falling back to local auth and not ads

Morris, Andi amorris at cardiffmet.ac.uk
Tue Apr 24 14:26:55 CEST 2012


OK, that entry in the users file was in as part of the prebuild package.  I will have to check why that is there with the guys that make the package.  For the moment I have commented it out so that it truly reflects the config on your website.

I have been through the steps again and found that final radtest shows an access-reject and the debug shows:
ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user
Failed to authenticate the user.

Now presumably this is because there is nothing in the users file (by putting the DEFAULT EAP-Message !* "", Auth-Type := Accept back the access-request is accepted).  The website says to delete the previous test entry, so now I am left with nothing in the users file.  Is this correct?

Cheers,
Andi

-----Original Message-----
From: freeradius-users-bounces+amorris=cardiffmet.ac.uk at lists.freeradius.org [mailto:freeradius-users-bounces+amorris=cardiffmet.ac.uk at lists.freeradius.org] On Behalf Of Alan DeKok
Sent: 24 April 2012 12:41
To: FreeRadius users mailing list
Subject: Re: falling back to local auth and not ads

Morris, Andi wrote:
> Great website!  I've been through all the steps on that and I get an Access-Accept when running the radtest against MSCHAP at the end, however when I connect from a supplicant I'm still seeing the following in the debug output.

  If you follow the instructions on the web site, then it will work.

> The only thing in my users file is:
>  DEFAULT EAP-Message !* "", Auth-Type := Accept

  The web site does NOT say to do this.  Do you understand what it does?
 It tries to bypass all authentication!

  Follow the web site.  Don't do *more* changes than the web site says.

  It *will* work.

  The web site contains DETAILED descriptions of what to configure, what to test, and what to do when the tests don't work.  It's clear you're
*not* following the web site.  If you were, you would be saying which step you tried, which ones worked, and which test failed.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
________________________________

From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. Please could you ensure that all of your contact records and databases are updated to reflect this change. Further information can be found on the website here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>

Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>



More information about the Freeradius-Users mailing list