problem in integeration with poptop

Wed Oct 17 10:38:11 CEST 2007

I've add that line and comment ntlm line but still some error( tnx god it's
not the same error)

my radtest syntax:
radtest root rootpassword localhost.localdomain 1645 testing123

modcall[authorize]: module "files" returns ok for request 4
rlm_pap: WARNING! No "known good" password found for the user.
Authentication may fail because of this.
  modcall[authorize]: module "pap" returns noop for request 4
modcall: leaving group authorize (returns ok) for request 4
  rad_check_password:  Found Auth-Type System
auth: type "System"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 4
rlm_unix: [root]: invalid password

i've attached radius.conf and users and output of debug mode for both
radtest and vpn client.

On 10/16/07, tnt at kalik.co.yu <tnt at kalik.co.yu> wrote:
>
> You have obviously done some work on breaking the server configuration.
> Put mschap{} section back the way it was (with ntlm_auth line commented
> out). You don't need *any* changes to the default configuration if you
> are using users file. Put this in users file:
>
> root   Clertext-Password := "rootpassword"
>
> Radtest will work and so will mschap (VPN).
>
> Ivan Kalik
> Kalik Informatika ISP
>
>
> Dana 16/10/2007, "hadi golestani" < hadi.golestani at gmail.com> piše:
>
> >I've change it to /usr/bin/ntlm_auth ( found from locate ntlm )
> >but still same error.
> >What I must add to users file to test my radius from radtest or vpn
> client?
> >
> >sorry for bothering I'm too newbie.
> >
> >On 10/16/07, tnt at kalik.co.yu <tnt at kalik.co.yu> wrote:
> >>
> >> Well path to ntlm_auth obviously isn't /path/to/ntlm_auth.
> >>
> >> Ivan Kalik
> >> Kalik Informatika ISP
> >>
> >>
> >> Dana 16/10/2007, "hadi golestani" <hadi.golestani at gmail.com >
> pi�e:
> >>
> >> >hi,
> >> >I've installed poptop and freeradius well and both are working,
> >> >but when I try to connect from a vpn connection or even radtest some
> >> error
> >> >occured.
> >> >what I need to add to users.conf for a simple radtest connection or a
> vpn
> >> >client?
> >> >
> >> >it's the output of debug mode for vpn client, some thing like this has
>
> >> been
> >> >printed for radtest also:
> >> >
> >> >
> >> >rad_recv: Access-Request packet from host 127.0.0.1:32770, id=30,
> >> length=132
> >> >
> >> >        Service-Type = Framed-User
> >> >        Framed-Protocol = PPP
> >> >        User-Name = "root"
> >> >        MS-CHAP-Challenge = 0x4d1a9b1028ef83957754c83ce0f55e01
> >> >        MS-CHAP2-Response =
> >>
> >>
> >0x9e000d1394f73d58cc731cd6cf58de7cb74f00000000000000008c6daec89825fb28b90bb60b737fb683a4a80f6252935547
> >> >
> >> >        NAS-IP-Address = 127.0.0.1
> >> >        NAS-Port = 0
> >> >  Processing the authorize section of radiusd.conf
> >> >modcall: entering group authorize for request 11
> >> >  modcall[authorize]: module "preprocess" returns ok for request 11
> >> >  modcall[authorize]: module "chap" returns noop for request 11
> >> >  rlm_mschap: Found MS-CHAP attributes.  Setting 'Auth-Type  = mschap'
> >> >  modcall[authorize]: module "mschap" returns ok for request 11
> >> >    rlm_realm: No '@' in User-Name = "root", looking up realm NULL
> >> >    rlm_realm: No such realm "NULL"
> >> >  modcall[authorize]: module "suffix" returns noop for request 11
> >> >  rlm_eap: No EAP-Message, not doing EAP
> >> >  modcall[authorize]: module "eap" returns noop for request 11
> >> >    users: Matched entry DEFAULT at line 152
> >> >    users: Matched entry DEFAULT at line 171
> >> >    users: Matched entry DEFAULT at line 183
> >> >  modcall[authorize]: module "files" returns ok for request 11
> >> >modcall: leaving group authorize (returns ok) for request 11
> >> >  rad_check_password:  Found Auth-Type MS-CHAP
> >> >auth: type "MS-CHAP"
> >> >  Processing the authenticate section of radiusd.conf
> >> >modcall: entering group MS-CHAP for request 11
> >> >  rlm_mschap: No User-Password configured.  Cannot create LM-Password.
> >> >  rlm_mschap: No User-Password configured.  Cannot create NT-Password.
> >> >  rlm_mschap: Told to do MS-CHAPv2 for root with NT-Password
> >> >radius_xlat: Running registered xlat function of module mschap for
> string
> >> >'Challenge'
> >> > mschap2: 4d
> >> >radius_xlat: Running registered xlat function of module mschap for
> string
> >> >'NT-Response'
> >> >radius_xlat:  '/path/to/ntlm_auth --request-nt-key --username=root
> >> >--challenge=f1090a99b916ef69
> >> >--nt-response=8c6daec89825fb28b90bb60b737fb683a4a80f6252935547'
> >> >Exec-Program: /path/to/ntlm_auth --request-nt-key --username=root
> >> >--challenge=f1090a99b916ef69
> >> >--nt-response=8c6daec89825fb28b90bb60b737fb683a4a80f6252935547
> >> >Exec-Program output: Exec-Program: FAILED to execute
> /path/to/ntlm_auth:
> >> No
> >> >such file or directory
> >> >Exec-Program-Wait: plaintext: Exec-Program: FAILED to execute
> >> >/path/to/ntlm_auth: No such file or directory
> >> >Exec-Program: returned: 1
> >> >  rlm_mschap: External script failed.
> >> >  rlm_mschap: FAILED: MS-CHAP2-Response is incorrect
> >> >  modcall[authenticate]: module "mschap" returns reject for request 11
> >> >modcall: leaving group MS-CHAP (returns reject) for request 11
> >> >auth: Failed to validate the user.
> >> >Delaying request 11 for 1 seconds
> >> >Finished request 11
> >> >Going to the next request
> >> >--- Walking the entire request list ---
> >> >Waking up in 1 seconds...
> >> >--- Walking the entire request list ---
> >> >Waking up in 1 seconds...
> >> >--- Walking the entire request list ---
> >> >Sending Access-Reject of id 30 to 127.0.0.1 port 32770
> >> >Waking up in 4 seconds...
> >> >--- Walking the entire request list ---
> >> >Cleaning up request 11 ID 30 with timestamp 47152198
> >> >Nothing to do.  Sleeping until we see a request.
> >> >
> >> >
> >>
> >> -
> >> List info/subscribe/unsubscribe? See
> >> http://www.freeradius.org/list/users.html
> >>
> >
> >
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20071017/16566c83/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dariusLOGandConfig.zip
Type: application/zip
Size: 26403 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20071017/16566c83/attachment.zip>