A strange problem with NAS and pfsense with freeradius.

Alan Buxey alan.buxey at gmail.com
Mon Jan 29 20:08:18 CET 2018


dont know what you did with the output but its all totally mangled.
however, even without showing actual packet debug (ie the server doing
work) I see eg "Ignoring "sql" (see raddb/mods-available/README.rst"
so wonder if you have actually properly configured the sql module -
ensured that its got correct driver defined etc and that a link to
mods-enabled/ actually exists so that the SQL engine is even
operational....

alan

On 29 January 2018 at 18:31, Alan DeKok <aland at deployingradius.com> wrote:
>
>> On Jan 29, 2018, at 1:26 PM, Mery Saint via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
>>
>> If insert username and password in:
>> /usr/local/etc/raddb/users"test" Cleartext-Password := "test"is possible to authenticate the client.If use mysql to store username and password:MariaDB [radius]> select * from  radcheck;+----+----------+--------------------+----+-------+| id | username | attribute          | op | value |+----+----------+--------------------+----+-------+|  1 | test     | Cleartext-Password | := | test  |+----+----------+--------------------+----+-------+I receive this error:Info: Loaded virtual server
>
>   Please post plain text to the mailing list.
>
>   And, text which isn't mangled.
>
>> <default>Info: Loaded virtual server defaultWarning: Ignoring "sql" (see raddb/mods-available/README.rst)Warning: Ignoring "ldap" (see raddb/mods-available/README.rst)Info: Loaded virtual server inner-tunnel-ttlsInfo: Loaded virtual server inner-tunnel-peapInfo: Ready to process requestsAuth: (8)   Login incorrect (mschap: FAILED: No NT/LM-Password.  Cannot perform authentication): [test] (from client radius port 0 via TLS tunnel)Info: (9) eap_peap:   This means you need to read the PREVIOUS messages in the debug outputInfo
>
>   Did you read the PREVIOUS messages?
>
>> This is the output of radiusd –X
>> ...Listening on auth address 127.0.0.1 port 18128 bound to server inner-tunnel-peapReady to process requests
>
>  <sigh>
>
>   How do you debug packet processing, unless you show the server processing packets?
>
>   Please post the FULL debug log, WHERE IT RECEIVES PACKETS.
>
>   Alan DeKok.
>
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list