ERROR: No Auth-Type found:
Tal Nur
nurtal at yahoo.com
Tue Jul 2 13:16:01 CEST 2019
Dear All,
I'm struggling with FR 3.0.20 configuring for eduroam.Today I've got the following error message:ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject
Here is the output of radiusd -X command:(0) Received Access-Request Id 197 from 89.250.80.7:1026 to 89.250.80.6:1812 length 133(0) User-Name = "bob at turan.kz"(0) NAS-IP-Address = 192.168.0.1(0) NAS-Port = 0(0) Called-Station-Id = "C8-3A-35-40-1C-F0"(0) Calling-Station-Id = "4C-49-E3-15-5D-CA"(0) Framed-MTU = 1400(0) NAS-Port-Type = Wireless-802.11(0) EAP-Message = 0x0201001101626f6240747572616e2e6b7a(0) Message-Authenticator = 0x3d081e4d2e965e5f7661f8b80ad0b6ef(0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/eduroam(0) authorize {(0) policy filter_username {(0) if (&User-Name) {(0) if (&User-Name) -> TRUE(0) if (&User-Name) {(0) if (&User-Name =~ / /) {(0) if (&User-Name =~ / /) -> FALSE(0) if (&User-Name =~ /@[^@]*@/ ) {(0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE(0) if (&User-Name =~ /\.\./ ) {(0) if (&User-Name =~ /\.\./ ) -> FALSE(0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {(0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE(0) if (&User-Name =~ /\.$/) {(0) if (&User-Name =~ /\.$/) -> FALSE(0) if (&User-Name =~ /@\./) {(0) if (&User-Name =~ /@\./) -> FALSE(0) } # if (&User-Name) = notfound(0) } # policy filter_username = notfound(0) update request {(0) Operator-Name := "1turan.kz"(0) } # update request = noop(0) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d(0) auth_log: --> /usr/local/var/log/radius/radacct/89.250.80.7/auth-detail-20190702(0) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/89.250.80.7/auth-detail-20190702(0) auth_log: EXPAND %t(0) auth_log: --> Tue Jul 2 05:28:46 2019(0) [auth_log] = ok(0) suffix: Checking for suffix after "@"(0) suffix: Looking up realm "turan.kz" for User-Name = "bob at turan.kz"(0) suffix: Found realm "turan.kz"(0) suffix: Adding Realm = "turan.kz"(0) suffix: Authentication realm is LOCAL(0) [suffix] = ok(0) } # authorize = ok(0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject(0) Failed to authenticate the user(0) Using Post-Auth-Type Reject(0) # Executing group from file /usr/local/etc/raddb/sites-enabled/eduroam(0) Post-Auth-Type REJECT {(0) reply_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d(0) reply_log: --> /usr/local/var/log/radius/radacct/89.250.80.7/reply-detail-20190702(0) reply_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/89.250.80.7/reply-detail-20190702(0) reply_log: EXPAND %t(0) reply_log: --> Tue Jul 2 05:28:46 2019(0) [reply_log] = ok(0) } # Post-Auth-Type REJECT = ok(0) Delaying response for 1.000000 secondsWaking up in 0.3 seconds.Waking up in 0.6 seconds.(0) Sending delayed response(0) Sent Access-Reject Id 197 from 89.250.80.6:1812 to 89.250.80.7:1026 length 20Waking up in 3.9 seconds.(0) Cleaning up request packet ID 197 with timestamp +191Ready to process requests
I used eduroam (default) file in /sites-enabled directory taken from wiki.geant.org:
server eduroam { listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } listen { type = "auth" ipv6addr = :: port = 0 } listen { type = "acct" ipv6addr = :: port = 0 } authorize { # only use filter_username from version > 3.0.7 on filter_username update request { Operator-Name := "1turan.kz" # the literal number "1" above is an important prefix! Do not change it! } # if you want detailed logging auth_log suffix } authenticate { eap } preacct { suffix } accounting { } post-auth { # if you want detailed logging reply_log Post-Auth-Type REJECT { reply_log } } pre-proxy { # if you want detailed logging pre_proxy_log if("%{Packet-Type}" != "Accounting-Request") { attr_filter.pre-proxy } } post-proxy { # if you want detailed logging post_proxy_log attr_filter.post-proxy }}
In authenticate section I tried empty value, as was on wiki.geant.org and then I wrote eap option as shown in the above, but nothing was changed.The same error message: No Auth-Type foundWhat should be done to fix the problem?
More information about the Freeradius-Users
mailing list