"No NAS-PORT seen"

[Peter Carlstedt]

> ------------------------------
> 
> Message: 2
> Date: Mon, 23 Nov 2009 15:25:32 +0100
> From: Alan DeKok <aland at deployingradius.com>
> Subject: Re: "No NAS-PORT seen"
> To: FreeRadius users mailing list
> <freeradius-users at lists.freeradius.org>
> Message-ID: <4B0A9B5C.6000102 at deployingradius.com>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> Peter Carlstedt wrote:
> > Well all of that works but from that point and forward it doesnt, I cant
> > get my new user to authenticate towards the radius server and I get from
> > attr_filter that the request matched entry DEFAULT at line 11, which
> > sends a reject message if I have understood it correctly. Also I?ve
> > commented out that the radius server should use the users file to do
> > checks against when someone tries to authenticate, well that dont seem
> > to work because when i try to authenticate towards the radius server
> > with a user in the users file I succeed while i do not succeed when i
> > try to authenticate by using the user that i created in the mysql database.
> > 
> > Have I missed something?
> 
> It shouldn't be that hard. If you change the configuration, re-start
> the server.

 

I re-start the server all the time when I change the configuration...so that is not the case.

I´ve checked if it works with radtest and it does. So in my mind it feels like i´ve missed something in the peap configuration? 


> 
> And READ the debug output. There's a lot of text in it, but it
> describes which modules its using, and what it's doing. The ONLY answer
> to configuration problems is in the debug output.
> 
> > But something i also noticed is that when i authenticate as the user who
> > is in the users file and have commented out that it should use the users
> > file it gets a message from rlm_radutmp saying "No NAS-Port seen. Cannot
> > do anything."
> 
> That only comes from accounting traffic, not from authentication
> traffic. Please do NOT confuse the two.
> 
> > Ive installed and made my own build of Freeradius 2.1.7 after i
> > installed mysql client and all those libraries and mysql server. also I
> > installed OpenSSL 0.9.8l before installation of the Freeradius server.
> > 
> > Since the log is so big from radiusd -X is there any possibility to save
> > it into a file? And how do i do that?
> 
> $ script radius.log
> $ radiusd -X ....
> (run)
> $ exit
> 
> And then look at the file "radius.log"
> 
> Alan DeKok.

 

Ok thanks!

I´ll do that.

 

Peter Carlstedt
> 
> 
> ------------------------------
> 
> 
> Message: 4
> Date: Mon, 23 Nov 2009 14:53:42 +0000
> From: Peter Carlstedt <pc_007 at hotmail.com>
> Subject: Update of "No NAS-PORT seen"
> To: <freeradius-users at lists.freeradius.org>
> Message-ID: <SNT120-W79B8526AA982DAA24E059B49E0 at phx.gbl>
> Content-Type: text/plain; charset="iso-8859-1"
> 
> 
> Hello again!
> 
> I have an update of the problem.
> 
> 
> 
> I also got an error which I?ve had before, then Ivan Kalik I think told me that i need to enable copy_request_to_tunnel = yes. Well I have that enabled so I can authenticate by peap. But now I get the same error when I try to authenticate the user which has been created in the MySQL database. The error I get is: (only mentioning the mschapv2 & mschap response from the output)
> 
> 
> 
> "[mschapv2] +- entering group MS-CHAP {...}
> 
> [mschap] No Cleartext-Password configured. Cannot create LM-Password.
> 
> [mschap] No Cleartext-Password configured. Cannot create NT-Password.
> 
> [mschap] Told to do MS-CHAPv2 for test-user with NT-Password
> 
> [mschap] FAILED: No NT/LM-Password. Cannot perform authentication.
> 
> [mschap] FAILED: MS-CHAP2-Response is incorrect
> 
> ++[mschap] returns reject
> 
> 
> 
> Also as a side note, the user in the database has a Cleartext-Password := test-pass.
> 
> I read on the wiki that I should use ":=" and not "==" to do the check of the password.
> 
> Also I have not set a AUTH-TYPE, i let the server figure it out on its own. 
> 
> 
> 
> Best regards/ Peter
> > 

 		 	   		  
_________________________________________________________________
Windows Live: Make it easier for your friends to see what you’re up to on Facebook.
http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_2:092009
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20091123/bf185726/attachment.html>