"Known good" password

Bernd Nachtigall bnacht at web.de
Thu Jul 5 13:03:06 CEST 2018


Am 05.07.2018 um 12:03 schrieb Alan Buxey:
> your user entry is wrong. thus not matching the request.
> 
> alan

Yes, I assume that ...

But
>> testuser Cleartext-Password := "mypassword",

>> radtest testuser mypassword 127.0.0.1 0 testing123

testuser = testuser

mypassword = mypassword

So, it seems that the error is not the username nor the password.

Which of the other paramters could be the reason for the 'No "known
good" password found' message?

Bernd

> 
> On 5 July 2018 at 10:58, Bernd Nachtigall <bnacht at web.de> wrote:
> 
>> Hi,
>>
>> I try to setup a basic radius service. Use Version 3.0.3
>> Most files are untouched. Edit mods-config/files/authorize and added
>> some user:
>>
>> testuser Cleartext-Password := "mypassword", Login-Time ="Any",
>> Expiration >"Oct 01 2020", Simultanous-Use = 1
>>         Service-Type = Framed-User,
>>         Framed-Protocol = PPP,
>>         Framed-IP-Address = 192.168.111.222,
>>         Framed-Routing = None,
>>         Filter-ID = USER
>>
>> Edit client.conf and added:
>> client 192.168.1.5 {
>>         secret = clientpwd
>> }
>>
>> radiusd starts w/o problem and the default test:
>> # radtest testing password 127.0.0.1 0 testing123
>> is successfull.
>>
>> When try to test (from localhost):
>>
>> # radtest testuser mypassword 127.0.0.1 0 testing123
>>
>> I think this is likely the same test as with the default user 'testing'.
>>
>> radius throw:
>> ...
>> WARNING: pap : No "known good" password found tor the user. Not setting
>> Auth-Type.
>> WARNING: pap : Authentication will faill unless a "known good" password
>> is available.
>>   [pap] = noop
>> } # authorize = ok
>> ERROR: No Auth-Tape found: rejecting the user via Post-Auth-Type = Reject
>> ...
>>
>> So my question is: What is an 'known good' password? Where should this
>> be configured?
>>
>>
>> TiA
>>
>> Bernd
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/
>> list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 


More information about the Freeradius-Users mailing list