Hello, I am trying to compile freeradius in ubuntu hardy, for using it to make the authetication an accounting of an equipment similar to cisco authentication, the first thing i notice is that apart of the build-essecial pakage there is also needed to get libltdl3-dev. After the compilation and the install I tried to run freeradius, with radiusd -X, but i get the next message: # radiusd -X radiusd: error while loading shared libraries: libfreeradius-radius-2.1.0.so: cannot open shared object file: No such file or directory I solver this by using ldconfig. now i have created the client and defined a user in a file just to start testing the registration. but when i try to make the registration i found some error because it does not detect the real of the nas. I searched arround i don't know where can i add that suffix: this is the way i declared the client at the end of clients.conf client 200.X.X.X { secret = sharedpassword shortname = 200.X.X.X } and the user, at the end of users file test Auth-Type == "digest", User-Password = "test" Reply-Message = "Hello, test with digest", Class = "prueba" I also tried to put the word digest without double quotes but i received an indication of the debud saying that was wrong, so i putted the quotes and the debug mode started well. But when i sent a request i got the next errors: rad_recv: Access-Request packet from host 200.X.X.X port 38573, id=84, length=198 NAS-Identifier = "my.telestart.cl" Digest-Attributes = 0x030a5245474953544552 Digest-Attributes = 0x06054d4435 Digest-Attributes = 0x022a30623463373838366463633265393735343763343839616338363163616530376639646634633861 Digest-Attributes = 0x0a0674657374 User-Name = "test@200.X.X.X" Digest-Attributes = 0x04127369703a3230302e362e3131352e3235 Digest-Response = "5d72ee0f0579e1c11a75d2717ea2bd7f" Digest-Attributes = 0x010e3230302e362e3131352e3235 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [digest] Adding Auth-Type = DIGEST ++[digest] returns ok [suffix] Looking up realm "200.X.X.X" for User-Name = "test@200.X.X.X" [suffix] No such realm "200.X.X.X" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP I searched arround but couldn't fine where i need to set up the suffing, please i know there is something i am missing, so can anybody please tellme where can i define the realms. thanks -- Josexato
jose caceres wrote:
I searched arround i don't know where can i add that suffix: this is the way i declared the client at the end of clients.conf
client 200.X.X.X {
Why? Please read clients.conf. The format of the "client" configuration is documented.
and the user, at the end of users file
Again, why? The FAQ and examples show tests being put at the TOP of the "users" file. The comments at the top of the "users" file explain how it's processed... from top to bottom.
test Auth-Type == "digest", User-Password = "test"
And again, why? The documentation says DO NOT SET AUTH-TYPE. The FAQ gives an example using Cleartext-Password, not User-Password.
[suffix] Looking up realm "200.X.X.X" for User-Name = "test@200.X.X.X" [suffix] No such realm "200.X.X.X" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP
I searched arround but couldn't fine where i need to set up the suffing, please i know there is something i am missing, so can anybody please tellme where can i define the realms.
proxy.conf. A simple "grep" of the configuration files would find lots of references to realms, of which many are documentation in "proxy.conf". $ cd raddb $ grep -i realm * Alan DeKok.
participants (2)
-
Alan DeKok -
jose caceres