Y9B0O8[
??
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html The information contained in this e-mail message may be confidential and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you think that you have received this e-mail message in error, please notify the sender immediately by replying to this message and then delete it from your system.
Its on the ubuntu installation failing on debug On 8/3/12, Julson, Jim <jjulson@marketron.com> wrote:
George,
Is this still on Ubuntu 12.04 or did you end up rebuilding to CentOS 6.2? Forgive me if this is redundant information.
-----Original Message----- From: freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org [mailto:freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org] On Behalf Of George Innocent Sent: Friday, August 03, 2012 6:58 AM To: FreeRadius users mailing list Subject: Re: Failed to authenticate the user
Hi, I have checked on previous forums to this issue amended but still finds errors on debug Thanks to assist
On 8/1/12, alan buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
The two files that i have edited are attached. User and Client configuration files Thanks to advice on where i could be going wrong on the authentification
..and where is this username: P1Z1X2C7S9Y9B0O8[
??
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html The information contained in this e-mail message may be confidential and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you think that you have received this e-mail message in error, please notify the sender immediately by replying to this message and then delete it from your system.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
I'm going to suggest a couple things. Take this as you will. 1. I'm not sure if it's a language barrier or not, but it really sounds as though you don't have a lot of experience with Linux in general, so, since you asked me for a step-by-step how-to document for Ubuntu, and all I had at the time was one for CentOS 6.2, I would suggest since you aren't very far in, that you simply rebuild and install CentOS 6.2 and follow my document to the LETTER. 2. Read the document line by line and do not skip any steps. Ensure that everything works as the document says it should before proceeding to the next step. Building/Rebuilding servers is a good way to develop the fundamental concepts of administration if you are starting at ground zero. Troubleshooting a non-working installation of freeradius usually isn't this difficult, and it sounds like you've quite possibly made a large number of changes. If rebuilding isn't an option..... I've now seen 3 responses to you all stating the same thing "The Debug output shows that FreeRADIUS CANT FIND THE USER P1Z1X2C7S9Y9B0O8[" You have yet to respond to that. So, is that a local user? Is it an LDAP user? What is it and where is it in your config? Everyone here at the list is very kind in offering their FREE support, but if you don't pay attention and respond to what they are asking, you won't ever get anywhere. If you don't understand what it is they are asking you to do, then you need to use things like Google as a tool to help you research and learn. I think it's safe to say that probably 99.99% of everyone here Google's first, then Lists second... -----Original Message----- From: freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org [mailto:freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org] On Behalf Of George Innocent Sent: Friday, August 03, 2012 8:26 AM To: FreeRadius users mailing list Subject: Re: Failed to authenticate the user Its on the ubuntu installation failing on debug On 8/3/12, Julson, Jim <jjulson@marketron.com> wrote:
George,
Is this still on Ubuntu 12.04 or did you end up rebuilding to CentOS 6.2? Forgive me if this is redundant information.
-----Original Message----- From: freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org [mailto:freeradius-users-bounces+jjulson=marketron.com@lists.freeradiu s.org] On Behalf Of George Innocent Sent: Friday, August 03, 2012 6:58 AM To: FreeRadius users mailing list Subject: Re: Failed to authenticate the user
Hi, I have checked on previous forums to this issue amended but still finds errors on debug Thanks to assist
On 8/1/12, alan buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
The two files that i have edited are attached. User and Client configuration files Thanks to advice on where i could be going wrong on the authentification
..and where is this username: P1Z1X2C7S9Y9B0O8[
??
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html The information contained in this e-mail message may be confidential and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you think that you have received this e-mail message in error, please notify the sender immediately by replying to this message and then delete it from your system.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html The information contained in this e-mail message may be confidential and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you think that you have received this e-mail message in error, please notify the sender immediately by replying to this message and then delete it from your system.
