no username attribute

Norbert Grochal norboro at celpol.pl
Sat Mar 4 11:39:20 CET 2006


Hi!

My users don't use windows xp "zero configuration" service for wifi. They use Ralink Configurator with profiles.
Auth EAP/PEAP.
Sometimes after reboot AP or 'unhibernate' Windows XP freeradius logs packets with no User-Name attribute:

rad_recv: Access-Request packet from host 10.10.10.9:2048, id=115, length=155
        NAS-IP-Address = 10.10.10.9
        NAS-Port = 0
        Called-Station-Id = "00304f41e217"
        Calling-Station-Id = "000e2e74b798"
        NAS-Identifier = "Realtek Access Point. 8181"
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        Service-Type = Framed-User
        Connect-Info = "CONNECT 11Mbps 802.11b"
        EAP-Message = 0x0200000501
        Message-Authenticator = 0xebaa8690af8e44f2aa18020db98b43a2
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 340
  modcall[authorize]: module "preprocess" returns ok for request 340
radius_xlat:  '/usr/local/var/log/radius/radacct/10.10.10.9/auth-detail-20060304'
rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/10.10.10.9/auth-detail-20060304
  modcall[authorize]: module "auth_log" returns ok for request 340
  modcall[authorize]: module "chap" returns noop for request 340
  modcall[authorize]: module "mschap" returns noop for request 340
    rlm_realm: Proxy reply, or no User-Name.  Ignoring.
  modcall[authorize]: module "suffix" returns noop for request 340
  rlm_eap: EAP packet type response id 0 length 5
!!!!!!  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 340
  modcall[authorize]: module "files" returns notfound for request 340
!!!!!! rlm_sql (sql): zero length username not permitted
  modcall[authorize]: module "sql" returns invalid for request 340
modcall: leaving group authorize (returns invalid) for request 340
!!!!!! Invalid user: [<no User-Name attribute>] (from client AP9 port 0 cli 000e2e74b798)
Delaying request 340 for 1 seconds

And user must restart computer to connect to AP...

It is possible to set freeradius not to check User-Name? I use User-Name for logging purposes only. freeradius gets login and password from PEAP and authorize even if User-Name is anything.
What should I do?

Norbert

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20060304/7b556598/attachment.html>


More information about the Freeradius-Users mailing list