I constently get this error: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user why? On 07/28/2010 08:07 AM, freeradius-users-request@lists.freeradius.org wrote:

Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org

To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org

You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."

Today's Topics:

1. Re: SV: FR proxy to ACS and NPS with MS CHAP v2 (SagiBarOr) 2. RHDS (Natr Brazell) 3. RE: Bug #17 (MS-CHAP user names) (Garber, Neal) 4. incorrect auth-type (Sallee, Stephen (Jake)) 5. Re: RHDS (John Dennis) 6. coa proxy'ing with a NAC device (Kevin Ehlers) 7. Passing variables from inner tunnel (newtownz)

----------------------------------------------------------------------

Message: 1 Date: Tue, 27 Jul 2010 04:12:16 -0700 (PDT) From: SagiBarOr<sagi.bar-or@intel.com> Subject: Re: SV: FR proxy to ACS and NPS with MS CHAP v2 To: freeradius-users@lists.freeradius.org Message-ID:<29275298.post@talk.nabble.com> Content-Type: text/plain; charset=UTF-8

Thank you for the info Jan. The radiusd-x files were included in the zip files. Though I guess the other logs were overwhelming. I now posted the two log files here. The file cn-check_splitauth.log is from the first free radius. The file ldap_mschapv2.log is from the second FR server which does the MS CHAP v2 portion. Note that everything works in this confioguration. No issues. What I like the forum to advise, is what might be non std or missing in the MC CHAP v2 session, which FR overcomes it. When I replace the 2nd FR with MS NPS or Cisco NPS the authentication fails, looks like because the pwd (hash) does not match. Thnks Sagi

Madsen.Jan JMD wrote:

...

I think you need to stop the radius process and then start i with radiusd -X This will run freeradius in the window you are starting it in, in debug mode.

On a Linux it will look something like this /usr/sbin/freeradius -X (Default Debian install directory)

Or in a manually compiled /opt/freeradius-1.1.8/sbin/radiusd -X (My install location)

And that output it comes from that is what Phil wants :)

Best regards Jan Madsen

-----Oprindelig meddelelse----- Fra: freeradius-users-bounces+jmd=kmd.dk@lists.freeradius.org [mailto:freeradius-users-bounces+jmd=kmd.dk@lists.freeradius.org] P? vegne af SagiBarOr Sendt: 15. juli 2010 09:46 Til: freeradius-users@lists.freeradius.org Emne: Re: FR proxy to ACS and NPS with MS CHAP v2

Thank you for the clarification Phil. I am not sure what "radius -x" means. I posted the two output files I have. Are these the ones? If not, pls elaborate.

Note that these are the output files for the two FR servers, for which eveything is just fine. What does not work is when the second server is not FR but NPS or ACS. I hope this data will suffice to identify the issue or at least give good leads.

Phil Mayers wrote:

...

On 07/14/2010 11:17 PM, SagiBarOr wrote:

...

Files posted.

No.

Post the output of "radiusd -X" to the list.

We don't need anything else; just that. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

http://old.nabble.com/file/p29170161/cn-check_splitauth.log cn-check_splitauth.log http://old.nabble.com/file/p29170161/ldap_mschapv2.log ldap_mschapv2.log -- View this message in context: http://old.nabble.com/FR-proxy-to-ACS-and-NPS-with-MS-CHAP-v2-tp29132664p291... Sent from the FreeRadius - User mailing list archive at Nabble.com.

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __________________________________________________________________________________________ KMD A/S, Lautrupparken 40-42, DK-2750 Ballerup, CVR-nr. 26911745

KMD er medlem af IT-Branchen og Dansk Erhverv samt anmeldt til Datatilsynet som edb-servicevirksomhed. KMD er certificeret i henhold til ISO 9001:2000, med Dansk Standard som certificerende organ og er desuden Microsoft Gold Certified Partner og Certificeret SAP Hosting Center.

www.kmd.dk www.kundenet.kmd.dk www.organisator.dk www.kmdinternational.com

Hvis du har modtaget denne e-mail ved en fejl, bedes du venligst give mig besked herom og slette den. If you received this e-mail by mistake, please notify me and delete it. Thank you. __________________________________________________________________________________________ KMD A/S, Lautrupparken 40-42, DK-2750 Ballerup, CVR-nr. 26911745

KMD er medlem af IT-Branchen og Dansk Erhverv samt anmeldt til Datatilsynet som edb-servicevirksomhed. KMD er certificeret i henhold til ISO 9001:2000, med Dansk Standard som certificerende organ og er desuden Microsoft Gold Certified Partner og Certificeret SAP Hosting Center.

www.kmd.dk www.kundenet.kmd.dk www.organisator.dk www.kmdinternational.com

Hvis du har modtaget denne e-mail ved en fejl, bedes du venligst give mig besked herom og slette den. If you received this e-mail by mistake, please notify me and delete it. Thank you.

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

http://old.nabble.com/file/p29275298/cn-check_splitauth.log cn-check_splitauth.log http://old.nabble.com/file/p29275298/ldap_mschapv2.log ldap_mschapv2.log -- View this message in context: http://old.nabble.com/FR-proxy-to-ACS-and-NPS-with-MS-CHAP-v2-tp29132664p292... Sent from the FreeRadius - User mailing list archive at Nabble.com.

------------------------------

Message: 2 Date: Tue, 27 Jul 2010 12:59:43 -0400 From: Natr Brazell<natrbrazell@gmail.com> Subject: RHDS To: freeradius-users@lists.freeradius.org Message-ID: <AANLkTimumkhagDih-xi4FhfXQybKgcPsNkxaTeMmHtWp@mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1"

Anyone using the Redhat Directory Server (RHDS) or 389-server versions of LDAP with their freeradius services? Curious really?

Thanks, Nate Brazell