Error connecting Radius server

[Fajar A. Nugraha]

On Tue, Feb 1, 2011 at 12:24 PM, vijay s sheelavantar <
s_vijay65 at rediffmail.com> wrote:

> Hello Friends,
>
> I am getting following error while authenticating users.  The request from
> pam_radius is reaching radius server and server is sending "Access-Accept".
> but client is not able to receive this message.
>
> Feb 1 14:25:40 (none) sshd[27321]: pam_radius_auth: Got user name user
> Feb 1 14:25:42 (none) sshd[27321]: pam_radius_auth: Sending RADIUS request
> code 1
> Feb 1 14:25:42 (none) sshd[27321]: pam_radius_auth: DEBUG:
> getservbyname(radius, udp) returned 722322004.
> Feb 1 14:25:45 (none) sshd[27321]: pam_radius_auth: RADIUS server 19.1.1.2
> failed to respond
> Feb 1 14:25:45 (none) sshd[27321]: pam_radius_auth: DEBUG:
> get_ipaddr(other-server) returned 0.
> Feb 1 14:25:45 (none) sshd[27321]: pam_radius_auth: Failed looking up IP
> address for RADIUS server other-serve
> r (errcode=9)
> Feb 1 14:25:45 (none) sshd[27321]: pam_radius_auth: All RADIUS servers
> failed to respond.
> Feb 1 14:25:45 (none) sshd[27321]: pam_radius_auth: authentication failed
>
>
Are you using Ubuntu + libpam-radius-auth, by any chance?

If yes, the config is /etc/pam_radius_auth.conf (even if the file still says
"Copy to: /etc/raddb/server"). My test config file simply has these lines:

127.0.0.1 testing123             1

All other lines are commented out, and the test work just fine with radius
server running on localhost.
>From your logs it looks like you forgot to comment-out the example
"other-server" entry.

Also, is 19.1.1.2 the IP of your radius server? Some things can cause the
client not receive radius reply correctly (like when the radius server has
multiple IP address). To narrow down the problem, you should test with
radtest/radclient/whatever-your-favorite-radius-auth-test-tool first.

-- 
Fajar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110201/9f9e890f/attachment.html>