Issue while installing free radius

Surya Teja suryateja042 at gmail.com
Sat Apr 20 14:53:24 CEST 2019


Hi  Alan ,
Thanks for suggestion and i have followed the steps as per documentation
from freeradius.org  installed free radius and the tested with same example
given, its working fine.

[root at nusalxsl0983 ~]# radtest testing password 127.0.0.1 0 testing123
Sent Access-Request Id 126 from 0.0.0.0:45388 to 127.0.0.1:1812 length 77
        User-Name = "testing"
        User-Password = "password"
        NAS-IP-Address = 10.0.0.120
        NAS-Port = 0
        Message-Authenticator = 0x00
        Cleartext-Password = "password"
Received *Access-Accept* Id 126 from 127.0.0.1:1812 to 0.0.0.0:0 length 20
[root at nusalxsl0983 ~]#


but i have few other integration which needs changes in few configuration
files
I am trying to configure the cova chilli with freeradius for captive portal
as a result of it i need to integrate mysql  with freeradius
and need to change the secret key of freeradius default one(testing123) to
that of  mysql free radius user password
as suggested in forum i have modified the secrekey on following config files
*1)sudo vi /etc/raddb/mods-available/sql*
Uncomment and or change the following parameters:
driver = "rlm_sql_mysql"
dialect = ”mysql”
server = "localhost"
port = 3306
login = "*FREERADIUS_DB_USER*"
password = "*FREERADIUS_DB_PASS*"
read_clients = yes
*2)sudo vi /etc/raddb/clients.conf*
Change the password to the password used above for FreeRadius MySQL
database:
*secret* = [*FREERADIUS_DB_PASS*]

 updated above and restarted freeradius server and tried the same above
test case of with new password (secret key)now i am getting exception
in radiusd.log as
Sat Apr 20 11:37:20 2019 : Info: Dropping packet without response because
of error:* Received packet from 127.0.0.1 with invalid
Message-Authenticator!  (Shared secret is incorrect.)*
Sat Apr 20 11:37:25 2019 : Info: Dropping packet without response because
of error: Received packet from 127.0.0.1 with invalid
Message-Authenticator!  (Shared secret is incorrect.)

can i know is the this secret key needs to be updated in any other
configuration files, any idea or suggestion will be more helpful
Any help can be appreciated.

Thanks
surya

On Fri, Apr 19, 2019 at 9:56 PM Alan DeKok <aland at deployingradius.com>
wrote:

> On Apr 19, 2019, at 9:59 AM, Surya Teja <suryateja042 at gmail.com> wrote:
> >
> > Hi i have installed freeradius successfully and radiusd-x status is ok
> > to test my installation setup is all ok, I have inserted an entry
> > manually into table with below  information as
> >  INSERT INTO radcheck (UserName, Attribute, Value, Op) VALUES
> ('testuser',
> > 'testing!23', 'testing!23', ':=');
> >  and when i execute the command
> >  radtest testuser 'testing!23' 127.0.0.1 0 'testing!23'
> >  i am getting as below
> >    Sent Access-Request Id 38 from 0.0.0.0:50157 to 127.0.0.1:1812
> length 75
> >        User-Name = "testuser"
> >        User-Password = "testing!23"
> >        NAS-IP-Address = 192.168.2.172
> >        NAS-Port = 0
> >        Message-Authenticator = 0x00
> >        Cleartext-Password = "testing!23"
> > *Received Access-Reject Id 38 from 127.0.0.1:1812
> > to 0.0.0.0:0  length 20*
> > (0) -: *Expected Access-Accept got Access-Reject*
> > *In  tail -f /var/log/radius/radius.log* i can see as below
>
>   You're ignoring the documentation.  Don't do that.
>
>   This isn't difficult.  You're making it difficult.
>
>   Run the server in debug mode.  The documentation says to do this.
>
>   The more time you waste doing wrong things, the longer it will take to
> fix the probvlem.
>
> > Info: Need 0 more connections to reach min connections (3)
> > Info: Need 0 more connections to reach min connections (3)
> >
> > ----> Researched in Google and  one of forum it suggest as
>
>   Ignore that.  It isn't relevant.
>
>   And why are you searching for crappy third-party documentation, when the
> FreeRADIUS documentation tells you what to do?
>
>   It just makes no sense.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html


More information about the Freeradius-Users mailing list