Hi all! I've got a problem with freeradius configuration: I've to build a login to D-Link 3526 using FreeRadius Server I've run freeradius -X my output is: #v+ ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] No '@' in User-Name = "yarii", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [files] users: Matched entry DEFAULT at line 172 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Using Post-Auth-Type Reject # Executing group from file /etc/freeradius/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> yarii attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request #v- My settings from radius is: yarii Cleartext-Password := "somepass" Crypt-Password := "something", Auth-Type:= Local, Mikrotik-Group = full, Service-Type = Login-User, cisco-avpair = "shell:priv-lvl=15", User-Level = "5" Anybody can help me? Where to find the problem? Best wishes -- Jarosław 'YArii' Kłopotek mob +48 607 893 111 GG:1336231 INTERDUO s.c. ul. Lubelska 36B/40 21-100 Lubartów tel 81 477 54 54
Jarosław Kłopotek wrote:
I've got a problem with freeradius configuration: I've to build a login to D-Link 3526 using FreeRadius Server
I've run freeradius -X my output is:
#v+ ++[preprocess] returns ok ++[chap] returns noop
So... you've deleted most of the debug output. Including the incoming packet. That makes it pretty much impossible to help you.
[files] users: Matched entry DEFAULT at line 172
What is the entry at that line?
++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.
That message should be clear. What part of it is hard to understand?
My settings from radius is:
No, it's not. It's from the "users" file. There is no magic "radius" setting. Use the correct terminology. No one will understand you if you keep saying "south" when you mean "north". And you'll get lost, too.
yarii Cleartext-Password := "somepass" Crypt-Password := "something", Auth-Type:= Local,
That is wrong on many, many levels. See "man users", and the other examples in the "users" file.
Anybody can help me? Where to find the problem?
You didn't follow the existing examples, documentation, or FAQ. Alan DeKok.
W dniu 2012-05-31 13:16, Alan DeKok pisze:
Jarosław Kłopotek wrote:
I've got a problem with freeradius configuration: I've to build a login to D-Link 3526 using FreeRadius Server
I've run freeradius -X my output is:
#v+ ++[preprocess] returns ok ++[chap] returns noop So... you've deleted most of the debug output. Including the incoming packet.
That makes it pretty much impossible to help you. Yes You were right.
++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. That message should be clear. What part of it is hard to understand? Not clear for me, because I was obviously sure that given password was right. I checked it twice and twice again for anykind of typo.
My settings from radius is: No, it's not. It's from the "users" file. There is no magic "radius" setting. My bad that You didn't understand.
But when You are eating a salad in cheeseburger. You are saying that you aren't eating cheeseburger? If I change salad to onion, will be the cheesburger the same? For me File called user is somekind of user database, freeradius is using it, so in very shortcut it is radius setting :-)
Use the correct terminology. No one will understand you if you keep saying "south" when you mean "north". And you'll get lost, too. My bad. Errare humanum est. I am using radius for one year, but in the pas I didn't touch the defaults from debian packages;]
yarii Cleartext-Password := "somepass" Crypt-Password := "something", Auth-Type:= Local, That is wrong on many, many levels. See "man users", and the other examples in the "users" file.
Wrong but worked for me. Of course passwords was changed to somepass and something.
Anybody can help me? Where to find the problem? You didn't follow the existing examples, documentation, or FAQ.
It is not true. I really got back to basics when the problem appeared. I can recomend a book Freeradius Beginers guide "Manage your network resources with FreeRADIUS" by Dirk van der Walt. It helped me go deeper deeper and show me the problem. Let the google index that: PROBLEM: My problem with D-Link 3526 and 3550 was: The D-Link devices are cutting passwords by web to first 16 chars. SOLUTION: Use passwords shorter than 16 chars. It f*ed me almost whole day. Best Wishes -- Jarosław 'YArii' Kłopotek mob +48 607 893 111 GG:1336231 INTERDUO s.c. ul. Lubelska 36B/40 21-100 Lubartów tel 81 477 54 54
Jarosław Kłopotek wrote:
[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. That message should be clear. What part of it is hard to understand? Not clear for me, because I was obviously sure that given password was right.
It doesn't say "given" password. You didn't understand the message. You need to supply the GOOD password for the users. That is compared to the password entered by the user. If you DON'T supply a "known good" password, how can the server know the user's password is correct? Magic?
No, it's not. It's from the "users" file. There is no magic "radius" setting. My bad that You didn't understand.
Try thinking for once. You, with no RADIUS background. Me, with 15 years, writing FreeRADIUS, and author of multiple RADIUS standards. Which one doesn't understand? Follow instructions on this list, or you will be unsubscribed and banned.
But when You are eating a salad in cheeseburger. You are saying that you aren't eating cheeseburger? If I change salad to onion, will be the cheesburger the same? For me File called user is somekind of user database, freeradius is using it, so in very shortcut it is radius setting :-)
Nonsense. That ridiculous idea is exactly why you haven't already solved the problem.
You didn't follow the existing examples, documentation, or FAQ.
It is not true.
You can believe the author of the program, or you can believe someone (you) who has no experience with RADIUS. Alan DeKok.
participants (2)
-
Alan DeKok -
Jarosław Kłopotek