On Fri, Oct 26, 2001 at 05:39:18PM -0400, [EMAIL PROTECTED] wrote: >Bill Campbell <[EMAIL PROTECTED]> wrote: >> I'm having a problem getting an Annex 8000 running software version R16.0 >> to authenticate against freeradius 0.3. This Annex is talking to the >> accounting side fine so the secrets have to agree, but when I try to >> authenticate, I get: >> Received packet from xxx.xxx.xxx.xxx with invalid Message-Authenticator! >> >> This Annex is working against Merit basic radius 3.6. > > Probably because Merit isn't checking the Message-Authenticator. > > What's happening is that the Annex is probably sending an Ascend >attribute, which is the same as Message-Authenticator. See 'doc/ascend'.
Looking at the source, this appears to be occurring in src/lib/radius.c about line 778 in a switch matching PW_MESSAGE_AUTHENTICATOR. If I read this right, it's saying the the calculated md5 digest isn't the same as the message digest. I would think that the secret's the same since the accounting side's working properly so either the data's corrupt or the md5 digest is calculated differently. I'm digging through the Annex docs to see if there's anything there that might be helpful. >> BTW: I'm working on checkrad, and have added what I think is proper port >> checking. The one in the distribution only checks for an occurrence of the >> login name, but doesn't check the port. I won't know if I have it right >> until I get the authentication side working properly. > > Sounds good. If you have a patch, post it here. This time I'll check it better than my last patch :-). Bill -- INTERNET: [EMAIL PROTECTED] Bill Campbell; Celestial Software LLC UUCP: camco!bill PO Box 820; 6641 E. Mercer Way FAX: (206) 232-9186 Mercer Island, WA 98040-0820; (206) 236-1676 URL: http://www.celestial.com/ Government spending? I don't know what it's all about. I don't know any more about this thing than an economist does, and, God knows, he doesn't know much. -- Will Rogers - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
