"Known good" password

[Matthew Newton]

On Thu, 2018-07-05 at 11:58 +0200, Bernd Nachtigall wrote:
> I try to setup a basic radius service. Use Version 3.0.3

That's rather old now, and has security vulnerabilities.

> Most files are untouched. Edit mods-config/files/authorize and added
> some user:


> radiusd starts w/o problem and the default test:
> # radtest testing password 127.0.0.1 0 testing123
> is successfull.

There is no default test user "testing", so where did you add that?


> When try to test (from localhost):
> 
> # radtest testuser mypassword 127.0.0.1 0 testing123
> 
> I think this is likely the same test as with the default user
> 'testing'.

Did you add "testuser" in the same place you added "testing"?

> 
> radius throw:
> ...
> WARNING: pap : No "known good" password found tor the user. Not
> setting
> Auth-Type.
> WARNING: pap : Authentication will faill unless a "known good"
> password
> is available.
>   [pap] = noop
> } # authorize = ok
> ERROR: No Auth-Tape found: rejecting the user via Post-Auth-Type =
> Reject
> ...

That doesn't show anything useful.

http://wiki.freeradius.org/list-help


-- 
Matthew