Not setting Auth-Type

Roberto Rios rrios at chattanooga.gov
Thu Aug 25 16:07:36 CEST 2016


Ready to process requests
Received Access-Request Id 36 from 127.0.0.1:55677 to 127.0.0.1:1812 length
81
User-Name = 'yyyy1'
User-Password = 'xxxx1'
NAS-IP-Address = 10.0.45.44
NAS-Port = 0
Message-Authenticator = 0xd1c9ced51d4b2fb6529fcc61d622782c
(0) Received Access-Request packet from host 127.0.0.1 port 55677, id=36,
length=81
(0) User-Name = 'yyyy1'
(0) User-Password = 'xxxx1'
(0) NAS-IP-Address = 10.0.45.44
(0) NAS-Port = 0
(0) Message-Authenticator = 0xd1c9ced51d4b2fb6529fcc61d622782c
(0) # Executing section authorize from file /etc/raddb/sites-enabled/default
(0)   authorize {
(0)   filter_username filter_username {
(0)     if (!&User-Name)
(0)     if (!&User-Name)  -> FALSE
(0)     if (&User-Name =~ / /)
(0)     if (&User-Name =~ / /)  -> FALSE
(0)     if (&User-Name =~ /@.*@/ )
(0)     if (&User-Name =~ /@.*@/ )  -> FALSE
(0)     if (&User-Name =~ /\\.\\./ )
(0)     if (&User-Name =~ /\\.\\./ )  -> FALSE
(0)     if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\\.(.+)$/))
(0)     if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\\.(.+)$/))   ->
FALSE
(0)     if (&User-Name =~ /\\.$/)
(0)     if (&User-Name =~ /\\.$/)   -> FALSE
(0)     if (&User-Name =~ /@\\./)
(0)     if (&User-Name =~ /@\\./)   -> FALSE
(0)   } # filter_username filter_username = notfound
(0)   [preprocess] = ok
(0)   [chap] = noop
(0)   [mschap] = noop
(0)   [digest] = noop
(0)  suffix : Checking for suffix after "@"
(0)  suffix : No '@' in User-Name = "yyyy1", looking up realm NULL
(0)  suffix : No such realm "NULL"
(0)   [suffix] = noop
(0)  eap : No EAP-Message, not doing EAP
(0)   [eap] = noop
(0)   [files] = noop
(0)  sql : EXPAND %{User-Name}
(0)  sql :    --> yyyy1
(0)  sql : SQL-User-Name set to 'yyyy1'
rlm_sql (sql): Reserved connection (4)
(0)  sql : EXPAND SELECT id, username, attribute, value, op FROM radcheck
WHERE username = '%{SQL-User-Name}' ORDER BY id
(0)  sql :    --> SELECT id, username, attribute, value, op FROM radcheck
WHERE username = 'yyyy1' ORDER BY id
rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op
FROM radcheck WHERE username = 'yyyy1' ORDER BY id'
(0)  sql : EXPAND SELECT groupname FROM radusergroup WHERE username =
'%{SQL-User-Name}' ORDER BY priority
(0)  sql :    --> SELECT groupname FROM radusergroup WHERE username =
'yyyy1' ORDER BY priority
rlm_sql (sql): Executing query: 'SELECT groupname FROM radusergroup WHERE
username = 'yyyy1' ORDER BY priority'
(0)  sql : User not found in any groups
rlm_sql (sql): Released connection (4)
(0)   [sql] = notfound
rlm_ldap (ldap): Reserved connection (4)
(0)  ldap : EXPAND (uid=%{%{Stripped-User-Name}:-%{User-Name}})
(0)  ldap :    --> (uid=yyyy1)
(0)  ldap : EXPAND dc=testtn,dc=com
(0)  ldap :    --> dc=testtn,dc=com
(0)  ldap : Performing search in 'dc=testtn,dc=com' with filter
'(uid=yyyy1)', scope 'sub'
(0)  ldap : Waiting for search result...
rlm_ldap (ldap): Rebinding to URL ldap://
ForestDnsZones.testtn.com/DC=ForestDnsZones,DC=testtn,DC=com
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Rebinding to URL ldap://
DomainDnsZones.testtn.com/DC=DomainDnsZones,DC=testtn,DC=com
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Rebinding to URL ldap://
testtn.com/CN=Configuration,DC=testtn,DC=com
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Bind successful
(0)  ldap : Search returned no results
rlm_ldap (ldap): Deleting connection (4)
(0)   [ldap] = notfound
(0)   [expiration] = noop
(0)   [logintime] = noop
(0)  WARNING: pap : No "known good" password found for the user.  Not
setting Auth-Type
(0)  WARNING: pap : Authentication will fail unless a "known good" password
is available
(0)   [pap] = noop
(0)  } #  authorize = ok
(0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type =
Reject
(0) Failed to authenticate the user
(0) Using Post-Auth-Type Reject
(0) # Executing group from file /etc/raddb/sites-enabled/default
(0)  Post-Auth-Type REJECT {
(0)  sql : EXPAND .query
(0)  sql :    --> .query
(0)  sql : Using query template 'query'
rlm_sql (sql): Reserved connection (4)
(0)  sql : EXPAND %{User-Name}
(0)  sql :    --> yyyy1
(0)  sql : SQL-User-Name set to 'yyyy1'
(0)  sql : EXPAND INSERT INTO radpostauth (username, pass, reply, authdate)
VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}',
'%{reply:Packet-Type}', '%S')
(0)  sql :    --> INSERT INTO radpostauth (username, pass, reply, authdate)
VALUES ( 'yyyy1', 'xxxx1', 'Access-Reject', '2016-08-25 09:56:07')
rlm_sql (sql): Executing query: 'INSERT INTO radpostauth (username, pass,
reply, authdate) VALUES ( 'yyyy1', 'xxxx1', 'Access-Reject', '2016-08-25
09:56:07')'
rlm_sql (sql): Released connection (4)
(0)   [sql] = ok
(0)  attr_filter.access_reject : EXPAND %{User-Name}
(0)  attr_filter.access_reject :    --> yyyy1
(0)  attr_filter.access_reject : Matched entry DEFAULT at line 11
(0)   [attr_filter.access_reject] = updated
(0)  eap : Request didn't contain an EAP-Message, not inserting EAP-Failure
(0)   [eap] = noop
(0)   remove_reply_message_if_eap remove_reply_message_if_eap {
(0)     if (&reply:EAP-Message && &reply:Reply-Message)
(0)     if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
(0)    else else {
(0)     [noop] = noop
(0)    } # else else = noop
(0)   } # remove_reply_message_if_eap remove_reply_message_if_eap = noop
(0)  } # Post-Auth-Type REJECT = updated
(0) Delaying response for 1 seconds
Waking up in 0.9 seconds.
(0) Sending delayed response
(0) Sending Access-Reject packet to host 127.0.0.1 port 55677, id=36,
length=0
Sending Access-Reject Id 36 from 127.0.0.1:1812 to 127.0.0.1:55677
Waking up in 3.9 seconds.
(0) Cleaning up request packet ID 36 with timestamp +12
Ready to process requests

Right now I am trying to have a working instance of radius with ldap auth,
but , yes I will be using PEAP for wireless authentication.
Thank you


More information about the Freeradius-Users mailing list