freeraduis LDAP error

dhanushka ranasinghe parakrama1282 at gmail.com
Fri May 4 09:35:55 CEST 2012


Hi...guys...

with the blow configuration .....in  user file


DEFAULT Ldap-Group == "cn=employees,ou=group,dc=ldap,dc=home,dc=com",
Auth-Type := PAP
 Reply-Message = "You are Accepted"

DEFAULT Auth-Type := Reject


I test the radius access from command line  , by entering wrong
password [1] and correct password [2] .., in that case radius respond
fine, Issue only occurs [3] when   access via ubuntu machine
(WPAsupplicant) ...

eg --
1) radtest  username  wrong-password  192.168.0.63  1812 testing123

Sending Access-Request of id 176 to 192.168.0.63 port 1812
	User-Name = "dhanushkar at wso2.com"
	User-Password = "dcn05c4-128222"
	NAS-IP-Address = 192.168.0.60
	NAS-Port = 1812
rad_recv: Access-Reject packet from host 192.168.0.63 port 1812,
id=176, length=38


2) radtest username  correct-password 192.168.0.63  1812 testing123

Sending Access-Request of id 167 to 192.168.0.63 port 1812
	User-Name = "dhanushkar at wso2.com"
	User-Password = "dcn05c4-1282"
	NAS-IP-Address = 192.168.0.60
	NAS-Port = 1812
rad_recv: Access-Accept packet from host 192.168.0.63 port 1812,
id=167, length=38


3)

 # Executing group from file /etc/freeradius/sites-enabled/default
Thu May  3 11:50:26 2012 : Info: +- entering group PAP {...}
Thu May  3 11:50:26 2012 : Info: [pap] ERROR: You set 'Auth-Type =
PAP' for a request that does not contain a User-Password attribute!
Thu May  3 11:50:26 2012 : Info: ++[pap] returns invalid
Thu May  3 11:50:26 2012 : Info: Failed to authenticate the user.


Thank you
Dhanushka


On 4 May 2012 11:58, Fajar A. Nugraha <list at fajar.net> wrote:
> On Fri, May 4, 2012 at 1:15 PM, dhanushka ranasinghe
> <parakrama1282 at gmail.com> wrote:
>> Hi..
>>
>> when i removed  "Auth-Type := PAP"   line    radius not checking
>> password , even when wrong password is used user get the
>> authenticated.
>
> What does the debug log say?
>
> My guess is you have Auth-Type := Accept somewhere.
>
> --
> Fajar
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


More information about the Freeradius-Users mailing list