SV: SV: Simple Configuration of using passwd-like file, howto needed

Madsen.Jan JMD JMD at kmd.dk
Fri Jul 9 10:27:35 CEST 2010


Okay Alan

I did like this now
More /etc/freeradius/modules/passwd
passwd kmdov3 {
        filename = /etc/tac-plus/passwd
        format = "*User-Name:Password:::::"
        hashsize = 0
        delimiter = :
        authtype = pap
}

This looks very mutch like the smbpasswd file
passwd smbpasswd {
        filename = /etc/smbpasswd
        format = "*User-Name::LM-Password:NT-Password:SMB-Account-CTRL-TEXT::"
        hashsize = 100
        ignorenislike = no
        allowmultiplekeys = no
}

And still I just get a rejected login
rad_recv: Access-Request packet from host 127.0.0.1 port 41186, id=97, length=55
        User-Name = "jmd"
        User-Password = "password"
        NAS-IP-Address = 172.31.254.4
        NAS-Port = 0
Fri Jul  9 10:27:18 2010 : Info: +- entering group authorize {...}
Fri Jul  9 10:27:18 2010 : Info: ++[preprocess] returns ok
Fri Jul  9 10:27:18 2010 : Info: ++[chap] returns noop
Fri Jul  9 10:27:18 2010 : Info: ++[mschap] returns noop
Fri Jul  9 10:27:18 2010 : Info: [suffix] No '@' in User-Name = "jmd", looking up realm NULL
Fri Jul  9 10:27:18 2010 : Info: [suffix] No such realm "NULL"
Fri Jul  9 10:27:18 2010 : Info: ++[suffix] returns noop
Fri Jul  9 10:27:18 2010 : Info: [eap] No EAP-Message, not doing EAP
Fri Jul  9 10:27:18 2010 : Info: ++[eap] returns noop
Fri Jul  9 10:27:18 2010 : Info: ++[unix] returns updated
Fri Jul  9 10:27:18 2010 : Info: [files] users: Matched entry DEFAULT at line 49
Fri Jul  9 10:27:18 2010 : Info: ++[files] returns ok
Fri Jul  9 10:27:18 2010 : Info: ++[expiration] returns noop
Fri Jul  9 10:27:18 2010 : Info: ++[logintime] returns noop
Fri Jul  9 10:27:18 2010 : Info: ++[pap] returns updated
Fri Jul  9 10:27:18 2010 : Info: Found Auth-Type = PAP
Fri Jul  9 10:27:18 2010 : Info: +- entering group PAP {...}
Fri Jul  9 10:27:18 2010 : Info: [pap] login attempt with password "q1001wqwe123"
Fri Jul  9 10:27:18 2010 : Info: [pap] Using CRYPT encryption.
Fri Jul  9 10:27:18 2010 : Info: [pap] Passwords don't match
Fri Jul  9 10:27:18 2010 : Info: ++[pap] returns reject
Fri Jul  9 10:27:18 2010 : Info: Failed to authenticate the user.
Fri Jul  9 10:27:18 2010 : Info: Using Post-Auth-Type Reject
Fri Jul  9 10:27:18 2010 : Info: +- entering group REJECT {...}
Fri Jul  9 10:27:18 2010 : Info: [attr_filter.access_reject]    expand: %{User-Name} -> jmd
Fri Jul  9 10:27:18 2010 : Debug:  attr_filter: Matched entry DEFAULT at line 11
Fri Jul  9 10:27:18 2010 : Info: ++[attr_filter.access_reject] returns updated
Fri Jul  9 10:27:18 2010 : Info: Delaying reject of request 1 for 1 seconds
Fri Jul  9 10:27:18 2010 : Debug: Going to the next request
Fri Jul  9 10:27:18 2010 : Debug: Waking up in 0.9 seconds.
Fri Jul  9 10:27:19 2010 : Info: Sending delayed reject for request 1
Sending Access-Reject of id 97 to 127.0.0.1 port 41186
Fri Jul  9 10:27:19 2010 : Debug: Waking up in 4.9 seconds.
Fri Jul  9 10:27:24 2010 : Info: Cleaning up request 1 ID 97 with timestamp +23
Fri Jul  9 10:27:24 2010 : Info: Ready to process requests.

Best regards
Jan Madsen

-----Oprindelig meddelelse-----
Fra: freeradius-users-bounces+jmd=kmd.dk at lists.freeradius.org [mailto:freeradius-users-bounces+jmd=kmd.dk at lists.freeradius.org] På vegne af Alan DeKok
Sendt: 9. juli 2010 10:16
Til: FreeRadius users mailing list
Emne: Re: SV: Simple Configuration of using passwd-like file, howto needed

Madsen.Jan JMD wrote:
> So I need to change the passwd file name ?
> Now using : /etc/freeradius/modules/passwd
> 
> or do I need to do somehting like this in the passwd file
> 
> Passwd-name {

  Something like that.  See the "smbpasswd" file for an example of what
you need to do.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________________________________________________
KMD A/S, Lautrupparken 40-42, DK-2750 Ballerup, CVR-nr. 26911745 

KMD er medlem af IT-Branchen og Dansk Erhverv samt anmeldt til Datatilsynet som edb-servicevirksomhed. KMD er certificeret i henhold til ISO 9001:2000, med Dansk Standard som certificerende organ og er desuden Microsoft Gold Certified Partner og Certificeret SAP Hosting Center.

www.kmd.dk   www.kundenet.kmd.dk   www.organisator.dk   www.kmdinternational.com

Hvis du har modtaget denne e-mail ved en fejl, bedes du venligst give mig besked herom og slette den.
If you received this e-mail by mistake, please notify me and delete it. Thank you.




More information about the Freeradius-Users mailing list