Re: Freeradius-Users Digest, Vol 113, Issue 86
Hi, "If you check rad client from remote machine the case will be different." I have binded my Radius client ip and port in clients.conf and in radiusd.conf. My radius server and client is present in two different PCs. Will that be a prob? Now in debug mode log looks like this: Cleaning up request 33 ID 108 with timestamp 541fd188 Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 10.253.6.11:1645, id=1, length=53 NAS-IP-Address = 11.6.253.10 User-Name = "raduser" User-Password = "k\014%\220\2779\213\203\307\030\222\364\004qM\223" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 34 modcall[authorize]: module "preprocess" returns ok for request 34 radius_xlat: '../var/log/radius/radacct/ 10.253.6.11/auth-detail-20140922.log' rlm_detail: ../var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d.log expands to ../var/log/radius/radacct/10.253.6.11/auth-detail-20140922.l modcall[authorize]: module "auth_log" returns ok for request 34 modcall[authorize]: module "chap" returns noop for request 34 modcall[authorize]: module "mschap" returns noop for request 34 rlm_realm: No '@' in User-Name = "raduser", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 34 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 34 users: Matched entry DEFAULT at line 170 modcall[authorize]: module "files" returns ok for request 34 rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 34 modcall: leaving group authorize (returns ok) for request 34 rad_check_password: Found Auth-Type System auth: type "System" ERROR: Unknown value specified for Auth-Type. Cannot perform requested action. auth: Failed to validate the user. Login incorrect: [raduser/k\014%\220\2779\213\203\307\030\222\364\004qM\223] (from client private-network-3 port 0) WARNING: Unprintable characters in the password. ? Double-check the shared secret on the server and the NAS! Delaying request 34 for 1 seconds Finished request 34 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 1 to 10.253.6.11 port 1645 Waking up in 4 seconds... rad_recv: Access-Request packet from host 10.253.6.11:1645, id=1, length=53 Sending duplicate reply to client private-network-3:1645 - ID: 1 Re-sending Access-Reject of id 1 to 10.253.6.11 port 1645 --- Walking the entire request list --- Waking up in 3 seconds... --- Walking the entire request list --- Cleaning up request 34 ID 1 with timestamp 541fd3a6 Nothing to do. Sleeping until we see a request. Thanks, Kavya On Mon, Sep 22, 2014 at 1:57 PM, < freeradius-users-request@lists.freeradius.org> wrote:
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re: Beginner need help (Himanshu Pandey) (KAVYA PRABHAKAR) 2. Re: Beginner need help (Himanshu Pandey) (Amit Linux) 3. 3.0.4: proxy-to-vserver and proxied post-auth? (Stefan Winter) 4. Re: Beginner need help (Himanshu Pandey) (A.L.M.Buxey@lboro.ac.uk)
----------------------------------------------------------------------
Message: 1 Date: Mon, 22 Sep 2014 13:10:54 +0530 From: KAVYA PRABHAKAR <kavyamelinmaneprabhakar@gmail.com> To: freeradius-users@lists.freeradius.org Subject: Re: Beginner need help (Himanshu Pandey) Message-ID: <CANpdVrz8yFuvUP55vtjdiX0hBRq6RQQ5wajb94LsJ=- 2XWHYxw@mail.gmail.com> Content-Type: text/plain; charset="utf-8"
Hi,
I am beginner. I installed Freeradius in my windows PC. With default configuration it works as expected.
Now I have a RADIUS client which will send request to server and I want server to authenticate the same.
I should be changing users.conf
raduser User-Password == "Password" where User-name = "raduser" and Password = "Password"
I will have to change clients.conf as well.
client <ipaddr/mask>{ secret = secret shortname = client name # what is the significance of shortname }
In radiusd.conf, I have changed to which Ip and port RADIUS server has to listen to. (optional)
After doing respective changes, I will execute following command:
radtest raduser Password 10.253.6.11 1812 Password
The result is as follows:
C:\FreeRADIUS.net\bin>radclient.exe -d ..\etc\raddb -f radtest.txt -x -s 127.1 au th testing123 Sending Access-Request of id 108 to 127.0.0.1 port 1812 User-Name = "testuser" User-Password = "testpw" NAS-IP-Address = 127.0.0.1 NAS-Port = 123 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=108, length=20
Total approved auths: 1 Total denied auths: 0 Total lost auths: 0
Here I would like to know why am I getting reply from 127.0.0.1 when I have explicitly asked to receive from 10.253.6.11
PFA the debug log.
Thanks in advance, Kavya
hi, read the output.
Login incorrect: [raduser/k\014%\220\2779\213\203\307\030\222\364\004qM\223] (from client private-network-3 >port 0)
WARNING: Unprintable characters in the password. ? Double-check the shared secret on the server and the >NAS!
incorrect shared secret alan
Hi kavya, Freeradius debug logs are very much self explanatory read read and read logs. Actually radius debug mode is another way to learn for new users at least I find it so useful for learning all the mistakes we make in configuration. Thanks to Alan, Arran and team for wonderful efforts. Regards Amit B. Sent from my iPhone
On 22-Sep-2014, at 15:24, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
hi,
read the output.
Login incorrect: [raduser/k\014%\220\2779\213\203\307\030\222\364\004qM\223] (from client private-network-3 >port 0) WARNING: Unprintable characters in the password. ? Double-check the shared secret on the server and the >NAS!
incorrect shared secret
alan
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan Buxey -
KAVYA PRABHAKAR -
Vijay A.