CHAP Problems
Radius
radius at kingmanaz.net
Thu Nov 24 16:00:36 CET 2005
When I put the := system first and := local second in the user file, it
started working.
DEFAULT Auth-Type := System
Fall-Though = Yes
DEFAULT Auth-Type := Local
Fall-Though = Yes
It's working for both PAP and CHAP login's.
I heard this is not the way to do this, but it does seem to be working.
----- Original Message -----
From: "Christopher Carver" <ccarver at pennswoods.net>
To: "FreeRadius users mailing list" <freeradius-users at lists.freeradius.org>
Sent: Thursday, November 24, 2005 6:10 AM
Subject: Re: CHAP Problems
> radius at kingmanaz.net wrote:
>
>>I have tried to hire someone to help with my Radius over the last 6
>>month's
>>but have not been able to get it
>>working correctly.
>>
> As much as I would like to take your money, its probably not necessary.
> :-) This is usually a very simple thing to get working.
>
>>I seem to be getting answers from my MySql database but when a CHAP
>>request
>>comes in, it will not authorize and ells us Auth-Type already set.
> Make sure the op column is set to ":=" for Auth-Type attribute in your
> mysql db. This will ensure that the Auth-Type you set there will override
> any previous. This is definitely one problem your having. Its indicated
> by this error message in debugging:
> rlm_chap: WARNING: Auth-Type already set. Not setting to CHAP
>
> You must make sure this is fixed and CHAP is being used. This is the
> first problem to solve. You can see that next in the auth section its
> trying to use rlm_unix. That means something is setting the Auth-Type to
> system. It looks like its getting set to Local also. Also be particular
> about the ordering of your modules in the Authorize {} block of
> radiusd.conf as well. These modules are called in descending order. This
> could be the source of your incorrect Auth-Type setting. Solve this
> problem and write back with any new errors or problems.
>
> -Chris Carver
> - List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
More information about the Freeradius-Users
mailing list