newbie question for freeradius
Hi all: i would like to use unix file /etc/passwd to authenticate users on my routers and somehow it always fails: rad_recv: Access-Request packet from host 192.168.10.101:61706, id=153, length=53 User-Name = "tester" User-Password = "test" NAS-Identifier = "lab_1" NAS-IP-Address = 192.168.6.1 rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. rlm_unix: GID too long in line: # $FreeBSD: src/etc/master.passwd,v 1.40.18.1 2008/11/25 02:59:29 kensmith Exp $ rlm_unix: [test]: invalid password rad_recv: Access-Request packet from host 192.168.10.101:61706, id=153, length=53 Sending Access-Reject of id 153 to 192.168.10.101 port 61706 here is the config for :users": DEFAULT Auth-Type = System Fall-Through = 1 i have user "tester" in /etc/passwd with password "test" in the freebsd box. Thanks in advance -- View this message in context: http://www.nabble.com/newbie-question-for-freeradius-tp22063719p22063719.htm... Sent from the FreeRadius - User mailing list archive at Nabble.com.
ipfreak wrote:
i would like to use unix file /etc/passwd to authenticate users on my routers and somehow it always fails:
Because you broke the "passwd" file.
rad_recv: Access-Request packet from host 192.168.10.101:61706, id=153, length=53 User-Name = "tester" User-Password = "test" NAS-Identifier = "lab_1" NAS-IP-Address = 192.168.6.1 rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. rlm_unix: GID too long in line: # $FreeBSD: src/etc/master.passwd,v 1.40.18.1 2008/11/25 02:59:29 kensmith Exp $
Wow... the "passwd" file does *not* allow comments. Whatever prompted you to add them? And that message should be pretty clear to anyone prepared to read it. Alan DeKok.
Hi Alan, FreeBSD's /etc/master.passwd file always has a comment at the top starting with a # which means ignore the line. Regards --jm On 17 Feb 2009, at 8:52 PM, Alan DeKok wrote:
ipfreak wrote:
i would like to use unix file /etc/passwd to authenticate users on my routers and somehow it always fails:
Because you broke the "passwd" file.
rad_recv: Access-Request packet from host 192.168.10.101:61706, id=153, length=53 User-Name = "tester" User-Password = "test" NAS-Identifier = "lab_1" NAS-IP-Address = 192.168.6.1 rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. rlm_unix: GID too long in line: # $FreeBSD: src/etc/master.passwd,v 1.40.18.1 2008/11/25 02:59:29 kensmith Exp $
Wow... the "passwd" file does *not* allow comments. Whatever prompted you to add them?
And that message should be pretty clear to anyone prepared to read it.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Jacques Marneweck wrote:
FreeBSD's /etc/master.passwd file always has a comment at the top starting with a # which means ignore the line.
That is non-standard... Anyways... if you're getting that message, it's because: 1) you're using a very old version of the server AND a) you edited the configuration files to enable the rlm_unix cache OR 2) you're using 2.x, and the FreeBSD libc is refusing to parse that line of the "passwd" file, and is returning that message. Alan DeKok.
Thanks. 1) rlm unix cache is set to 0. 2) yes, i am using FreeBSD7.1 and whatever the version the FreeBSD comes with. what really want to do is simple, just use /etc/passwd file for authentication.
Date: Tue, 17 Feb 2009 20:15:06 +0100 From: aland@deployingradius.com To: freeradius-users@lists.freeradius.org Subject: Re: newbie question for freeradius
Jacques Marneweck wrote:
FreeBSD's /etc/master.passwd file always has a comment at the top starting with a # which means ignore the line.
That is non-standard...
Anyways... if you're getting that message, it's because:
1) you're using a very old version of the server AND a) you edited the configuration files to enable the rlm_unix cache
OR
2) you're using 2.x, and the FreeBSD libc is refusing to parse that line of the "passwd" file, and is returning that message.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Windows Live™: Keep your life in sync. http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t1_allup_explore_022009
ip freak wrote:
Thanks.
1) rlm unix cache is set to 0. 2) yes, i am using FreeBSD7.1 and whatever the version the FreeBSD comes with.
what really want to do is simple, just use /etc/passwd file for authentication.
Then use the default configuration that comes with 1.1.X for the "unix" module. The ONLY way you get that error is if you edit the configuration files do do things that are NOT recommended. In 1.1.7 (and many earlier versions) there are comments in radiusd.conf, in the configuration files, saying what NOT to do on FreeBSD. You seem to have done exactly what was NOT recommended. Why? And why are you running 1.1.x? It is years out of date. Alan DeKok.
Thanks Alan: I will be looking into the version 2. really appreciate your advice..:)
Date: Wed, 18 Feb 2009 04:37:33 +0100 From: aland@deployingradius.com To: freeradius-users@lists.freeradius.org Subject: Re: newbie question for freeradius
ip freak wrote:
Thanks.
1) rlm unix cache is set to 0. 2) yes, i am using FreeBSD7.1 and whatever the version the FreeBSD comes with.
what really want to do is simple, just use /etc/passwd file for authentication.
Then use the default configuration that comes with 1.1.X for the "unix" module. The ONLY way you get that error is if you edit the configuration files do do things that are NOT recommended.
In 1.1.7 (and many earlier versions) there are comments in radiusd.conf, in the configuration files, saying what NOT to do on FreeBSD. You seem to have done exactly what was NOT recommended.
Why?
And why are you running 1.1.x? It is years out of date.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Windows Live™: E-mail. Chat. Share. Get more ways to connect. http://windowslive.com/online/hotmail?ocid=TXT_TAGLM_WL_HM_AE_Faster_022009
participants (4)
-
Alan DeKok -
ip freak -
ipfreak
-
Jacques Marneweck