Hi: I'm able to Log in to the servers but on the Nodes with failure i have i get the following logs. +[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Login incorrect: [admin/admin] (from client ke-nair-pst-r2 port 0 cli 10.250.0.7) Using Post-Auth-Type Reject # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> admin -- Regards: George Innocent.
On 29 Aug 2012, at 08:09, George Innocent <ginnocentus2002@gmail.com> wrote:
Hi:
I'm able to Log in to the servers but on the Nodes with failure i have i get the following logs.
+[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Login incorrect: [admin/admin] (from client ke-nair-pst-r2 port 0 cli 10.250.0.7) Using Post-Auth-Type Reject # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> admin
The reference password has not been added to the control list, the server has nothing to compare the provided password with. -Arran
I have this set On Wed, Aug 29, 2012 at 10:15 AM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 29 Aug 2012, at 08:09, George Innocent <ginnocentus2002@gmail.com> wrote:
Hi:
I'm able to Log in to the servers but on the Nodes with failure i have i get the following logs.
+[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Login incorrect: [admin/admin] (from client ke-nair-pst-r2 port 0 cli 10.250.0.7) Using Post-Auth-Type Reject # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> admin
The reference password has not been added to the control list, the server has nothing to compare the provided password with.
-Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
On Wed, Aug 29, 2012 at 2:23 PM, George Innocent <ginnocentus2002@gmail.com> wrote:
I have this set
http://wiki.freeradius.org/FAQ#It-still-doesn%27t-work%21 -- Fajar
George Innocent wrote:
I have this set
No, you don't. The problem here is not the server. The server produces messages any reasonable person will understand. The problem here is not the documentation. The documentation describes clearly how to solve the problems you see. The problem here is not the people on this list. They have explained many, many, times how to fix the problems. The problem is someone else needs to run your RADIUS server for you. Alan DeKok.
On Wed, Aug 29, 2012 at 2:09 PM, George Innocent <ginnocentus2002@gmail.com> wrote:
Hi:
I'm able to Log in to the servers but on the Nodes with failure i have i get the following logs.
What does that mean? Do you have centralized authentication with pam_radius or similar?
+[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user
As Arran said,the reference password has not been added to the control list. Depending on what your setup is, it may mean this particular radius was incorrectly setup (e.g. other radius get their data from db or ldap, while this one only have files module configured). Or perhaps some configuration files (e.g. raddb/users) was not synchronized between the nodes. -- Fajar
The errors are for the NAS i have; i also have servers that are authenticated by the radius Rgds On Wed, Aug 29, 2012 at 10:24 AM, Fajar A. Nugraha <list@fajar.net> wrote:
On Wed, Aug 29, 2012 at 2:09 PM, George Innocent <ginnocentus2002@gmail.com> wrote:
Hi:
I'm able to Log in to the servers but on the Nodes with failure i have i get the following logs.
What does that mean? Do you have centralized authentication with pam_radius or similar?
+[logintime] returns noop [pap] WARNING! No "known good" password found for the user.
Authentication
may fail because of this. ++[pap] returns noop ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user
As Arran said,the reference password has not been added to the control list. Depending on what your setup is, it may mean this particular radius was incorrectly setup (e.g. other radius get their data from db or ldap, while this one only have files module configured). Or perhaps some configuration files (e.g. raddb/users) was not synchronized between the nodes.
-- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
On Wed, Aug 29, 2012 at 2:38 PM, George Innocent <ginnocentus2002@gmail.com> wrote:
The errors are for the NAS i have; i also have servers that are authenticated by the radius
(sigh) are you REALLY interested in solving your problem? If yes, then please read the wiki link. It's unlikely anyone will be able to help you without the information requested there. For example, your log says "Login incorrect: [admin/admin] (from client ke-nair-pst-r2 port 0 cli 10.250.0.7)". What does a "radtest" from the radius server using user/pass admin/admin show? What does the radius debug log show when you run that test? What is DIFFERENT in the logs when you run radtest compared to when you test it from the NAS using the same user/pass? -- Fajar
participants (4)
-
Alan DeKok -
Arran Cudbard-Bell -
Fajar A. Nugraha -
George Innocent