Bill Campbell <[EMAIL PROTECTED]> wrote:
> I'm having a problem getting an Annex 8000 running software version R16.0
> to authenticate against freeradius 0.3.  This Annex is talking to the
> accounting side fine so the secrets have to agree, but when I try to
> authenticate, I get:
>       Received packet from xxx.xxx.xxx.xxx with invalid Message-Authenticator!
> 
> This Annex is working against Merit basic radius 3.6.

  Probably because Merit isn't checking the Message-Authenticator.

  What's happening is that the Annex is probably sending an Ascend
attribute, which is the same as Message-Authenticator.  See 'doc/ascend'.

> BTW:  I'm working on checkrad, and have added what I think is proper port
> checking.  The one in the distribution only checks for an occurrence of the
> login name, but doesn't check the port.  I won't know if I have it right
> until I get the authentication side working properly.

  Sounds good.  If you have a patch, post it here.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to