Hi,
I have checked on previous forums to this issue amended but still finds errors on debug
are you actually reading my messages and taking required action? your logs show that user cannot authenticate (P1Z1X2C7S9Y9B0O8[) NOWHERE have you shown that you have added this user to any of your config. FreeRADIUS isnt magic... alan
I have authenticated successfully locally but on trying the same from my NAS using the same credentials it fails. What could i be doing wrong> rad_recv: Access-Request packet from host 10.250.0.7 port 43677, id=185, length=70 NAS-IP-Address = 10.250.0.17 NAS-Identifier = "SAM-pst-clt" NAS-Port = 1 User-Name = "admin" User-Password = "admin" Tue Aug 7 15:54:08 2012 : Info: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Tue Aug 7 15:54:08 2012 : Info: +- entering group authorize {...} Tue Aug 7 15:54:08 2012 : Info: ++[preprocess] returns ok Tue Aug 7 15:54:08 2012 : Info: ++[chap] returns noop Tue Aug 7 15:54:08 2012 : Info: ++[mschap] returns noop Tue Aug 7 15:54:08 2012 : Info: ++[digest] returns noop Tue Aug 7 15:54:08 2012 : Info: [suffix] No '@' in User-Name = "admin", looking up realm NULL Tue Aug 7 15:54:08 2012 : Info: [suffix] No such realm "NULL" Tue Aug 7 15:54:08 2012 : Info: ++[suffix] returns noop Tue Aug 7 15:54:08 2012 : Info: [eap] No EAP-Message, not doing EAP Tue Aug 7 15:54:08 2012 : Info: ++[eap] returns noop Tue Aug 7 15:54:08 2012 : Info: [files] users: Matched entry admin at line 6 Tue Aug 7 15:54:08 2012 : Info: ++[files] returns ok Tue Aug 7 15:54:08 2012 : Info: ++[expiration] returns noop Tue Aug 7 15:54:08 2012 : Info: ++[logintime] returns noop Tue Aug 7 15:54:08 2012 : Info: [pap] WARNING: Auth-Type already set. Not setting to PAP Tue Aug 7 15:54:08 2012 : Info: ++[pap] returns noop Tue Aug 7 15:54:08 2012 : Info: Found Auth-Type = PAP Tue Aug 7 15:54:08 2012 : Info: # Executing group from file /usr/local/etc/raddb/sites-enabled/default Tue Aug 7 15:54:08 2012 : Info: +- entering group PAP {...} Tue Aug 7 15:54:08 2012 : Info: [pap] login attempt with password "admin" Tue Aug 7 15:54:08 2012 : Info: [pap] Using clear text password "testing" Tue Aug 7 15:54:08 2012 : Info: [pap] Passwords don't match Tue Aug 7 15:54:08 2012 : Info: ++[pap] returns reject Tue Aug 7 15:54:08 2012 : Info: Failed to authenticate the user. Tue Aug 7 15:54:08 2012 : Auth: Login incorrect (rlm_pap: CLEAR TEXT password check failed): [admin/admin] (from client SAM-pst port 1) Tue Aug 7 15:54:08 2012 : Info: Using Post-Auth-Type Reject Tue Aug 7 15:54:08 2012 : Info: # Executing group from file /usr/local/etc/raddb/sites-enabled/default Tue Aug 7 15:54:08 2012 : Info: +- entering group REJECT {...} Tue Aug 7 15:54:08 2012 : Info: [attr_filter.access_reject] expand: %{User-Name} -> admin Tue Aug 7 15:54:08 2012 : Debug: attr_filter: Matched entry DEFAULT at line 11 Tue Aug 7 15:54:08 2012 : Info: ++[attr_filter.access_reject] returns updated Tue Aug 7 15:54:08 2012 : Info: Delaying reject of request 43 for 1 seconds Tue Aug 7 15:54:08 2012 : Debug: Going to the next request Tue Aug 7 15:54:08 2012 : Debug: Waking up in 0.9 seconds. Tue Aug 7 15:54:09 2012 : Info: Sending delayed reject for request 43 Sending Access-Reject of id 185 to 10.250.0.7 port 43677 Tue Aug 7 15:54:09 2012 : Debug: Waking up in 4.9 seconds. Tue Aug 7 15:54:14 2012 : Info: Cleaning up request 43 ID 185 with timestamp +519 Tue Aug 7 15:54:14 2012 : Info: Ready to process requests. On Fri, Aug 3, 2012 at 6:58 PM, Alan DeKok <aland@deployingradius.com>wrote:
George Innocent wrote:
I have checked on previous forums to this issue amended but still finds errors on debug Thanks to assist
We're trying. You're not.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
George Innocent wrote:
I have authenticated successfully locally but on trying the same from my NAS using the same credentials it fails. What could i be doing wrong>
Almost everything. You're using "radiusd -Xx", where the docs say "radiusd -X". And you haven't bothered to read the debug output. The answer is in the debug output. If you can read English, it is obvious. Alan DeKok.
