I have followed several tutorials for setting up Active Directory with FreeRadius. When I run the ntlm_auth from the command line I get a success message however when I run the radtest with the username and password I get a Access-Reject. I am using FreeRadius 1.8 and I have included the message I get from radiusd -X. Any input would be greatly appreciated. rad_recv: Access-Request packet from host 10.1.174.126:3421, id=26, length=49 User-Name = "testuser" User-Password = "testpassword" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 modcall[authorize]: module "chap" returns noop for request 3 modcall[authorize]: module "mschap" returns noop for request 3 rlm_realm: No '@' in User-Name = "jmcsparin", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 3 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 3 modcall[authorize]: module "files" returns notfound for request 3 rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 3 modcall: leaving group authorize (returns ok) for request 3 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Joseph R. McSparin Network Administrator Hill Country Memorial Hospital 830 990 6638 phone 830 990 6623 fax jmcsparin@hillcountrymemorial.org -- This email message and any attachments are for the sole use of the intended recipient(s) and contain confidential and/or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message and any attachments.
Hi,
I have followed several tutorials for setting up Active Directory with FreeRadius. When I run the ntlm_auth from the command line I get a success message however when I run the radtest with the username and password I get a Access-Reject. I am using FreeRadius 1.8 and I have included the message I get from radiusd -X. Any input would be greatly appreciated.
show the debug when FR runs the ntlm_auth part - the small snippet you've provided is not useful. there is no such version as 1.8 - i guess you mean 1.1.8 - in which case, the best thing you can do is upgrade - to 2.1.x alan
I have been trying to upgrade to 2.1.x from 1.1.8 however I keeping getting this error In file included from /usr/local/include/krb5.h:846, from rlm_krb5.c:32: /usr/local/include/krb5-protos.h:41: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:49: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:402: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:486: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:634: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:843: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:908: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1007: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1281: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1289: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1297: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1305: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1313: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1321: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1329: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1337: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1600: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1608: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1616: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1624: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1632: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1640: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1648: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1656: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1741: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1844: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1854: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1874: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1919: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1952: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1975: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:1983: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:2083: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:2127: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:2142: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:2157: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:2169: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:2181: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:2223: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:2229: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:2607: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:2615: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:2622: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:2629: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:3144: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:3178: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:3183: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:3734: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:4091: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:4378: error: expected identifier or '(' before numeric constant gmake[6]: *** [rlm_krb5.lo] Error 1 gmake[6]: Leaving directory `/usr/ports/net/freeradius2/work/freeradius-server-2.1.12/src/modules/rlm_krb5' gmake[5]: *** [rlm_krb5] Error 2 gmake[5]: Leaving directory `/usr/ports/net/freeradius2/work/freeradius-server-2.1.12/src/modules' gmake[4]: *** [all] Error 2 gmake[4]: Leaving directory `/usr/ports/net/freeradius2/work/freeradius-server-2.1.12/src/modules' gmake[3]: *** [modules] Error 2 gmake[3]: Leaving directory `/usr/ports/net/freeradius2/work/freeradius-server-2.1.12/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/usr/ports/net/freeradius2/work/freeradius-server-2.1.12/src' gmake[1]: *** [src] Error 2 gmake[1]: Leaving directory `/usr/ports/net/freeradius2/work/freeradius-server-2.1.12' gmake: *** [all] Error 2 *** Error code 1 Stop in /usr/ports/net/freeradius2. *** Error code 1 Stop in /usr/ports/net/freeradius2. Joseph R. McSparin Network Administrator Hill Country Memorial Hospital 830 990 6638 phone 830 990 6623 fax jmcsparin@hillcountrymemorial.org -----Original Message----- From: freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists.freeradius.org [mailto:freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists.freeradius.org] On Behalf Of Alan Buxey Sent: Monday, December 19, 2011 4:06 PM To: FreeRadius users mailing list Subject: Re: FreeRadius Authentication using Active Directory Hi,
I have followed several tutorials for setting up Active Directory with FreeRadius. When I run the ntlm_auth from the command line I get a success message however when I run the radtest with the username and password I get a Access-Reject. I am using FreeRadius 1.8 and I have included the message I get from radiusd -X. Any input would be greatly appreciated.
show the debug when FR runs the ntlm_auth part - the small snippet you've provided is not useful. there is no such version as 1.8 - i guess you mean 1.1.8 - in which case, the best thing you can do is upgrade - to 2.1.x alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- This email message and any attachments are for the sole use of the intended recipient(s) and contain confidential and/or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message and any attachments.
Hi,
I have been trying to upgrade to 2.1.x from 1.1.8 however I keeping getting this error
In file included from /usr/local/include/krb5.h:846, from rlm_krb5.c:32: /usr/local/include/krb5-protos.h:41: error: expected identifier or '(' before numeric constant /usr/local/include/krb5-protos.h:49: error: expected identifier or '(' before numeric constant
hmm, nice include error - where did that krb5.h and krb5_protos.h come from? are they the MIT krb5 or some other flavour? what distro are you running? i've got no problems with the usual krb5-devel and krb5-dev on most systems provided by the distro the rlm_krb5.c is compiled using #include <krb5.h> - and if that version is interesting then things wont be right alan
participants (2)
-
Alan Buxey -
McSparin, Joe