Freeradius2 configuration challenges ( Binding IP address & failure of radtest

[John Dennis]

On 10/15/2009 10:22 PM, adaigle at vl.videotron.ca wrote:
> Hi Everyone
> I think I am getting ahead but now I got the following error:
>
> [pap] WARNING! No "known good" password found for the user.  Authentication may fail because of this.
> ++[pap] returns noop
> No authenticate method (Auth-Type) configuration found for the request: Rejecting the user
> Failed to authenticate the user.
>
>
> I was just trying to setup PAP (testuser) on the radius
>
> Would you know what the error could be ?

You have to configure FreeRADIUS to tell it where to find users and 
their passwords. Are they in the FreeRADIUS users file? Are they system 
users with login accounts? Are they in an ldap directory? Are they in a 
SQL database?

If you're trying to just confirm PAP is working then have you read and 
followed the example here:

http://deployingradius.com/documents/configuration/pap.html

BTW, deployingradius.com is the only other web site besides the 
FreeRADIUS site and it's wiki that is recommended because it's run by 
Alan DeKok the principal developer of FreeRADIUS. Other web sites tend 
to have out of date information or erroneous information.

Also, note that the users file is read upon server start up, if you 
modify the users file (or any other file read by the server) you'll have 
to restart the server to see the change. There are other ways to get the 
server to reload it's files but since you're new to this we're going to 
keep it simple. As a side note, one advantage of using LDAP or SQL as 
your backend data source is you can add, remove, and edit the data in 
the backend and the FreeRADIUS server will immediately see the change 
without having to do anything special, thus you can immediately see one 
disadvantage of user data stored in files as opposed to a dynamic backend.

-- 
John Dennis <jdennis at redhat.com>

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/