newbie on radiustesting
Si St
sigbj-st at operamail.com
Wed Apr 16 20:56:32 CEST 2008
> ----- Original Message -----
> From: A.L.M.Buxey at lboro.ac.uk
> To: "FreeRadius users mailing list" <freeradius-users at lists.freeradius.org>
> Subject: Re: newbie on radiustesting
> Date: Wed, 16 Apr 2008 19:37:44 +0100
>
>
> Hi,
>
> > linux:/etc/raddb # id radiusd
> > uid=105(radiusd) gid=104(radiusd) Gruppen=104(radiusd)
> >
> > ls -l:
> > drw-r----- 3 root radiusd 472 2008-03-31 22:53 certs/
>
> and the files within?
>
> alan
The files within seem to have the same permission setup:
linux:/etc/raddb/certs # l
insgesamt 53
drw-r----- 3 root radiusd 472 2008-03-31 22:53 ./
drwxr-xr-x 5 root root 728 2008-04-16 20:40 ../
-rw-r----- 1 root radiusd 721 2005-09-13 04:15 cert-clt.der
-rw-r----- 1 root radiusd 1741 2005-09-13 04:15 cert-clt.p12
-rw-r----- 1 root radiusd 2452 2005-09-13 04:15 cert-clt.pem
-rw-r----- 1 root radiusd 717 2005-09-13 04:15 cert-srv.der
-rw-r----- 1 root radiusd 1733 2005-09-13 04:15 cert-srv.p12
-rw-r----- 1 root radiusd 2439 2005-09-13 04:15 cert-srv.pem
drw-r----- 2 root radiusd 200 2008-03-31 22:53 demoCA/
-rw-r----- 1 root radiusd 0 2005-09-13 04:15 dh
-rw-r----- 1 root radiusd 2913 2005-09-13 04:15 newcert.pem
-rw-r----- 1 root radiusd 1753 2005-09-13 04:15 newreq.pem
-rw-r----- 1 root radiusd 1024 2005-09-13 04:15 random
-rw-r----- 1 root radiusd 431 2005-09-13 04:15 README
-rw-r----- 1 root radiusd 954 2005-09-13 04:15 root.der
-rw-r----- 1 root radiusd 1973 2005-09-13 04:15 root.p12
-rw-r----- 1 root radiusd 2764 2005-09-13 04:15 root.pem
linux:/etc/raddb/certs/demoCA # l
insgesamt 21
drw-r----- 2 root radiusd 200 2008-03-31 22:53 ./
drw-r----- 3 root radiusd 472 2008-03-31 22:53 ../
-rw-r----- 1 root radiusd 1346 2005-09-13 04:15 cacert.pem
-rw-r----- 1 root radiusd 276 2005-09-13 04:15 index.txt
-rw-r----- 1 root radiusd 140 2005-09-13 04:15 index.txt.old
-rw-r----- 1 root radiusd 3 2005-09-13 04:15 serial
-rw-r----- 1 root radiusd 3 2005-09-13 04:15 serial.old
.......................................
More output:
What I have done now is to start the radiusd with /rcradiusd start/ first with the uchanged eap.conf, and then copy the uncommented eap.conf(EAP-TLS_Part) back to where it should be and run /radeapclient/ in debugmode:
Does the rlm_eap message tell you anything:
linux:/etc/raddb # radeapclient -x -f /usr/share/doc/packages/freeradius/tmp/radius.test 127.0.0.1:1812 auth testing123
+++> About to send encoded packet:
User-Name = "qvnu"
User-Password = "ygd"
NAS-IP-Address = 127.0.0.1
NAS-Port-Id = "0"
Sending Access-Request of id 244 to 127.0.0.1:1812
User-Name = "qvnu"
User-Password = "ygd"
NAS-IP-Address = 127.0.0.1
NAS-Port-Id = "0"
Re-sending Access-Request of id 244 to 127.0.0.1:1812
User-Name = "qvnu"
User-Password = "\351\371V6$\024\t\315\263\271.\037\003\311\325\320"
NAS-IP-Address = 127.0.0.1
NAS-Port-Id = "0"
rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=244, length=20
rlm_eap: EAP-Message not found
<+++ EAP decoded packet:
+++> About to send encoded packet:
User-Name = "eaoqk"
User-Password = "uroco"
NAS-IP-Address = 127.0.0.1
--
_______________________________________________
Surf the Web in a faster, safer and easier way:
Download Opera 9 at http://www.opera.com
Powered by Outblaze
More information about the Freeradius-Users
mailing list