Hello, What kind of magic tricks are needed to get Auth-Type = System to work? Running FreeRADIUS Version 1.0.4 on SuSE 10 with MD5 and shadow passwords, using the following 'users' file: DEFAULT Auth-Type = System Service-Type = Framed-User, Framed-Protocol = PPP, Port-Limit = 2, Framed-IP-Address = 255.255.255.254, Framed-MTU = 1500 Now, I restart radiusd and test it: # echo "User-Name = ###, User-Password = ###" | radclient -x localhost auth ### Sending Access-Request of id 151 to 127.0.0.1:1645 User-Name = "###" User-Password = "###" rad_recv: Access-Reject packet from host 127.0.0.1:1645, id=151, length=20 I get this in my radius log: Fri Apr 7 14:39:01 2006 : Auth: rlm_unix: [###]: invalid password Running radiusd in -X mode, I get this: rad_recv: Access-Request packet from host 127.0.0.1:32926, id=131, length=46 User-Name = "###" User-Password = "###" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "###", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 5 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type System auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_unix: [###]: invalid password modcall[authenticate]: module "unix" returns reject for request 0 modcall: group authenticate returns reject for request 0 auth: Failed to validate the user. Been banging my head against the wall over this problem for almost two weeks now, and getting a bit desperate for a solution.... -Andreas.
Have you tried: Auth-Type := System
-----Original Message----- From: Andreas Lund Sent: Friday, April 07, 2006 9:37 AM Subject: Auth-Type = System not working
Hello,
What kind of magic tricks are needed to get Auth-Type = System to work?
Running FreeRADIUS Version 1.0.4 on SuSE 10 with MD5 and shadow passwords, using the following 'users' file:
DEFAULT Auth-Type = System Service-Type = Framed-User, Framed-Protocol = PPP, Port-Limit = 2, Framed-IP-Address = 255.255.255.254, Framed-MTU = 1500
Now, I restart radiusd and test it:
# echo "User-Name = ###, User-Password = ###" | radclient -x localhost auth ### Sending Access-Request of id 151 to 127.0.0.1:1645 User-Name = "###" User-Password = "###" rad_recv: Access-Reject packet from host 127.0.0.1:1645, id=151, length=20
I get this in my radius log: Fri Apr 7 14:39:01 2006 : Auth: rlm_unix: [###]: invalid password
Its really simple, u probably need to set the fallthrough settings to yes for that particular user. If the fallthrough setting is not set or is set to no, ur user wont be authenticated... hope it helps.... - Monish
participants (4)
-
Alan DeKok -
Andreas Lund -
Gunther -
monish ar