How long does the Radius changes take to synchronize with the NAS; what commands should i use to make effect changes made on the files. So far the NAS authenticates successfully with 5-10 attempts before changes made get to synchronize with the NAS. On Tue, Aug 7, 2012 at 1:19 PM, Alan DeKok <aland@deployingradius.com>wrote:
George Innocent wrote:
I have authenticated successfully locally but on trying the same from my NAS using the same credentials it fails. What could i be doing wrong>
Almost everything. You're using "radiusd -Xx", where the docs say "radiusd -X".
And you haven't bothered to read the debug output.
The answer is in the debug output. If you can read English, it is obvious.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
George Innocent wrote:
How long does the Radius changes take to synchronize with the NAS; what commands should i use to make effect changes made on the files.
You need to take a Unix 101 course. You clearly have no idea what you're doing. If you're editing the "users" file, then you will need to send the server a HUP signal.
So far the NAS authenticates successfully with 5-10 attempts before changes made get to synchronize with the NAS.
No. Alan DeKok.
And how do i send this signal of change> On Tue, Aug 7, 2012 at 4:03 PM, Alan DeKok <aland@deployingradius.com>wrote:
George Innocent wrote:
How long does the Radius changes take to synchronize with the NAS; what commands should i use to make effect changes made on the files.
You need to take a Unix 101 course. You clearly have no idea what you're doing.
If you're editing the "users" file, then you will need to send the server a HUP signal.
So far the NAS authenticates successfully with 5-10 attempts before changes made get to synchronize with the NAS.
No.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
George Innocent wrote:
And how do i send this signal of change>
Buy a book. You have no idea how to run a Unix system. This list isn't the place to learn. If you keep asking non-RADIUS questions, you'll be banned. You need to understand that your lack of knowledge about Unix is NOT our problem. We're not here to help you with that. Buy a book. Read it. Return when you know how to administer Unix systems. Alan DeKok.
Hi,
And how do i send this signal of change>
kill -HUP radiusd ..if the process is 'radiusd' - if its 'freeradius' (eg ubuntu) then its kill -HUP freeradius ...a service restart is just as good for this service radiusd restart (though , once again, that depends on your platform. if you were following the instructions and doing radiusd -X then you can just control-C that process in the window and re-run alan
Hi George, Have you ever heard of Google? It's amazing the stuff you can find on there, and people won't get annoyed with you for asking the list to do your job for you - which comes across as a bit lazy... HUP is straightforward, read http://www.freebsddiary.org/hup.php Everyone has to start somewhere but I'd suggest this list might not be the best place to ask basic Linux questions. There are some other really good places which I find very useful when I started out with this stuff http://www.linuxquestions.org/ is a good one. Mark -----Original Message----- From: freeradius-users-bounces+mark.holmes=nuffield.ox.ac.uk@lists.freeradius.org [mailto:freeradius-users-bounces+mark.holmes=nuffield.ox.ac.uk@lists.freeradius.org] On Behalf Of George Innocent Sent: 07 August 2012 14:24 To: FreeRadius users mailing list Subject: Re: Failed to authenticate the user And how do i send this signal of change> On Tue, Aug 7, 2012 at 4:03 PM, Alan DeKok <aland@deployingradius.com> wrote: George Innocent wrote: > How long does the Radius changes take to synchronize with the NAS; what > commands should i use to make effect changes made on the files. You need to take a Unix 101 course. You clearly have no idea what you're doing. If you're editing the "users" file, then you will need to send the server a HUP signal. > So far the NAS authenticates successfully with 5-10 attempts before > changes made get to synchronize with the NAS. No. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Regards: George Innocent. Nuffield College is a Registered Charity No. 1137506. Registered Office: Nuffield College, New Road, Oxford, OX1 1NF
when I start the radius server using radiusd -x I got the same error. Unable to open file " /usr/local/etc/raddb/radiusd.con": Permission Denied "Errors reading /usr/local/etc/raddb/radiusd.conf Please tell me how to solve the problem ? Rgds On Tue, Aug 7, 2012 at 3:56 PM, George Innocent <ginnocentus2002@gmail.com>wrote:
How long does the Radius changes take to synchronize with the NAS; what commands should i use to make effect changes made on the files. So far the NAS authenticates successfully with 5-10 attempts before changes made get to synchronize with the NAS.
On Tue, Aug 7, 2012 at 1:19 PM, Alan DeKok <aland@deployingradius.com>wrote:
George Innocent wrote:
I have authenticated successfully locally but on trying the same from my NAS using the same credentials it fails. What could i be doing wrong>
Almost everything. You're using "radiusd -Xx", where the docs say "radiusd -X".
And you haven't bothered to read the debug output.
The answer is in the debug output. If you can read English, it is obvious.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
-- Regards: George Innocent.
