I am a new user of Radius Server and I want to know how to test the authentification of an EAP-MD5 user using radtest, radclient or radeapclient. users file : ___________________________________________________________________ ali Auth-Type := EAP, User-Password == "ali" Reply-Message = "success" ___________________________________________________________________ The test : ___________________________________________________________________ echo "User-Name = ali, EAP-MD5-Password = ali" | radeapclient 127.0.0.1 auth testing123 ___________________________________________________________________ the result of the test is Access-Reject ___________________________________________________________________ Sending Access-Reject of id 133 to 127.0.0.1 port 32905 Reply-Message = "success" ___________________________________________________________________ Thanks in advance Amin BEN ABDALLAH
Amin BEN ABDALLAH wrote:
I am a new user of Radius Server and I want to know how to test the authentification of an EAP-MD5 user using radtest, radclient or radeapclient.
*users file :* ___________________________________________________________________ ali Auth-Type := EAP, User-Password == "ali" Reply-Message = "success"
Auth-Type needs to die. I seriously think it should be replaced with an attribute named: I-Should-Not-Be-Setting-Auth-Type-I-Acknowledge-What-I-Am-Doing-Is-Wrong * don't set Auth-Type * use := for password That is: ali User-Password := "ali" Reply-Message = "success" Try again with this. If it fails, repost and when showing debug output, don't trim it.
Phil Mayers wrote:
Auth-Type needs to die. I seriously think it should be replaced with an attribute named:
I-Should-Not-Be-Setting-Auth-Type-I-Acknowledge-What-I-Am-Doing-Is-Wrong
Sounds good to me. Almost all uses of Auth-Type are wrong. Third party documentation and "howtos" are almost all wrong. The main difficulty is that deleting it now will break many configurations. Maybe a solution is to add huge warnings to the debug output saying "THIS IS WRONG. IT WILL BREAK YOUR SYSTEM.". But the people who need to not use Auth-Type may not read the debug output, either... Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (3)
-
Alan DeKok -
Amin BEN ABDALLAH -
Phil Mayers