Jradius & FreeRadius problem!

Jelena Žagar jelena.zagar at logos.hr
Thu Sep 25 08:51:28 CEST 2008


I put the next line im jradius module:

# configure the rlm_jradius module
    jradius {
		name      = "example"             # The "Requester" name (a
single
                                          # JRadius server can have
                                          # multiple "applications")
		primary   = "localhost"           # Uses default port 1814
        secondary = "localhost"             # Fail-over server
        tertiary  = "localhost"    		  # Fail-over server on port
8002
        timeout   = 1                     # Connect Timeout
        onfail    = NOOP                  # What to do if no JRadius
                                          # Server is found. Options are:
                                          # FAIL (default), OK, REJECT, NOOP
        keepalive = yes                  # Keep connections to JRadius
pooled
        connections = 8                  # Number of pooled JRadius
connections
		allow_codechange = yes
     }

But still the same problem appears.

Sincerelly,
Žagar Jelena


 

-----Original Message-----
From: freeradius-users-bounces+jelena.zagar=logos.hr at lists.freeradius.org
[mailto:freeradius-users-bounces+jelena.zagar=logos.hr at lists.freeradius.org]
On Behalf Of wlanmac
Sent: Thursday, September 25, 2008 8:16 AM
To: freeradius-users at lists.freeradius.org
Subject: Re: Jradius & FreeRadius problem!

If you are trying to change an AccessReject into an AccessAccept in the
post-auth section, then you must have the following option configured for
the rlm_jradius module:

