cisco 3825 authentication error

Dom dversace at tekcorner.ca
Fri Sep 2 17:26:35 CEST 2011


That is why I am so confused.  I do have this user in the users file and 
even tested authentication using NTradping and it works fine going 
directly from the Internet to the radius server.  However when I try to 
authenticate via the LNS I see this error.

any idea's.




Message: 4
Date: Fri, 02 Sep 2011 09:54:50 +0200
From: Bj?rn Mork<bjorn at mork.no>
Subject: Re: cisco 3825 authentication error
To: FreeRadius users mailing list
	<freeradius-users at lists.freeradius.org>
Message-ID:<87r53zjs51.fsf at nemi.mork.no>
Content-Type: text/plain; charset=utf-8

Dom<dversace at tekcorner.ca>  writes:


> [pap] WARNING! No "known good" password found for the user.
Looks good so far, but you need to tell freeradius the password for this
user...

E.g. by adding something like this to the "users" file:

aewais at domain.com   Cleartext-Password := "password"

or configure some database backend or whatever.  It's all in the docs



Bj?rn







  * /To/:freeradius-users at lists.freeradius.org
    <mailto:freeradius-users%40lists.freeradius.org>
  * /Subject/: cisco 3825 authentication error
  * /From/: Dom <dversace at tekcorner.ca <mailto:dversace%40tekcorner.ca>>
  * /Date/: Thu, 01 Sep 2011 15:45:02 -0400
  * /Reply-to/: FreeRadius users mailing list
    <freeradius-users at lists.freeradius.org
    <mailto:freeradius-users%40lists.freeradius.org>>
  * /User-agent/: Mozilla/5.0 (Windows NT 6.1; rv:6.0.1) Gecko/20110830
    Thunderbird/6.0.1

------------------------------------------------------------------------
I am trying to terminate vpdn sessions through our cisco 3825 
usingfreeradius. I am new to this whole process and I was hoping to get 
someassistance with the missing configuration.Below is the error message 
I am receiving when trying to authenticatevia the router.rad_recv: 
Access-Request packet from host 64.34.66.5 port 1645, id=19,length=135

         Framed-Protocol = PPP
         User-Name = "aewais at domain.com"
         User-Password = "password"
         Calling-Station-Id = "bas203300000455"
         Connect-Info = "1000000000"
         NAS-Port-Type = Virtual
         NAS-Port = 532
         NAS-Port-Id = "Uniq-Sess-ID532"
         Service-Type = Framed-User
         NAS-IP-Address = 64.34.66.5

# Executing section authorize from 
file/etc/freeradius/sites-enabled/default

+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
++[digest] returns noop
[suffix] Looking up realm "domain.com" for User-Name = "aewais at domain.com"
[suffix] No such realm "domain.com"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
[files] users: Matched entry DEFAULT at line 172
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop

[pap] WARNING! No "known good" password found for the 
user.Authentication may fail because of this.

++[pap] returns noop

ERROR: No authenticate method (Auth-Type) found for the 
request:Rejecting the user

Failed to authenticate the user.
Using Post-Auth-Type Reject
# Executing group from file /etc/freeradius/sites-enabled/default
+- entering group REJECT {...}
[attr_filter.access_reject]     expand: %{User-Name} ->  aewais at domain.com
  attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 0
Sending Access-Reject of id 19 to 64.34.66.5 port 1645
Waking up in 4.9 seconds.
Cleaning up request 0 ID 19 with timestamp +381
Ready to process requests.






-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110902/3eebb023/attachment.html>


More information about the Freeradius-Users mailing list