Jradius & FreeRadius problem!
Jelena Žagar
jelena.zagar at logos.hr
Thu Sep 25 08:51:28 CEST 2008
I put the next line im jradius module:
# configure the rlm_jradius module
jradius {
name = "example" # The "Requester" name (a
single
# JRadius server can have
# multiple "applications")
primary = "localhost" # Uses default port 1814
secondary = "localhost" # Fail-over server
tertiary = "localhost" # Fail-over server on port
8002
timeout = 1 # Connect Timeout
onfail = NOOP # What to do if no JRadius
# Server is found. Options are:
# FAIL (default), OK, REJECT, NOOP
keepalive = yes # Keep connections to JRadius
pooled
connections = 8 # Number of pooled JRadius
connections
allow_codechange = yes
}
But still the same problem appears.
Sincerelly,
Žagar Jelena
-----Original Message-----
From: freeradius-users-bounces+jelena.zagar=logos.hr at lists.freeradius.org
[mailto:freeradius-users-bounces+jelena.zagar=logos.hr at lists.freeradius.org]
On Behalf Of wlanmac
Sent: Thursday, September 25, 2008 8:16 AM
To: freeradius-users at lists.freeradius.org
Subject: Re: Jradius & FreeRadius problem!
If you are trying to change an AccessReject into an AccessAccept in the
post-auth section, then you must have the following option configured for
the rlm_jradius module:
jradius {
...
allow_codechange = yes
}
David
> Date: Thu, 25 Sep 2008 07:58:56 +0200
> From: Jelena ?agar <jelena.zagar at logos.hr>
> Subject: Jradius & FreeRadius problem!
> To: <freeradius-users at lists.freeradius.org>
> Message-ID: <C5F1749C7722D74585F0B099D0392C757C386C at dionis.logos.hr>
> Content-Type: text/plain; charset="iso-8859-2"
>
> I installed FreeRadius on the Windows machine. I started JRadius as
> well. I started the client. The JRadius sends back to the FreeRadius
> the access accept packet, but Free Radius always sends to the client
> the Access Reject packet. Only the Reply-Message is read correctly from
the returned packet.
> What is the reason for such an error. Down is the log trace. With the
> red color, the access accept packet is marked.
> I hope that somebody will help me solving this issue.
>
> rad_recv: Access-Request packet from host 127.0.0.1:1376, id=1, length=108
> User-Name = "testuser"
> User-Password = "testpw"
> NAS-Port-Type = Wireless-802.11
> NAS-Port = 1
> NAS-IP-Address = 127.0.0.1
> X-Ascend-Send-Passwd = "\000\000\000\001"
> Calling-Station-Id = "0982331361"
> Service-Type = Login-User
> Message-Authenticator = 0x58c175d66fd2fd81043794526cc39783
> Processing the authorize section of radiusd.conf
> modcall: entering group authorize for request 9
> rlm_jradius: Trying to (re)connect unconnected handle 5
> rlm_jradius: Reserving JRadius socket id: 5
> rlm_jradius: got socket 5 after skipping 0 unconnected handles, tried
> to reconne ct 1 though
> rlm_jradius: packing attribute User-Name (type: 1; len: 8)
> rlm_jradius: packing attribute User-Password (type: 2; len: 6)
> rlm_jradius: packing attribute NAS-Port-Type (type: 61; len: 4)
> rlm_jradius: packing attribute NAS-Port (type: 5; len: 4)
> rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4)
> rlm_jradius: packing attribute X-Ascend-Send-Passwd (type: 232; len:
> 4)
> rlm_jradius: packing attribute Calling-Station-Id (type: 31; len: 10)
> rlm_jradius: packing attribute Service-Type (type: 6; len: 4)
> rlm_jradius: packing attribute Message-Authenticator (type: 80; len:
> 16)
> rlm_jradius: packing packet with code: 1 (attr length: 168)
> rlm_jradius: packing packet with code: 0 (attr length: 0)
> rlm_jradius: sending 197 bytes to socket 5
> rlm_jradius: return code 8; receiving 2 packets
> rlm_jradius: reading packet: code=1 len=168
> rlm_jradius: reading attribute: type=1; len=8
> rlm_jradius: reading attribute: type=2; len=6
> rlm_jradius: reading attribute: type=61; len=4
> rlm_jradius: reading attribute: type=5; len=4
> rlm_jradius: reading attribute: type=4; len=4
> rlm_jradius: reading attribute: type=232; len=4
> rlm_jradius: reading attribute: type=31; len=10
> rlm_jradius: reading attribute: type=6; len=4
> rlm_jradius: reading attribute: type=80; len=16
> rlm_jradius: reading packet: code=0 len=0
> rlm_jradius: reading request: config_item: len=57
> rlm_jradius: reading attribute: type=1259012098; len=32
> rlm_jradius: reading attribute: type=1259012097; len=1
> rlm_jradius: Released JRadius socket id: 5
> modcall[authorize]: module "jradius" returns updated for request 9
> modcall: leaving group authorize (returns updated) for request 9
> auth: No authenticate method (Auth-Type) configuration found for the
> request: Re
> jecting the user
> auth: Failed to validate the user.
