Re: response-authenticator decrypt fail
Finally I found the problem. Looks like the Cisco router messed up the secrets of different Radius Servers. I have two Radius Servers configured on the same router for different purposes. When both of them are enabled, neither of them is working. The same error message comes out. But if only one is enabled, there is no problem. - Original Message - From: Bo [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 12, 2003 4:49 PM Subject: Re: response-authenticator decrypt fail Did anyone experience the same problem? Your help is really appreciated. Thanks, - Original Message - From: Bo [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, December 11, 2003 2:08 PM Subject: Re: response-authenticator decrypt fail I have double checked the shared secret on both sides. I even changed it from 15 digits to 10 digits. Still I got the same Error. Any idea? Thanks. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, December 11, 2003 1:48 PM Subject: Re: response-authenticator decrypt fail Bo [EMAIL PROTECTED] wrote: I installed the FreeRadius 0.9.3 on Redhat 8.0 and did some tests with the Cisco AS5400 for authenticating the dial-up users. From the server side, everything was OK and it sent the Access-Accept back. But unfortunately I got the following error message on AS5400. Your shared secret is wrong. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: response-authenticator decrypt fail
Did anyone experience the same problem? Your help is really appreciated. Thanks, - Original Message - From: Bo [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, December 11, 2003 2:08 PM Subject: Re: response-authenticator decrypt fail I have double checked the shared secret on both sides. I even changed it from 15 digits to 10 digits. Still I got the same Error. Any idea? Thanks. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, December 11, 2003 1:48 PM Subject: Re: response-authenticator decrypt fail Bo [EMAIL PROTECTED] wrote: I installed the FreeRadius 0.9.3 on Redhat 8.0 and did some tests with the Cisco AS5400 for authenticating the dial-up users. From the server side, everything was OK and it sent the Access-Accept back. But unfortunately I got the following error message on AS5400. Your shared secret is wrong. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: response-authenticator decrypt fail
Bo [EMAIL PROTECTED] wrote: I installed the FreeRadius 0.9.3 on Redhat 8.0 and did some tests with the Cisco AS5400 for authenticating the dial-up users. From the server side, everything was OK and it sent the Access-Accept back. But unfortunately I got the following error message on AS5400. Your shared secret is wrong. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: response-authenticator decrypt fail
I have double checked the shared secret on both sides. I even changed it from 15 digits to 10 digits. Still I got the same Error. Any idea? Thanks. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, December 11, 2003 1:48 PM Subject: Re: response-authenticator decrypt fail Bo [EMAIL PROTECTED] wrote: I installed the FreeRadius 0.9.3 on Redhat 8.0 and did some tests with the Cisco AS5400 for authenticating the dial-up users. From the server side, everything was OK and it sent the Access-Accept back. But unfortunately I got the following error message on AS5400. Your shared secret is wrong. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
response-authenticator decrypt fail
Hi All, I installed the FreeRadius 0.9.3 on Redhat 8.0 and did some tests with the Cisco AS5400 for authenticating the dial-up users. From the server side, everything was OK and it sent the Access-Accept back. But unfortunately I got the following error message on AS5400. Dec 11 00:13:19.709: RADIUS(007E): Send Access-Request to 10.0.3.10:1812 id 21645/69, len 121Dec 11 00:13:19.713: RADIUS: authenticator 2A 32 44 04 78 53 79 6F - 5E AB EA 7F 6E 8F 94 42Dec 11 00:13:19.713: RADIUS: Framed-Protocol [7] 6 PPP [1]Dec 11 00:13:19.713: RADIUS: User-Name [1] 10 "abc123"Dec 11 00:13:19.713: RADIUS: CHAP-Password [3] 19 *Dec 11 00:13:19.713: RADIUS: Calling-Station-Id [31] 12 "3012543379"Dec 11 00:13:19.713: RADIUS: Called-Station-Id [30] 12 "8773334563"Dec 11 00:13:19.713: RADIUS: Vendor, Cisco [26] 18Dec 11 00:13:19.713: RADIUS: cisco-nas-port [2] 12 "Async1/101"Dec 11 00:13:19.713: RADIUS: NAS-Port [5] 6 317Dec 11 00:13:19.713: RADIUS: NAS-Port-Type [61] 6 Async [0]Dec 11 00:13:19.713: RADIUS: Service-Type [6] 6 Framed [2]Dec 11 00:13:19.713: RADIUS: NAS-IP-Address [4] 6 10.0.1.15Dec 11 00:13:19.717: RADIUS: Received from id 21645/69 10.0.3.10:1812, Access-Accept, len 32Dec 11 00:13:19.717: RADIUS: authenticator 8A 8E 0D 08 6E 37 AF B8 - FD D1 40 53 31 A8 82 25Dec 11 00:13:19.717: RADIUS: Service-Type [6] 6 Framed [2]Dec 11 00:13:19.717: RADIUS: Framed-Protocol [7] 6 PPP [1]Dec 11 00:13:19.717: RADIUS: response-authenticator decrypt fail, pak len 32Dec 11 00:13:19.717: RADIUS: packet dump: 024500208A8E0D086E37AFB8FDD1405331A882250606000207060001Dec 11 00:13:19.717: RADIUS: expected digest: FE0B37771CEDD5666136DC06E859F905Dec 11 00:13:19.717: RADIUS: response authen: 8A8E0D086E37AFB8FDD1405331A88225Dec 11 00:13:19.717: RADIUS: request authen: 2A3244047853796F5EABEA7F6E8F9442Dec 11 00:13:19.717: RADIUS: Response (69) failed decrypt Anyone has encountered the problem before? Your head-up is really appreciated. Thanks, BM
