Digest test

Iandc Davies Iandc.Davies at marconi.com
Tue Sep 6 12:33:53 CEST 2005


All,

Have run the test as suggested in the doc/rlm_digest file and have got an
odd output message from freeradius saying it can't find the Digest-Nonce
element.
In the radiusd.conf file I'm authenticating but not authorizing digest.
Users file has the following:
#---
test    Auth-Type := Digest, User-Password := "test"
        Reply-Message = "Hello, reply with digest."
#---

Any ideas ?

I've enabled debug on radclient with the following output.
==================================================
./client.sh
Sending Access-Request of id 178 to 127.0.0.1:1812
        User-Name = "test"
        Digest-Response = "631d6d73147add2f9e437f59bbc3aeb7"
        Digest-Realm = "\001\013testrealm"
        Digest-Nonce = "\002\n1234abcd"
        Digest-Method = "\003\010INVITE"
        Digest-URI = "\004\034sip:5555551212 at example.com"
        Digest-Algorithm = "\006\005MD5"
        Digest-User-Name = "\n\006test"
rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=178, length=47
        Reply-Message = "Hello, reply with digest."

           Total approved auths:  0
             Total denied auths:  1
               Total lost auths:  0

================================================
Module: Instantiated radutmp (radutmp)
Listening on authentication *:1812
Listening on accounting *:1813
Listening on proxy *:1814
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1:32943, id=178,
length=140
        User-Name = "test"
        Digest-Response = "631d6d73147add2f9e437f59bbc3aeb7"
        Digest-Attributes = 0x010b746573747265616c6d
        Digest-Attributes = 0x020a3132333461626364
        Digest-Attributes = 0x0308494e56495445
        Digest-Attributes =
0x041c7369703a35353535353531323132406578616d706c652e636f6d
        Digest-Attributes = 0x06054d4435
        Digest-Attributes = 0x0a0674657374
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok for request 0
  modcall[authorize]: module "attr_filter" returns noop for request 0
  modcall[authorize]: module "chap" returns noop for request 0
    rlm_realm: No '@' in User-Name = "test", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 0
  rlm_eap: No EAP-Message, not doing EAP
  modcall[authorize]: module "eap" returns noop for request 0
    users: Matched entry test at line 19
  modcall[authorize]: module "files" returns ok for request 0
rlm_checkval: Could not find item named Calling-Station-Id in request
rlm_checkval: Could not find attribute named Calling-Station-Id in check
pairs
  modcall[authorize]: module "checkval" returns notfound for request 0
modcall: group authorize returns ok for request 0
  rad_check_password:  Found Auth-Type Digest
auth: type "digest"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 0
ERROR: No Digest-Nonce: Cannot perform Digest authentication
  modcall[authenticate]: module "digest" returns invalid for request 0
modcall: group authenticate returns invalid for request 0
auth: Failed to validate the user.
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 178 to 127.0.0.1:32943
        Reply-Message = "Hello, reply with digest."
Waking up in 4 seconds...
=====================================================================

Ian Davies {02476 564662}
          Internal   (x740 4662)
IMS-SIPAC
Software Development Engineer





More information about the Freeradius-Users mailing list