freeradius, ldap error - HELP ME!

[peppeska]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alan DeKok ha scritto:
> peppeska wrote:
> ...
>> Sending Access-Accept of id 50 to 127.0.0.1 port 1028
> ...
>> Mar 21 19:21:41 applejack pppd[18529]: MS-CHAP authentication failed:
> 
>   PPPD is broken.
> 
And wath I most do now?

@Thibault Le Meur

I use Your dictonary...

the final respone is:

Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1:1028, id=51, length=136
        Service-Type = Framed-User
        Framed-Protocol = PPP
        User-Name = "peppeska"
        MS-CHAP-Challenge = 0xb6b462d0d978bcbfe51e4783f4a3dd32
        MS-CHAP2-Response =
0xa0002138a2441156e5ed33506db0e19e960d0000000000000000b1cfdb576490d5d29b54d30317856b01d0780f1d51ef5fa7
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 0
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok for request 0
  rlm_mschap: Found MS-CHAP attributes.  Setting 'Auth-Type  = mschap'
  modcall[authorize]: module "mschap" returns ok for request 0
    rlm_realm: No '@' in User-Name = "peppeska", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 0
  rlm_eap: No EAP-Message, not doing EAP
  modcall[authorize]: module "eap" returns noop for request 0
    users: Matched entry DEFAULT at line 173
    users: Matched entry DEFAULT at line 185
  modcall[authorize]: module "files" returns ok for request 0
rlm_ldap: - authorize
rlm_ldap: performing user authorization for peppeska
radius_xlat:  '(cn=peppeska)'
radius_xlat:  'dc=example'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: attempting LDAP reconnection
rlm_ldap: (re)connect to localhost:389, authentication 0
rlm_ldap: bind as cn=admin,dc=example/root to localhost:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: performing search in dc=example, with filter (cn=peppeska)
rlm_ldap: Added password billuzzo in check items
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user peppeska authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap" returns ok for request 0
modcall: leaving group authorize (returns ok) for request 0
  rad_check_password:  Found Auth-Type MS-CHAP
auth: type "MS-CHAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group MS-CHAP for request 0
  rlm_mschap: Told to do MS-CHAPv2 for peppeska with NT-Password
rlm_mschap: adding MS-CHAPv2 MPPE keys
  modcall[authenticate]: module "mschap" returns ok for request 0
modcall: leaving group MS-CHAP (returns ok) for request 0
Login OK: [peppeska/<no User-Password attribute>] (from client localhost
port 0)
  Processing the post-auth section of radiusd.conf
modcall: entering group post-auth for request 0
  modcall[post-auth]: module "ldap" returns noop for request 0
modcall: leaving group post-auth (returns noop) for request 0
Sending Access-Accept of id 51 to 127.0.0.1 port 1028
        Framed-IP-Address = 255.255.255.254
        Framed-MTU = 576
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Framed-Compression = Van-Jacobson-TCP-IP
        MS-CHAP2-Success =
0xa0533d32463945383842443446423034313543303139374631363834344244424532413836423234323346
        MS-MPPE-Recv-Key = 0xee31ff0993d0e3b1589a2920ac31b3d8
        MS-MPPE-Send-Key = 0x61bccd9e7dbd48aa264d2117a72ed2cc
        MS-MPPE-Encryption-Policy = 0x00000002
        MS-MPPE-Encryption-Types = 0x00000004
Finished request 0
Going to the next request
- --- Walking the entire request list ---
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 127.0.0.1:1028, id=51, length=136
Sending duplicate reply to client localhost:1028 - ID: 51
Re-sending Access-Accept of id 51 to 127.0.0.1 port 1028
- --- Walking the entire request list ---
Cleaning up request 0 ID 51 with timestamp 46018448
Nothing to do.  Sleeping until we see a request.





debian:/etc/freeradius# tail /var/log/messages
Mar 21 19:38:15 debian -- MARK --
Mar 21 19:58:19 debian -- MARK --
Mar 21 20:15:14 debian pppd[4426]: Plugin radius.so loaded.
Mar 21 20:15:14 debian pppd[4426]: RADIUS plugin initialized.
Mar 21 20:15:15 debian pppd[4426]: pppd 2.4.4 started by root, uid 0
Mar 21 20:15:17 debian pppd[4426]: Using interface ppp0
Mar 21 20:15:17 debian pppd[4426]: Connect: ppp0 <--> /dev/pts/2
Mar 21 20:15:32 debian pppd[4426]: Peer peppeska failed CHAP authentication
Mar 21 20:15:32 debian pppd[4426]: Connection terminated.
Mar 21 20:15:33 debian pppd[4426]: Exit.
debian:/etc/freeradius#



ma script to start pppoe-server is


debian:~# cat start-pppoe2.sh
#!/bin/bash
MAX=250
BASE=10.67.7.1
NAT=10.67.7.0/24
MYIP=193.205.94.13
iptables -A INPUT -i eth0 -s $NAT -j DROP
iptables -t nat -A POSTROUTING -s $NAT -j SNAT --to-source $MYIP
pppoe-server -T 60 -I eth1 -N $MAX -C PPPoE-R -S PPPoE-R -R $BASE
debian:~#



> 


- --
  <<<<---------------------------------------------------------->>>>
  |Giuseppe Moscato aka peppeska - Linux User - no html messages---|

  |donpeppiniello at tiscali.it - http://peppeska.altervista.org------|

  |Fingerprint = 90DC 05A8 2D65 BC04 BD1B  4C07 C389 434B 3201 319D|
  <<<<---------------------------------------------------------->>>>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGAYV9kA6hcnFZI/YRAspvAKCr1JXqtUkxbArgOwneCiYH621BGQCgyKaf
GsJHbl3ybsslFZKKP+iSG3I=
=euMt
-----END PGP SIGNATURE-----