Update of "No NAS-PORT seen"

[Peter Carlstedt]

Hello again!

I have an update of the problem.

 

I also got an error which I´ve had before, then Ivan Kalik I think told me that i need to enable copy_request_to_tunnel = yes. Well I have that enabled so I can authenticate by peap. But now I get the same error when I try to authenticate the user which has been created in the MySQL database. The error I get is: (only mentioning the mschapv2 & mschap response from the output)

 

"[mschapv2] +- entering group MS-CHAP {...}

[mschap] No Cleartext-Password configured. Cannot create LM-Password.

[mschap] No Cleartext-Password configured. Cannot create NT-Password.

[mschap] Told to do MS-CHAPv2 for test-user with NT-Password

[mschap] FAILED: No NT/LM-Password. Cannot perform authentication.

[mschap] FAILED: MS-CHAP2-Response is incorrect

++[mschap] returns reject

 

Also as a side note, the user in the database has a Cleartext-Password := test-pass.

I read on the wiki that I should use ":=" and not "==" to do the check of the password.

Also I have not set a AUTH-TYPE, i let the server figure it out on its own. 

 

Best regards/ Peter
> 
> Message: 5
> Date: Mon, 23 Nov 2009 14:03:41 +0000
> From: Peter Carlstedt <pc_007 at hotmail.com>
> Subject: "No NAS-PORT seen"
> To: <freeradius-users at lists.freeradius.org>
> Message-ID: <SNT120-W743F9B44DFAEDBDCB59F0B49E0 at phx.gbl>
> Content-Type: text/plain; charset="iso-8859-1"
> 
> 
> Hello everyone!
> 
> After some work now I have succesfully got MySQL to work towards the Freeradius server or at least I think it does.
> 
> But hurm.. I?ve added a user by adding a user in radcheck, ive written "insert into radcheck (id, username, attribute, op, value) VALUES (null, 'test-user', 'Cleartext-Password', ':=', 'test-pass');
> 
> and then I?ve written "select * from radcheck;" which shows the new user.
> 
> 
> 
> Well all of that works but from that point and forward it doesnt, I cant get my new user to authenticate towards the radius server and I get from attr_filter that the request matched entry DEFAULT at line 11, which sends a reject message if I have understood it correctly. Also I?ve commented out that the radius server should use the users file to do checks against when someone tries to authenticate, well that dont seem to work because when i try to authenticate towards the radius server with a user in the users file I succeed while i do not succeed when i try to authenticate by using the user that i created in the mysql database. 
> 
> 
> 
> 
> 
> Have I missed something?
> 
> 
> 
> But something i also noticed is that when i authenticate as the user who is in the users file and have commented out that it should use the users file it gets a message from rlm_radutmp saying "No NAS-Port seen. Cannot do anything."
> 
> 
> 
> Have I done something terrible wrong?
> 
> 
> 
> Ive installed and made my own build of Freeradius 2.1.7 after i installed mysql client and all those libraries and mysql server. also I installed OpenSSL 0.9.8l before installation of the Freeradius server. 
> 
> 
> 
> Since the log is so big from radiusd -X is there any possibility to save it into a file? And how do i do that?
> 
> 
> 
> Best regards/ Peter Carlstedt
> 
> 
> 
> _________________________________________________________________
> Windows Live Hotmail: Your friends can get your Facebook updates, right from Hotmail?.
> http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_4:092009
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20091123/7742bdb9/attachment.html>
> 
> ------------------------------
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 
> 
> End of Freeradius-Users Digest, Vol 55, Issue 106
> *************************************************

 		 	   		  
_________________________________________________________________
Windows Live Hotmail: Your friends can get your Facebook updates, right from Hotmail®.
http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_4:092009
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20091123/43349b85/attachment.html>