CHAP faliled authenticate from users file
Marcin
marcin at nicram.net
Mon Feb 26 11:43:40 CET 2018
2018-02-15 13:56 GMT+01:00 Alan DeKok <aland at deployingradius.com>:
> On Feb 14, 2018, at 11:40 AM, Marcin <marcin at nicram.net> wrote:
> >
> > I've moved my test user 'serwis' directly to "users" file instead line
> > "$INCLUDE ..." and works :)
> > But I'd like to keep users in seperate file because I'm going to generate
> > this daily from database.
>
> Weird. I haven't seen that before.
>
> Are you sure that it's loading the correct file?
Yes, I'm sure that I'm loading correct file. I tried put full path also but
whihout result
> i.e. in the file you're creating and using with $INCLUDE, put this at the
> top:
>
> DEFAULT Auth-Type := Reject
>
Its, weird, because if I added this line, in debug mode log says that, in
users file was found in line where it is, so file is included.
When I remove this line, problem returns that user isn't matched.
But if I set my file instead authore in mods-enabled/files
cat mods-enabled/files
# -*- text -*-
#
# $Id: e3f3bf568d92eba8eb17bbad590f846f2d9e1ac8 $
# Livingston-style 'users' file
#
# See "man users" for more information.
#
files {
# Search for files in a subdirectory of mods-config which
# matches this instance of the files module.
moddir = ${modconfdir}/${.:instance}
# The default key attribute to use for matches. The content
# of this attribute is used to match the "name" of the
# entry.
#key = "%{%{Stripped-User-Name}:-%{User-Name}}"
# The old "users" style file is now located here.
# filename = ${moddir}/authorize
filename = ${moddir}/users
# This is accepted for backwards compatibility
# It will be removed in a future release.
# usersfile = ${moddir}/authorize
# These are accepted for backwards compatibility.
# They will be renamed in a future release.
acctusersfile = ${moddir}/accounting
preproxy_usersfile = ${moddir}/pre-proxy
}
it starting works. no changes in my users file.
>
> If the users can still log in, then the server isn't reading the file
> you're writing. Make sure that there is only one file, and use the full
> path name of the file.
>
> Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
--
Pozdrawiam
Marcin / nicraM
More information about the Freeradius-Users
mailing list