[pap] WARNING! No "known good" password found for the user.
HI, I'm really new of freeradius. I wanna use freeradius as a radius server and dhcp server. When I try to connect to radius server from pppoe client(windwos vista laptop) via ERX310(juniper), freeradius shows following error messages. I have no clue what's wrong. I'm really confused. Message said no post-auth type found. But man page said it should not be set. How can I resolve this problem ? Any advice will help me! ------------ Ready to process requests. rad_recv: Access-Request packet from host 10.0.5.200 port 50000, id=2, length=205 User-Password = "test" User-Name = "user@mondomaine.fr" Acct-Session-Id = "erx FastEthernet 1/6:0010485762" Service-Type = Framed-User Framed-Protocol = PPP ERX-Pppoe-Description = "pppoe 00:1d:72:c6:7b:d5" Calling-Station-Id = "#ERX-40-b0-7a#E16#0" NAS-Port-Type = Ethernet NAS-Port = 369098752 NAS-Port-Id = "FastEthernet 1/6" NAS-IP-Address = 10.0.5.200 NAS-Identifier = "ERX-40-b0-7a" # Executing section authorize from file /etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] Looking up realm "mondomaine.fr" for User-Name = " user@mondomaine.fr" [suffix] No such realm "mondomaine.fr" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [files] users: Matched entry DEFAULT at line 172 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Login incorrect: [user@mondomaine.fr/test] (from client GGSN1 port 369098752 cli #ERX-40-b0-7a#E16#0) Using Post-Auth-Type Reject # Executing group from file /etc/raddb/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> user@mondomaine.fr attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 2 to 10.0.5.200 port 50000 Waking up in 4.9 seconds. Cleaning up request 0 ID 2 with timestamp +12 Ready to process requests. ------------ thanks in advance.
yata wrote:
I wanna use freeradius as a radius server and dhcp server. When I try to connect to radius server from pppoe client(windwos vista laptop) via ERX310(juniper), freeradius shows following error messages. I have no clue what's wrong.
See the FAQ. You need to set a "known good" password for the user. See also: http://freeradius.org/doc/ It gives detailed instructions for beginners. Alan DeKok.
On Tue, Apr 22, 2014 at 7:39 PM, yata <aurens.memuro02@gmail.com> wrote:
HI, I'm really new of freeradius.
I wanna use freeradius as a radius server and dhcp server. When I try to connect to radius server from pppoe client(windwos vista laptop) via ERX310(juniper), freeradius shows following error messages. I have no clue what's wrong. I'm really confused. Message said no post-auth type found. But man page said it should not be set.
In your case, the meaningful message is what you wrote as subject: No "known good" password found for the user.
How can I resolve this problem ?
Tell FR what the password is. In its simplest form, you need to edit raddb/users and add your user entry there. [files] users: Matched entry DEFAULT at line 172
++[files] returns ok
See those lines? If it only says that, then you don't have any entries in the users file matching the username. -- Fajar
Hi, Fajar Thanks for reply. I checked users file, username and password is set correctly I think. I saw following default setting at line 172. -------------------------------- # Default for PPP: dynamic IP address, PPP mode, VJ-compression. # NOTE: we do not use Hint = "PPP", since PPP might also be auto-detected # by the terminal server in which case there may not be a "P" suffix. # The terminal server sends "Framed-Protocol = PPP" for auto PPP. # DEFAULT Framed-Protocol == PPP <------- line 172 Framed-Protocol = PPP, Framed-Compression = Van-Jacobson-TCP-IP -------------------------------- user information is below. -------------------------------- user@mondomaine.fr Cleartext-Password := "test" Pool-Name := "pool1", NAS-IP-Address == 10.0.5.200, Framed-Protocol = PPP, Fall-Through = yes -------------------------------- So, Shouldn't I set Framed-Protocol at user information ? 2014-04-22 22:24 GMT+09:00 Fajar A. Nugraha <list@fajar.net>:
On Tue, Apr 22, 2014 at 7:39 PM, yata <aurens.memuro02@gmail.com> wrote:
HI, I'm really new of freeradius.
I wanna use freeradius as a radius server and dhcp server. When I try to connect to radius server from pppoe client(windwos vista laptop) via ERX310(juniper), freeradius shows following error messages. I have no clue what's wrong. I'm really confused. Message said no post-auth type found. But man page said it should not be set.
In your case, the meaningful message is what you wrote as subject: No "known good" password found for the user.
How can I resolve this problem ?
Tell FR what the password is.
In its simplest form, you need to edit raddb/users and add your user entry there.
[files] users: Matched entry DEFAULT at line 172
++[files] returns ok
See those lines? If it only says that, then you don't have any entries in the users file matching the username.
-- Fajar
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Tue, Apr 22, 2014 at 9:01 PM, yata <aurens.memuro02@gmail.com> wrote:
Hi, Fajar Thanks for reply.
I checked users file, username and password is set correctly I think. I saw following default setting at line 172.
-------------------------------- # Default for PPP: dynamic IP address, PPP mode, VJ-compression. # NOTE: we do not use Hint = "PPP", since PPP might also be auto-detected # by the terminal server in which case there may not be a "P" suffix. # The terminal server sends "Framed-Protocol = PPP" for auto PPP. # DEFAULT Framed-Protocol == PPP <------- line 172 Framed-Protocol = PPP, Framed-Compression = Van-Jacobson-TCP-IP --------------------------------
user information is below. -------------------------------- user@mondomaine.fr Cleartext-Password := "test" Pool-Name := "pool1", NAS-IP-Address == 10.0.5.200, Framed-Protocol = PPP, Fall-Through = yes --------------------------------
So, Shouldn't I set Framed-Protocol at user information ?
Is it on the same file, i.e. users file? The user info is not picked up by FR. I suggest you try these: - read the man page ("man 5 users") - try a simple user entry first, e.g. user@mondomaine.fr Cleartext-Password := "test" that is, without any reply items on the following lines. - if that works, find out what's wrong with your original entry. My guess is that you mixed up check and reply atttribute order (again, the man page should be able to tell you if that's the case) -- Fajar
yata wrote:
I checked users file, username and password is set correctly I think.
No. If it was set correctly, it would work.
I saw following default setting at line 172.
That's nice.
user information is below.
And where is that entry? Some other random file? In the "users" file? If so, where? Read the link I posted. It gives DETAILED instructions on how to do testing. It WILL WORK. All you need to do is follow the instructions. Alan DeKok.
Hi Fajar, Alan I'm sorry my too late reply.I have not been able to try your suggestion. Now, I finally tried again. I wrote user information at the bottom of the users file.That's the problem! When I wrote user information at the top of the file it looks fine. But I'm facing at new problem. I will write it another topic. anyway thanks for your help!! 2014-04-23 3:29 GMT+09:00 <A.L.M.Buxey@lboro.ac.uk>:
Hi,
user information is below.
yes. thats the problem. put your new stuff at the top of the users file
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Fajar A. Nugraha -
yata