I am trying to setup freeradius 1. I have chap authentication working with mysql but pap authentication will not work with mysql. This is what I receive from the nas when someone trys to connect. Sending Access-Request of id 1 to 127.0.0.1 port 1812 User-Name = "johndstuder" User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356" NAS-IP-Address = 205.208.132.2 NAS-Identifier = "SouthfieldMI.TNT.01.sisna.com" NAS-Port = 4810 NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP State = 0x Calling-Station-Id = "2312387271" Called-Station-Id = "2317820869" Acct-Session-Id = "485914041" Ascend-Data-Rate = 24000 Ascend-Xmit-Rate = 50667 Attr-102 = 0x6931 Vendor-6969-Attr-69 = 0x6931 Vendor-6969-Attr-71 = 0x34 Proxy-State = 0x32 rad_recv: Access-Request packet from host 127.0.0.1:1814, id=1, length=197 User-Name = "johndstuder" User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356" NAS-IP-Address = 205.208.132.2 NAS-Identifier = "SouthfieldMI.TNT.01.sisna.com" NAS-Port = 4810 NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "2312387271" Called-Station-Id = "2317820869" Acct-Session-Id = "485914041" Ascend-Data-Rate = 24000 Ascend-Xmit-Rate = 50667 Attr-102 = 0x6931 Vendor-6969-Attr-69 = 0x6931 Vendor-6969-Attr-71 = 0x34 Proxy-State = 0x32 rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 Sending Access-Reject of id 1 to 205.208.202.130 port 33758 Sending Access-Reject of id 1 to 127.0.0.1 port 1814 Proxy-State = 0x32 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=1, length=23 Proxy-State = 0x32 Sending Access-Reject of id 2 to 205.208.202.130 port 33758 Attached is my radiusd .conf
What's the user entry in the database? That password looks a bit suspect. Ivan Kalik Kalik Informatika ISP Dana 22/2/2008, "Dustin Schuemann" <schuemann@supportdept.com> piše:
I am trying to setup freeradius 1. I have chap authentication working with mysql but pap authentication will not work with mysql. This is what I receive from the nas when someone trys to connect.
Sending Access-Request of id 1 to 127.0.0.1 port 1812 User-Name = "johndstuder" User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356" NAS-IP-Address = 205.208.132.2 NAS-Identifier = "SouthfieldMI.TNT.01.sisna.com" NAS-Port = 4810 NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP State = 0x Calling-Station-Id = "2312387271" Called-Station-Id = "2317820869" Acct-Session-Id = "485914041" Ascend-Data-Rate = 24000 Ascend-Xmit-Rate = 50667 Attr-102 = 0x6931 Vendor-6969-Attr-69 = 0x6931 Vendor-6969-Attr-71 = 0x34 Proxy-State = 0x32 rad_recv: Access-Request packet from host 127.0.0.1:1814, id=1, length=197 User-Name = "johndstuder" User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356" NAS-IP-Address = 205.208.132.2 NAS-Identifier = "SouthfieldMI.TNT.01.sisna.com" NAS-Port = 4810 NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "2312387271" Called-Station-Id = "2317820869" Acct-Session-Id = "485914041" Ascend-Data-Rate = 24000 Ascend-Xmit-Rate = 50667 Attr-102 = 0x6931 Vendor-6969-Attr-69 = 0x6931 Vendor-6969-Attr-71 = 0x34 Proxy-State = 0x32 rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 Sending Access-Reject of id 1 to 205.208.202.130 port 33758 Sending Access-Reject of id 1 to 127.0.0.1 port 1814 Proxy-State = 0x32 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=1, length=23 Proxy-State = 0x32 Sending Access-Reject of id 2 to 205.208.202.130 port 33758
Attached is my radiusd
the user password is fun123 it is clear text. On Feb 22, 2008, at 9:15 AM, Ivan Kalik wrote:
What's the user entry in the database? That password looks a bit suspect.
Ivan Kalik Kalik Informatika ISP
Dana 22/2/2008, "Dustin Schuemann" <schuemann@supportdept.com> piše:
I am trying to setup freeradius 1. I have chap authentication working with mysql but pap authentication will not work with mysql. This is what I receive from the nas when someone trys to connect.
Sending Access-Request of id 1 to 127.0.0.1 port 1812 User-Name = "johndstuder" User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356" NAS-IP-Address = 205.208.132.2 NAS-Identifier = "SouthfieldMI.TNT.01.sisna.com" NAS-Port = 4810 NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP State = 0x Calling-Station-Id = "2312387271" Called-Station-Id = "2317820869" Acct-Session-Id = "485914041" Ascend-Data-Rate = 24000 Ascend-Xmit-Rate = 50667 Attr-102 = 0x6931 Vendor-6969-Attr-69 = 0x6931 Vendor-6969-Attr-71 = 0x34 Proxy-State = 0x32 rad_recv: Access-Request packet from host 127.0.0.1:1814, id=1, length=197 User-Name = "johndstuder" User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356" NAS-IP-Address = 205.208.132.2 NAS-Identifier = "SouthfieldMI.TNT.01.sisna.com" NAS-Port = 4810 NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "2312387271" Called-Station-Id = "2317820869" Acct-Session-Id = "485914041" Ascend-Data-Rate = 24000 Ascend-Xmit-Rate = 50667 Attr-102 = 0x6931 Vendor-6969-Attr-69 = 0x6931 Vendor-6969-Attr-71 = 0x34 Proxy-State = 0x32 rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 Sending Access-Reject of id 1 to 205.208.202.130 port 33758 Sending Access-Reject of id 1 to 127.0.0.1 port 1814 Proxy-State = 0x32 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=1, length=23 Proxy-State = 0x32 Sending Access-Reject of id 2 to 205.208.202.130 port 33758
Attached is my radiusd
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer . . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
So the problem is on the nas not my radius server. On Feb 22, 2008, at 10:57 AM, Ivan Kalik wrote:
the user password is fun123 it is clear text.
User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356"
That's not what you NAS is sending as password. So radius works fine.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer . . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
That looks like a pap request but that's not the cleartext password. Garbled password suggests that the shared secret in clients.conf and on the NAS are not the same (if you are sure you are sending the right password and not this). Ivan Kalik Kalik Informatika ISP Dana 22/2/2008, "Dustin Schuemann" <schuemann@supportdept.com> piše:
So the problem is on the nas not my radius server. On Feb 22, 2008, at 10:57 AM, Ivan Kalik wrote:
the user password is fun123 it is clear text.
User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356"
That's not what you NAS is sending as password. So radius works fine.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer .. . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
That was it thanks. On Feb 22, 2008, at 3:31 PM, Ivan Kalik wrote:
That looks like a pap request but that's not the cleartext password. Garbled password suggests that the shared secret in clients.conf and on the NAS are not the same (if you are sure you are sending the right password and not this).
Ivan Kalik Kalik Informatika ISP
Dana 22/2/2008, "Dustin Schuemann" <schuemann@supportdept.com> piše:
So the problem is on the nas not my radius server. On Feb 22, 2008, at 10:57 AM, Ivan Kalik wrote:
the user password is fun123 it is clear text.
User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356"
That's not what you NAS is sending as password. So radius works fine.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer .. . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer . . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
Hi,
I am trying to setup freeradius 1. I have chap authentication working with mysql but pap authentication will not work with mysql. This is what I receive from the nas when someone trys to connect.
radius.conf does not contain the full sql details - eg sql.conf, the required SQL backend and your tables entries are all required alan
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Dustin Schuemann -
Ivan Kalik