upgrade broke the users file - being read only partially - FR1.1.7 to FR2.0.2

Phil Mayers p.mayers at imperial.ac.uk
Thu Feb 21 14:58:28 CET 2008


Agent Smith wrote:
> No love man.  
> 
> Changed the huntgroup defination and also changed the
> sites-enabled/SERVER-1760 file to read. 
> 
> ....
> authorize {
>         files
>         #auth_log
>         pap
> }
> 
> 
> authenticate {
>         files # I also tried it without files here.
>         pap
> }

You've massively broke the default config; this is completely wrong. 
"files" doesn't work or do anything in the "authenticate" section, and 
"pap" should be inside an "Auth-Type PAP" stanza.

I suggest you go back to the default config and make small changes 
towards your goal, one at time and testing each change.

> ....
> 
> 
> Debug output
> -------------
> 
> Ready to process requests.
> rad_recv: Access-Request packet from host 10.9.3.29
> port 32889, id=174, length=61
>         User-Name = "user1"
>         User-Password = "abc123"
>         NAS-IP-Address = 255.255.255.255
>         NAS-Port = 171
> server SERVER-1760 {
> +- entering group authorize
>         expand: %{User-Name} -> user1
>     users: Matched entry DEFAULT at line 8

The entry on line 8 of the users file rejected the user.




More information about the Freeradius-Users mailing list