pam_radius requires setting Auth-Type ?
Fajar A. Nugraha
list at fajar.net
Fri Sep 21 12:34:25 CEST 2012
On Fri, Sep 21, 2012 at 5:24 PM, NdK <ndk.clanbo at gmail.com> wrote:
> Hello all.
> We just added pam_radius to our vpn host, to authenticate vpn users
> throught our (working) RADIUS server.
> IIUC pam_radius is sending a PAP message:
> Access-Request packet from host 192.168.130.61 port 9327, id=233,
> User-Name = "STUDENTI\\studente.fittizio"
> User-Password = "my-cleartext-password"
> NAS-IP-Address = 126.96.36.199
> NAS-Identifier = "openvpn"
> NAS-Port = 8302
> NAS-Port-Type = Virtual
> Service-Type = Authenticate-Only
> But if I don't add (in users file) a line like:
> DEFAULT NAS-Identifier == "openvpn", Auth-Type := PAP
> FR complains:
> ERROR: No authenticate method (Auth-Type) found for the request:
> Rejecting the user
> IIUC, Auth-Type should never be set manually, so I'm quite sure I'm
> missing something...
> Could you please point me in the right direction?
What does your full debug looks like? Is it possible you DON'T have
pap in authorize section?
More information about the Freeradius-Users