Error: Ignoring request from unknown client IP:1645

[Davide Molteni]

Ok you got it! It was a simple user permissions problem on the file
clients.conf! Shame on me...
The daemon tried to read the old confguration files clients and naslist
just because user that runs radiusd can't access the actual clients.conf
Now everything is working fine, I have to review some concepts on cisco
AAA because it won't authorize my users but just authenticate it but
this issue it's surely on cisco side.

Thanks a lot for the quick help 
Davide



Il giorno mar, 13/02/2007 alle 15.26 +0100, Alan DeKok ha scritto: 
> Davide Molteni wrote:
> >>> Error: Ignoring request from unknown client ipmycisco:1645
> >>   Did you configure the server to have that IP in "clients.conf"?
> > 
> > Sure! With the IP and the same shared key as the cisco NAS client
> 
>   <shrug>  The server isn't finding it.
> 
>   Are you sure the server is reading the "clients.conf" file you're editing?
> 
> > Please notice that I would like to use this radius for simple PAP ONLY.
> > Maybe I'm doing something wrong with users file?
> 
>   No.
> 
> > Please tell me the right way to configure a single test user for PAP
> > only. I would like to disable unused modules (ldap,mysql...)
> 
>   It's in the FAQ.
> 
> > It couldn't be a problem of authentication method?
> 
>   No.
> 
> > I forgot an important element to tell anyone wants to help.
> > I tried to change the shared key on one side (radius) and noticed that
> > log file continue to write again the same error
> > 
> > Ignoring request from unknown client IP:1645
> > 
> > So the issue it's due to the fact that cisco client don't exchange
> > shared key with radius...
> 
>   No.  They don't exchange shared keys.  You MUST list the Cisco's IP in
> "clients.conf".
> 
>   It looks like you're not doing that, or you're doing it wrong, or
> you're editing a file the server isn't reading.
> 
>   Alan DeKok.
> --
>   http://deployingradius.com       - The web site of the book
>   http://deployingradius.com/blog/ - The blog