Freeradius is unable to read NAS table in mysql db
superataru -
superataru at gmail.com
Thu Jun 10 17:53:04 CEST 2010
Hi.
Sorry 'cause i'm late. Some troubles.
Well i worked as following explained to perform a test (problem we talk
about) but also to check if password would have been passed encrypted in the
internet.
|--------------------|
*|NAS-USG100|*( *USGWAN* -79.xxx.xxx.xxx )---(INTERNET)----(78.yyy.yyy.yyy)
*RADIUS*
|--------------------|
( *USGLAN*:172.16.68.253)
|
(WEB-HTTPS)
|
|
172.16.68.16
I mirrored both of WAN ports of USG, say WAN1 and WAN2 and had something to
give to wireshark :-)
I open Web LogIN page of USG and provide fake user and password (not present
on ActiveDirectory or local USBdb), say gigino / 12345678
*I obtaint this (USG)*
79.xxx.xxx.xxx 78.yyy.yyy.yyy RADIUS Access-Request(1) ....
AVP: l=8 t=User-Name(1): gigino
AVP: l=18 t=User-Password(2): *Encrypted* <- Yippieeeee
AVP: l=6 t=NAS-IP-Address(4): 172.16.68.10 <- (PDC of my internal
domain)
AVP: l=10 t=NAS-Identifier(32): weblogin
AVP: l=6 t=NAS-Port(5): 20915
AVP: l=6 t=NAS-Port-Type(61): Virtual(5)
AVP: l=6 t=Service-Type(6): Authenticate-Only(8)
AVP: l=14 t=Calling-Station-Id(31): 172.16.68.16
*
. . . on remote radius server i obtain*
Ready to process requests.
rad_recv: Access-Request packet from host 79.xxx.xxx.xxx ...
User-Name = "gigino"
User-Password = "gigino"
NAS-IP-Address = 172.16.68.10
NAS-Identifier = "weblogin"
NAS-Port = 20915
NAS-Port-Type = Virtual
Service-Type = Authenticate-Only
Calling-Station-Id = "172.16.68.16"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "gigino", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
++[unix] returns notfound
--------------------------------------------------------------
I presumed NAS-IP-Address: 172.16.68.253 !!!!!!!!
What do you think?
Thank in advance.
_______________________________________________
Sono solo un passeggero del volo e mi credevo pilota . . .
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100610/d86f2003/attachment.html>
More information about the Freeradius-Users
mailing list