FreeRadius client with IAS server; Wireshark - Code: Access Reject (3)
Hi! I use FreeRadius as a client to a IAS server. I get connection but as soon as I set the IAS to authenticate on the server, I only get "User-Name = "DsH"" several times until timeout: "No response from client ID..."). When I sniff with Wireshark, I get the error code: Access Reject (3). My test should be quite basic I think, but somehow I fail. My setup is as follows: Computer A: Active Directory Computer B: Windows IAS server (IP 192.168.0.155) Computer C: FreeRadius Client (this is actually a virtual machine) Computer A contains user DsH with pwd RADIUS. I have configured the IAS (2003) to allow everything on Computer B and secret = RADIUS. I logged in as DSH with pwd RADIUS on Computer C, with secret = RADIUS for the FreeRadius client (v.1.1.6). I have tried both radtest and radclient, with -x for debug; ------------ radtest DsH 123456 192.168.0.155 10 RADIUS -x => Radclient:: Invalid octet string "123456" for attribute name "User-Password" ------------ echo "User-Name = DsH" | .../radclient 192.168.0.155:1812 auth RADIUS => User-Name = "DsH" (several times until timeout: "No response from client ID...") ------------ Anybody have any idea? I have tried for a while reading the manuals and browsing the forum, but I just don't get it to work! Any tips will be greatly appreciated! Thanks in advance :) /Knarkargott -- View this message in context: http://www.nabble.com/FreeRadius-client-with-IAS-server--Wireshark---Code%3A... Sent from the FreeRadius - User mailing list archive at Nabble.com.
IAS has logs too. Ivan Kalik Kalik Informatika ISP Dana 3/6/2008, "Knarkargott" <knarkargott@hotmail.com> piše:
Hi! I use FreeRadius as a client to a IAS server. I get connection but as soon as I set the IAS to authenticate on the server, I only get "User-Name = "DsH"" several times until timeout: "No response from client ID...").
When I sniff with Wireshark, I get the error code: Access Reject (3).
My test should be quite basic I think, but somehow I fail. My setup is as follows: Computer A: Active Directory Computer B: Windows IAS server (IP 192.168.0.155) Computer C: FreeRadius Client (this is actually a virtual machine)
Computer A contains user DsH with pwd RADIUS. I have configured the IAS (2003) to allow everything on Computer B and secret = RADIUS. I logged in as DSH with pwd RADIUS on Computer C, with secret = RADIUS for the FreeRadius client (v.1.1.6).
I have tried both radtest and radclient, with -x for debug; ------------ radtest DsH 123456 192.168.0.155 10 RADIUS -x => Radclient:: Invalid octet string "123456" for attribute name "User-Password" ------------ echo "User-Name = DsH" | .../radclient 192.168.0.155:1812 auth RADIUS => User-Name = "DsH" (several times until timeout: "No response from client ID...") ------------
Anybody have any idea? I have tried for a while reading the manuals and browsing the forum, but I just don't get it to work!
Any tips will be greatly appreciated! Thanks in advance :)
/Knarkargott -- View this message in context: http://www.nabble.com/FreeRadius-client-with-IAS-server--Wireshark---Code%3A... Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ivan Kalik wrote:
IAS has logs too.
Ivan Kalik Kalik Informatika ISP
Dana 3/6/2008, "Knarkargott" <knarkargott@hotmail.com> piše:
Sry, here are the logs from the IAS when I run Radclient. When I try Radtest, there is no log in the IAS (since it sais "radclient::Invalid octet string...", I suppose the fault is before the message comes to the IAS). Log from IAS: 192.168.0.151,DsH,06/03/2008,15:31:17,IAS,YAMAHA,4108,192.168.0.151,4116,0,4128,DsH,4155,1,4154,Auth DsH,25,311 1 192.168.0.155 05/14/2008 08:48:18 949,4129,ASCOMDEV\DsH,4127,7,4149,Auth 192.168.0.151,4130,AscomDev.local/AscomDev/Users/DsH,4136,1,4142,0 192.168.0.151,DsH,06/03/2008,15:31:17,IAS,YAMAHA,25,311 1 192.168.0.155 05/14/2008 08:48:18 949,4108,192.168.0.151,4116,0,4128,DsH,4155,1,4154,Auth DsH,4129,ASCOMDEV\DsH,4127,7,4149,Auth 192.168.0.151,4130,AscomDev.local/AscomDev/Users/DsH,4136,3,4142,65 -- View this message in context: http://www.nabble.com/FreeRadius-client-with-IAS-server--Wireshark---Code%3A... Sent from the FreeRadius - User mailing list archive at Nabble.com.
This is a list to aid users of freeradius server. Not IAS. I have only one more hint for you: iasparse.exe. No further questions about IAS will be answered. Ivan Kalik Kalik Informatika ISP Dana 3/6/2008, "Knarkargott" <knarkargott@hotmail.com> piše:
Ivan Kalik wrote:
IAS has logs too.
Ivan Kalik Kalik Informatika ISP
Dana 3/6/2008, "Knarkargott" <knarkargott@hotmail.com> piĹĄe:
Sry, here are the logs from the IAS when I run Radclient. When I try Radtest, there is no log in the IAS (since it sais "radclient::Invalid octet string...", I suppose the fault is before the message comes to the IAS).
Log from IAS: 192.168.0.151,DsH,06/03/2008,15:31:17,IAS,YAMAHA,4108,192.168.0.151,4116,0,4128,DsH,4155,1,4154,Auth DsH,25,311 1 192.168.0.155 05/14/2008 08:48:18 949,4129,ASCOMDEV\DsH,4127,7,4149,Auth 192.168.0.151,4130,AscomDev.local/AscomDev/Users/DsH,4136,1,4142,0 192.168.0.151,DsH,06/03/2008,15:31:17,IAS,YAMAHA,25,311 1 192.168.0.155 05/14/2008 08:48:18 949,4108,192.168.0.151,4116,0,4128,DsH,4155,1,4154,Auth DsH,4129,ASCOMDEV\DsH,4127,7,4149,Auth 192.168.0.151,4130,AscomDev.local/AscomDev/Users/DsH,4136,3,4142,65
-- View this message in context: http://www.nabble.com/FreeRadius-client-with-IAS-server--Wireshark---Code%3A... Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ivan Kalik wrote:
This is a list to aid users of freeradius server. Not IAS. I have only one more hint for you: iasparse.exe. No further questions about IAS will be answered.
Ivan Kalik Kalik Informatika ISP
Dana 3/6/2008, "Knarkargott" <knarkargott@hotmail.com> piše:
Thanks for the tip Ivan, I will check it out! I respect that IAS problems should not be posted here, but I had two reasons for posting this problem here: 1) Mostly I have been stuck with the radtest, which is a FreeRadius problem for me 2) It could be that FreeRadius client and the IAS server could not work properly together Anyway, thanks for taking your time helping me out! -- View this message in context: http://www.nabble.com/FreeRadius-client-with-IAS-server--Wireshark---Code%3A... Sent from the FreeRadius - User mailing list archive at Nabble.com.
Alan DeKok-4 wrote:
Knarkargott wrote:
2) It could be that FreeRadius client and the IAS server could not work properly together
No.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
You are right, it seems to work fine :) Ivan: Thanks, the IASparse helped a lot, I got it running after only a few minutes! -- View this message in context: http://www.nabble.com/FreeRadius-client-with-IAS-server--Wireshark---Code%3A... Sent from the FreeRadius - User mailing list archive at Nabble.com.
participants (3)
-
Alan DeKok -
Ivan Kalik -
Knarkargott