PAP auth fails on new install/config of freeradius v 2.1.12
In the debug output freeradius –X I see the “WARNING: Please update your configuration and remove ‘Auth-Type = Local’” I have looked at all the config files and don’t seem to be finding Auth-Type = Local. I thought it should be found in sites-enabled/default Can someone please point me to where I’m missing that. <most of the freeradius –X> Ready to process requests. rad_recv: Access-Request packet from host 192.168.1.24 port 43300, id=231, length=41 User-Name = "t5admin" NAS-Port = 5060 NAS-IP-Address = 192.168.1.24 # Executing section authorize from file /etc/freeradius/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] No '@' in User-Name = "t5admin", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [files] users: Matched entry t5admin at line 86 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] No clear-text password in the request. Not performing PAP. ++[pap] returns noop WARNING: Please update your configuration, and remove 'Auth-Type = Local' WARNING: Use the PAP or CHAP modules instead. No User-Password or CHAP-Password attribute in the request. Cannot perform authentication. Failed to authenticate the user. Using Post-Auth-Type Reject # Executing group from file /etc/freeradius/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> t5admin attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 1 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 1 Sending Access-Reject of id 231 to 192.168.1.24 port 43300 Waking up in 4.9 seconds. Cleaning up request 1 ID 231 with timestamp +1703 Ready to process requests. TIA, John Williams -- *Thomas Edison once said, "The doctor of the future will give no medicine; instead he will interest his patients in the care of the human frame, nutrition and the cause and prevention of disease.”*
On Mar 5, 2015, at 6:02 PM, John Williams <jwill911@gmail.com> wrote:
In the debug output freeradius –X I see the “WARNING: Please update your configuration and remove ‘Auth-Type = Local’”
You’re using “User-Password” in the configuration. Don’t do that. It’s been deprecated and documented as bad practice for about 10 years now. Use “Cleartext-Password” as the “known good” password for the user.
[files] users: Matched entry t5admin at line 86
That entry is wrong. Fix it.
No User-Password or CHAP-Password attribute in the request.
That’s a useful message. You can’t authenticate a user when there’s no User-Password in the request. Fix that, too. Alan DeKok.
participants (2)
-
Alan DeKok -
John Williams