> Login incorrect: [testuser/testpw] (from client localhost port 1 cli
> 0982331361)
>
> Found Post-Auth-Type
> Processing the post-auth section of radiusd.conf
> modcall: entering group REJECT for request 9
> rlm_jradius: Trying to (re)connect unconnected handle 4
> rlm_jradius: Reserving JRadius socket id: 4
> rlm_jradius: got socket 4 after skipping 0 unconnected handles, tried
> to reconne ct 1 though
> rlm_jradius: packing attribute User-Name (type: 1; len: 8)
> rlm_jradius: packing attribute User-Password (type: 2; len: 6)
> rlm_jradius: packing attribute NAS-Port-Type (type: 61; len: 4)
> rlm_jradius: packing attribute NAS-Port (type: 5; len: 4)
> rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4)
> rlm_jradius: packing attribute X-Ascend-Send-Passwd (type: 232; len:
> 4)
> rlm_jradius: packing attribute Calling-Station-Id (type: 31; len: 10)
> rlm_jradius: packing attribute Service-Type (type: 6; len: 4)
> rlm_jradius: packing attribute Message-Authenticator (type: 80; len:
> 16)
> rlm_jradius: packing packet with code: 1 (attr length: 168)
> rlm_jradius: packing packet with code: 3 (attr length: 0)
> rlm_jradius: packing attribute JRadius-Session-Id (type: 1259012098; len:
> 32)
> rlm_jradius: packing attribute JRadius-Request-Id (type: 1259012097;
> len: 1)
> rlm_jradius: packing attribute Post-Auth-Type (type: 1014; len: 4)
> rlm_jradius: sending 270 bytes to socket 4
> rlm_jradius: return code 8; receiving 2 packets
> rlm_jradius: reading packet: code=1 len=168
> rlm_jradius: reading attribute: type=1; len=8
> rlm_jradius: reading attribute: type=2; len=6
> rlm_jradius: reading attribute: type=61; len=4
> rlm_jradius: reading attribute: type=5; len=4
> rlm_jradius: reading attribute: type=4; len=4
> rlm_jradius: reading attribute: type=232; len=4
> rlm_jradius: reading attribute: type=31; len=10
> rlm_jradius: reading attribute: type=6; len=4
> rlm_jradius: reading attribute: type=80; len=16
> rlm_jradius: reading packet: code=2 len=154
> rlm_jradius: reading attribute: type=18; len=8
> rlm_jradius: reading attribute: type=1000; len=4
> rlm_jradius: reading attribute: type=1; len=8
> rlm_jradius: reading attribute: type=2; len=6
> rlm_jradius: reading attribute: type=6; len=4
> rlm_jradius: reading attribute: type=7; len=4
> rlm_jradius: reading attribute: type=8; len=4
> rlm_jradius: reading attribute: type=13; len=4
> rlm_jradius: reading attribute: type=12; len=4
> rlm_jradius: reading request: config_item: len=73
> rlm_jradius: reading attribute: type=1259012098; len=32
> rlm_jradius: reading attribute: type=1259012097; len=1
> rlm_jradius: reading attribute: type=1014; len=4
> rlm_jradius: Released JRadius socket id: 4
> modcall[post-auth]: module "jradius" returns updated for request 9
> modcall: leaving group REJECT (returns updated) for request 9 Sending
> Access-Reject of id 1 to 127.0.0.1 port 1376
> Reply-Message := "Accepted"
> Finished request 9
> -------------- next part -------------- An HTML attachment was
> scrubbed...
> URL:
> <https://lists.freeradius.org/pipermail/freeradius-users/attachments/2
> 0080925/b4a00053/attachment.html>
> -------------- next part -------------- A non-text attachment was
> scrubbed...
> Name: smime.p7s
> Type: application/x-pkcs7-signature
> Size: 3406 bytes
> Desc: not available
> Url :
> <https://lists.freeradius.org/pipermail/freeradius-users/attachments/2
> 0080925/b4a00053/attachment.bin>
>
> ------------------------------
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
> End of Freeradius-Users Digest, Vol 41, Issue 113
> *************************************************
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3406 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080925/e6bd5556/attachment.bin>
More information about the Freeradius-Users
mailing list