George Innocent wrote:
when I start the radius server using radiusd -x I got the same error. Unable to open file " /usr/local/etc/raddb/radiusd.con": Permission Denied "Errors reading /usr/local/etc/raddb/radiusd.conf Please tell me how to solve the problem ?
Buy a book. Alan DeKok.
Hi,
when I start the radius server using radiusd -x I got the same error. Unable to open file " /usr/local/etc/raddb/radiusd.con": Permission Denied
..and what user are you running as? this error message indicates you dont have permission to access those files - usually need to be 'root' or 'radiusd' user to run the daemon - unix is built on user/group/other permissions - each file/directory can be accessed by people in a certain group or by a particular owner alan
Hi,
rad_recv: Access-Request packet from host 10.250.0.7 port 43677, id=185, length=70
NAS-IP-Address = 10.250.0.17 NAS-Identifier = "SAM-pst-clt" NAS-Port = 1 User-Name = "admin" User-Password = "admin"
admin/admin
Tue Aug 7 15:54:08 2012 : Info: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Tue Aug 7 15:54:08 2012 : Info: +- entering group authorize {...} Tue Aug 7 15:54:08 2012 : Info: ++[preprocess] returns ok Tue Aug 7 15:54:08 2012 : Info: ++[chap] returns noop Tue Aug 7 15:54:08 2012 : Info: ++[mschap] returns noop Tue Aug 7 15:54:08 2012 : Info: ++[digest] returns noop Tue Aug 7 15:54:08 2012 : Info: [suffix] No '@' in User-Name = "admin", looking up realm NULL Tue Aug 7 15:54:08 2012 : Info: [suffix] No such realm "NULL" Tue Aug 7 15:54:08 2012 : Info: ++[suffix] returns noop Tue Aug 7 15:54:08 2012 : Info: [eap] No EAP-Message, not doing EAP Tue Aug 7 15:54:08 2012 : Info: ++[eap] returns noop Tue Aug 7 15:54:08 2012 : Info: [files] users: Matched entry admin at line 6 Tue Aug 7 15:54:08 2012 : Info: ++[files] returns ok Tue Aug 7 15:54:08 2012 : Info: ++[expiration] returns noop Tue Aug 7 15:54:08 2012 : Info: ++[logintime] returns noop Tue Aug 7 15:54:08 2012 : Info: [pap] WARNING: Auth-Type already set. Not setting to PAP Tue Aug 7 15:54:08 2012 : Info: ++[pap] returns noop Tue Aug 7 15:54:08 2012 : Info: Found Auth-Type = PAP Tue Aug 7 15:54:08 2012 : Info: # Executing group from file /usr/local/etc/raddb/sites-enabled/default Tue Aug 7 15:54:08 2012 : Info: +- entering group PAP {...} Tue Aug 7 15:54:08 2012 : Info: [pap] login attempt with password "admin" Tue Aug 7 15:54:08 2012 : Info: [pap] Using clear text password "testing" Tue Aug 7 15:54:08 2012 : Info: [pap] Passwords don't match
admin/testing fix the password. either on your client, or in your users file. your choice alan
Am 07.08.2012 12:05, schrieb George Innocent:
I have authenticated successfully locally ... Locally to what and how did you do that?
Tue Aug 7 15:54:08 2012 : Info: [pap] login attempt with password "admin" Tue Aug 7 15:54:08 2012 : Info: [pap] Using clear text password "testing" Tue Aug 7 15:54:08 2012 : Info: [pap] Passwords don't match
The log says that you are trying with the password 'admin' but the configured password is 'testing'. Cheers, Klaus
George Innocent wrote:
I am getting the attached logs on debug. What could be the problem?
You're sending "doc" files to the list. That is rude. You can just attach the logs as text. There is NO REASON to paste them into a "doc" file, and mail that. Our of general principle, I only read *readable* attachments to the list. Alan DeKok.
Sorry about that my mail filter might have converted this as it was rejecting the files initially; as for the user created I haven't edited the file with the stated user, On 8/1/12, Alan DeKok <aland@deployingradius.com> wrote:
George Innocent wrote:
I am getting the attached logs on debug. What could be the problem?
You're sending "doc" files to the list. That is rude.
You can just attach the logs as text. There is NO REASON to paste them into a "doc" file, and mail that.
Our of general principle, I only read *readable* attachments to the list.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
participants (6)
-
alan buxey -
Alan DeKok -
George Innocent -
Julson, Jim -
Klaus Klein -
Mark Holmes