jradius {
	...
        allow_codechange = yes
}

David

> Date: Thu, 25 Sep 2008 07:58:56 +0200
> From: Jelena ?agar <jelena.zagar at logos.hr>
> Subject: Jradius & FreeRadius problem!
> To: <freeradius-users at lists.freeradius.org>
> Message-ID: <C5F1749C7722D74585F0B099D0392C757C386C at dionis.logos.hr>
> Content-Type: text/plain; charset="iso-8859-2"
> 
> I installed FreeRadius on the Windows machine. I started JRadius as 
> well. I started the client. The JRadius sends back to the FreeRadius 
> the access accept packet, but Free Radius always sends to the client 
> the Access Reject packet. Only the Reply-Message is read correctly from
the returned packet.
> What is the reason for such an error. Down is the log trace. With the 
> red color, the access accept packet is marked.
> I hope that somebody will help me solving this issue.
>  
> rad_recv: Access-Request packet from host 127.0.0.1:1376, id=1, length=108
>         User-Name = "testuser"
>         User-Password = "testpw"
>         NAS-Port-Type = Wireless-802.11
>         NAS-Port = 1
>         NAS-IP-Address = 127.0.0.1
>         X-Ascend-Send-Passwd = "\000\000\000\001"
>         Calling-Station-Id = "0982331361"
>         Service-Type = Login-User
>         Message-Authenticator = 0x58c175d66fd2fd81043794526cc39783
>   Processing the authorize section of radiusd.conf
> modcall: entering group authorize for request 9
> rlm_jradius: Trying to (re)connect unconnected handle 5
> rlm_jradius: Reserving JRadius socket id: 5
> rlm_jradius: got socket 5 after skipping 0 unconnected handles, tried 
> to reconne ct 1 though
> rlm_jradius: packing attribute User-Name (type: 1; len: 8)
> rlm_jradius: packing attribute User-Password (type: 2; len: 6)
> rlm_jradius: packing attribute NAS-Port-Type (type: 61; len: 4)
> rlm_jradius: packing attribute NAS-Port (type: 5; len: 4)
> rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4)
> rlm_jradius: packing attribute X-Ascend-Send-Passwd (type: 232; len: 
> 4)
> rlm_jradius: packing attribute Calling-Station-Id (type: 31; len: 10)
> rlm_jradius: packing attribute Service-Type (type: 6; len: 4)
> rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 
> 16)
> rlm_jradius: packing packet with code: 1 (attr length: 168)
> rlm_jradius: packing packet with code: 0 (attr length: 0)
> rlm_jradius: sending 197 bytes to socket 5
> rlm_jradius: return code 8; receiving 2 packets
> rlm_jradius: reading packet: code=1 len=168
> rlm_jradius: reading attribute: type=1; len=8
> rlm_jradius: reading attribute: type=2; len=6
> rlm_jradius: reading attribute: type=61; len=4
> rlm_jradius: reading attribute: type=5; len=4
> rlm_jradius: reading attribute: type=4; len=4
> rlm_jradius: reading attribute: type=232; len=4
> rlm_jradius: reading attribute: type=31; len=10
> rlm_jradius: reading attribute: type=6; len=4
> rlm_jradius: reading attribute: type=80; len=16
> rlm_jradius: reading packet: code=0 len=0
> rlm_jradius: reading request: config_item: len=57
> rlm_jradius: reading attribute: type=1259012098; len=32
> rlm_jradius: reading attribute: type=1259012097; len=1
> rlm_jradius: Released JRadius socket id: 5
>   modcall[authorize]: module "jradius" returns updated for request 9
> modcall: leaving group authorize (returns updated) for request 9
> auth: No authenticate method (Auth-Type) configuration found for the
> request: Re
> jecting the user
> auth: Failed to validate the user.
> Login incorrect: [testuser/testpw] (from client localhost port 1 cli
> 0982331361)
>  
>   Found Post-Auth-Type
>   Processing the post-auth section of radiusd.conf
> modcall: entering group REJECT for request 9
> rlm_jradius: Trying to (re)connect unconnected handle 4
> rlm_jradius: Reserving JRadius socket id: 4
> rlm_jradius: got socket 4 after skipping 0 unconnected handles, tried 
> to reconne ct 1 though
> rlm_jradius: packing attribute User-Name (type: 1; len: 8)
> rlm_jradius: packing attribute User-Password (type: 2; len: 6)
> rlm_jradius: packing attribute NAS-Port-Type (type: 61; len: 4)
> rlm_jradius: packing attribute NAS-Port (type: 5; len: 4)
> rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4)
> rlm_jradius: packing attribute X-Ascend-Send-Passwd (type: 232; len: 
> 4)
> rlm_jradius: packing attribute Calling-Station-Id (type: 31; len: 10)
> rlm_jradius: packing attribute Service-Type (type: 6; len: 4)
> rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 
> 16)
> rlm_jradius: packing packet with code: 1 (attr length: 168)
> rlm_jradius: packing packet with code: 3 (attr length: 0)
> rlm_jradius: packing attribute JRadius-Session-Id (type: 1259012098; len:
> 32)
> rlm_jradius: packing attribute JRadius-Request-Id (type: 1259012097; 
> len: 1)
> rlm_jradius: packing attribute Post-Auth-Type (type: 1014; len: 4)
> rlm_jradius: sending 270 bytes to socket 4
> rlm_jradius: return code 8; receiving 2 packets
> rlm_jradius: reading packet: code=1 len=168
> rlm_jradius: reading attribute: type=1; len=8
> rlm_jradius: reading attribute: type=2; len=6
> rlm_jradius: reading attribute: type=61; len=4
> rlm_jradius: reading attribute: type=5; len=4
> rlm_jradius: reading attribute: type=4; len=4
> rlm_jradius: reading attribute: type=232; len=4
> rlm_jradius: reading attribute: type=31; len=10
> rlm_jradius: reading attribute: type=6; len=4
> rlm_jradius: reading attribute: type=80; len=16
> rlm_jradius: reading packet: code=2 len=154
> rlm_jradius: reading attribute: type=18; len=8
> rlm_jradius: reading attribute: type=1000; len=4
> rlm_jradius: reading attribute: type=1; len=8
> rlm_jradius: reading attribute: type=2; len=6
> rlm_jradius: reading attribute: type=6; len=4
> rlm_jradius: reading attribute: type=7; len=4
> rlm_jradius: reading attribute: type=8; len=4
> rlm_jradius: reading attribute: type=13; len=4
> rlm_jradius: reading attribute: type=12; len=4
> rlm_jradius: reading request: config_item: len=73
> rlm_jradius: reading attribute: type=1259012098; len=32
> rlm_jradius: reading attribute: type=1259012097; len=1
> rlm_jradius: reading attribute: type=1014; len=4
> rlm_jradius: Released JRadius socket id: 4
>   modcall[post-auth]: module "jradius" returns updated for request 9
> modcall: leaving group REJECT (returns updated) for request 9 Sending 
> Access-Reject of id 1 to 127.0.0.1 port 1376
>         Reply-Message := "Accepted"
> Finished request 9
> -------------- next part -------------- An HTML attachment was 
> scrubbed...
> URL: 
> <https://lists.freeradius.org/pipermail/freeradius-users/attachments/2
> 0080925/b4a00053/attachment.html>
> -------------- next part -------------- A non-text attachment was 
> scrubbed...
> Name: smime.p7s
> Type: application/x-pkcs7-signature
> Size: 3406 bytes
> Desc: not available
> Url : 
> <https://lists.freeradius.org/pipermail/freeradius-users/attachments/2
> 0080925/b4a00053/attachment.bin>
> 
> ------------------------------
> 
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html
> 
> 
> End of Freeradius-Users Digest, Vol 41, Issue 113
> *************************************************

-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3406 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080925/e6bd5556/attachment.bin>


More information about the Freeradius-Users mailing list