Radius server ans NAS keys don't match! ?

Alan DeKok aland at deployingradius.com
Thu Aug 21 08:02:53 CEST 2008


Kavita Chitnis wrote:
> I am trying to work with Radius on a  FreeBSD machine.
> When I try radlogin on the client machine , I get the following message
> from the server
> 
> Ready to process requests.
>         Service-Type = 0x0000000100000000

  What client is this?  It's *severely* broken.

>         User-Name = "xxx"
>         User-Password = "\240\365\313ħ\255\371\r\203\300.\275ܤ"

  And the shared secret is wrong.

>         NAS-Port = 0x0000000000000000
>         NAS-IP-Address = 0x0a2a009b00000000

  It looks like the client isn't 64-bit clean.

>   WARNING: Unprintable characters in the password.        Double-check
> the shared secret on the server and the NAS!

  That's pretty definitive.

> I have checked the secret key on the server and the client and it is the
> same!

  Then the client isn't 64-bit clean.

> Is there any setting to be done in
> /radiusclient-ng-0.5.6/etc/servers
> radius_server_ip    secret_key

  Ah.  Use freeradius-client, instead.  See the main freeradius web page
for a link to the "client library".  It's a continuation of
radiusclient-ng, with bug fixes.

> My Radius server is a 32 bit freeBSD machine where as the client is 64
> bit FreeBSD

  Yup.  And you're using old software that doesn't work.  Upgrade.

  Alan DeKok.



More information about the Freeradius-Users mailing list