Hi All I am a newbie to freeradius. I am trying to use freeradius as an authentication server along with a WRT54G Linksys (Cisco) access point. On the client side i have a windows machine where i have enabled PEAP authentication, through which it asks me for user name and password. The problem i am facing is that the Radius server is not getting password, and hence not authenticating. Following is a snippet of the log i got : rad_recv: Access-Request packet from host 10.129.20.111:2863, id=0, length=169 --- Walking the entire request list --- Waking up in 31 seconds... Threads: total/active/spare threads = 5/0/5 Thread 1 got semaphore Thread 1 handling request 0, (1 handled so far) Message-Authenticator = 0xd75320cd909f5132bb834f1196e6f5b3 Service-Type = Framed-User User-Name = "steve" Framed-MTU = 1488 Called-Station-Id = "00-18-F8-64-80-D9:ANUJ" Calling-Station-Id = "00-17-9A-D1-9F-B7" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 54Mbps 802.11g" EAP-Message = 0x0200000a017374657665 NAS-IP-Address = 10.129.20.111 NAS-Port = 7 NAS-Port-Id = "STA port # 7" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "steve", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: EAP packet type response id 0 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry steve at line 80 modcall[authorize]: module "files" returns ok for request 0 modcall: leaving group authorize (returns updated) for request 0 rad_check_password: Found Auth-Type Local auth: type Local *auth: No User-Password or CHAP-Password attribute in the request* *auth: Failed to validate the user.* *Login incorrect: [steve/<no User-Password attribute>] (from client localhost port 7 cli 00-17-9A-D1-9F-B7)* Delaying request 0 for 1 seconds Finished request 0 Going to the next request Thread 1 waiting to be assigned a request rad_recv: Access-Request packet from host 10.129.20.111:2863, id=0, length=169 Sending Access-Reject of id 0 to 10.129.20.111 port 2863 --- Walking the entire request list --- Waking up in 3 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 0 with timestamp 45dc2565 Nothing to do. Sleeping until we see a request. My Client file reads : steve Auth-Type := Local, User-Password == "testing" Service-Type = Framed-User, Framed-Protocol = PPP Am I missing out on something ? Kindly help me with this as soon as possible. Its a little urgent. regards, Anuj Tripathi
Anuj Tripathi wrote:
I am a newbie to freeradius. I am trying to use freeradius as an authentication server along with a WRT54G Linksys (Cisco) access point.
On the client side i have a windows machine where i have enabled PEAP authentication, through which it asks me for user name and password. ... My Client file reads :
steve Auth-Type := Local, User-Password == "testing" Service-Type = Framed-User, Framed-Protocol = PPP
Don't set Auth-Type.
Am I missing out on something ? Kindly help me with this as soon as possible. Its a little urgent.
Use: steve User-Password := "testing" Or, if you're using 1.1.4: steve Cleartext-Password := "testing" And nothing else. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
It still gives the same problem. Do i need to make some changes in eap.conf ? What are the minimal changes required for using Freeradius for PEAP authentication ? Following is the response that i am getting : rad_recv: Access-Request packet from host 10.129.20.111:3591, id=0, length=169 Message-Authenticator = 0xfe4a60518e04b51d6b38d7fedf1aaea0 Service-Type = Framed-User User-Name = "steve" Framed-MTU = 1488 Called-Station-Id = "00-18-F8-64-80-D9:ANUJ" Calling-Station-Id = "00-17-9A-D1-9F-B7" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 54Mbps 802.11g" EAP-Message = 0x0200000a017374657665 NAS-IP-Address = 10.129.20.111 NAS-Port = 9 NAS-Port-Id = "STA port # 9" rlm_eap_md5: Issuing Challenge Sending Access-Challenge of id 0 to 10.129.20.111 port 3591 Service-Type = Framed-User Framed-Protocol = PPP EAP-Message = 0x01010016041033d59fe0ac35054f1a2955533d1e3e9a Message-Authenticator = 0x00000000000000000000000000000000 State = 0x76a720bea474bc7d81c3b354d59c6153 rad_recv: Access-Request packet from host 10.129.20.111:3591, id=1, length=183 Message-Authenticator = 0x4ddde4cd8366b803d83f50b4a49b3848 Service-Type = Framed-User User-Name = "steve" Framed-MTU = 1488 State = 0x76a720bea474bc7d81c3b354d59c6153 Called-Station-Id = "00-18-F8-64-80-D9:ANUJ" Calling-Station-Id = "00-17-9A-D1-9F-B7" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 54Mbps 802.11g" EAP-Message = 0x020100060319 NAS-IP-Address = 10.129.20.111 NAS-Port = 9 NAS-Port-Id = "STA port # 9" Login incorrect: [steve/<no User-Password attribute>] (from client localhost port 9 cli 00-17-9A-D1-9F-B7) rad_recv: Access-Request packet from host 10.129.20.111:3591, id=1, length=183 Sending Access-Reject of id 1 to 10.129.20.111 port 3591 EAP-Message = 0x04010004 Message-Authenticator = 0x00000000000000000000000000000000 Password is visible no where. I am not getting any response from access-challenge it seems. Any ideas what cud be wrong ? -Anuj Alan DeKok wrote:
Anuj Tripathi wrote:
I am a newbie to freeradius. I am trying to use freeradius as an authentication server along with a WRT54G Linksys (Cisco) access point.
On the client side i have a windows machine where i have enabled PEAP authentication, through which it asks me for user name and password.
...
My Client file reads :
steve Auth-Type := Local, User-Password == "testing" Service-Type = Framed-User, Framed-Protocol = PPP
Don't set Auth-Type.
Am I missing out on something ? Kindly help me with this as soon as possible. Its a little urgent.
Use:
steve User-Password := "testing"
Or, if you're using 1.1.4:
steve Cleartext-Password := "testing"
And nothing else.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Anuj Tripathi wrote:
It still gives the same problem.
No, it doesn't. The output is different.
Do i need to make some changes in eap.conf ? What are the minimal changes required for using Freeradius for PEAP authentication ?
See the Wiki.
Following is the response that i am getting :
You are not running the server in debugging mode as suggested in the FAQ, README, INSTALL, and daily on this list.
Password is visible no where. I am not getting any response from access-challenge it seems. Any ideas what cud be wrong ?
You have not configured the server to do PEAP. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan DeKok -
Anuj Tripathi