K, i'm stuck. Running freeradius 1.1.6 I've got the passwd module working and i can see in the startup.log that its loading the file and settings. the file is in the format username:password the password is an md5 generated password I keep getting a rejected message from my radtests, but I dont see any message in the radius.log as to why. i need to know either, how to get a more verbose log so i can tell what it is i'm doing wrong or simply what is wrong with the statement: passwd pull_export { filename = /home/ftpuser/export.txt format = "*User-Name:Crypt-Password" } -- Regards Joe
Hi,
i need to know either, how to get a more verbose log so i can tell what it is i'm doing wrong or simply what is wrong with the statement:
radiusd -X, as is well documented in lots of places.
passwd pull_export { filename = /home/ftpuser/export.txt format = "*User-Name:Crypt-Password" }
You don't use Crypt-Passwords, so saying that the file contains Crypt-Passwords seems not so wise. What you are looking for is format = "*User-Name:MD5-Password" I believe. Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
K, so i switched to Cleartext-Password for testing purposes. and I am testing with radiusd -X here is the bit that is failing. rad_recv: Access-Request packet from host 127.0.0.1:32768, id=22, length=62 User-Name = "5198546373" User-Password = "123" NAS-IP-Address = 255.255.255.255 NAS-Port = 10 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 1 users: Matched entry DEFAULT at line 153 modcall[authorize]: module "files" returns ok for request 1 rlm_passwd: Added Cleartext-Password: '123' to config_items modcall[authorize]: module "tcovc_group" returns ok for request 1 rlm_pap: Found existing Auth-Type, not changing it. modcall[authorize]: module "pap" returns noop for request 1 modcall: leaving group authorize (returns ok) for request 1 rad_check_password: Found Auth-Type System auth: type "System" ERROR: Unknown value specified for Auth-Type. Cannot perform requested action. auth: Failed to validate the user. according to documentation I shouldnt be using an auth-type anymore. On 10/17/07, Stefan Winter <stefan.winter@restena.lu> wrote:
Hi,
i need to know either, how to get a more verbose log so i can tell what it is i'm doing wrong or simply what is wrong with the statement:
radiusd -X, as is well documented in lots of places.
passwd pull_export { filename = /home/ftpuser/export.txt format = "*User-Name:Crypt-Password" }
You don't use Crypt-Passwords, so saying that the file contains Crypt-Passwords seems not so wise. What you are looking for is
format = "*User-Name:MD5-Password"
I believe.
Stefan
-- Stefan WINTER
Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung
6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards Joe
Joe Mom wrote:
K, so i switched to Cleartext-Password for testing purposes. ... users: Matched entry DEFAULT at line 153
Delete that entry from the "users" file. It is setting Auth-Type to System.
rlm_pap: Found existing Auth-Type, not changing it.
Once the above entry is deleted, it SHOULD just work. Alan DeKok.
eureka!!! the culprit was the line in users that stated # # First setup all accounts to be checked against the UNIX /etc/passwd. # (Unless a password was already given earlier in this file). # #DEFAULT Auth-Type = System # Fall-Through = 1 now i just gotta get the md5 working, but thats another story for another thread :P thanks for the help Alan On 10/17/07, Alan DeKok <aland@deployingradius.com> wrote:
Joe Mom wrote:
K, so i switched to Cleartext-Password for testing purposes. ... users: Matched entry DEFAULT at line 153
Delete that entry from the "users" file. It is setting Auth-Type to System.
rlm_pap: Found existing Auth-Type, not changing it.
Once the above entry is deleted, it SHOULD just work.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards Joe
participants (3)
-
Alan DeKok -
Joe Mom -
Stefan Winter