Thanks,

That fixed the authentication problem.

Now another question.  In my proxy.conf file I have a realm setup and
defined the "detail" file for this realm to be:

detailfile += /usr/adm/radacct/verdenet/detail

however, the logging for this realm are going to the standard detail
file.

I want users in the verdenet realm to get logged to a different detail
file than the standard.  What Have I missed or forgotten?

Thanks,
Murrah Boswell

Marcelo Ferreira wrote:
> 
> check the secrets at proxy.conf
> both servers have to have the same secret at proxy.conf and clients.conf
> 
> []s
> 
> Marcelo
> 
> Wild Apache Support writes:
> 
> > Hello again,
> >
> > I really do appreciate the help that I am getting from the list.
> > However I am still stumped, but I think that I am very close!!
> >
> > Here is a new snippet from my debugging session:
> >
> > > Waking up in 6 seconds...
> > > rad_recv: Access-Reject packet from host 209.145.209.2:1645, id=1,
> > > length=25
> > > Received Access-Reject packet from 209.145.209.2 with invalid signature!
> > > Server rejecting request 7.
> > > Sending Access-Reject of id 245 to 10.10.1.22:2048
> > > Finished request 7
> >
> > It looks like I got through to 209.145.209.2, but got rejected because
> > os an "invalid signature."
> >
> > I looked in radius.c that came with the freeradius distribution and
> > found that this error message will occur at:
> >
> >                 case PW_ACCOUNTING_RESPONSE:
> >                         if (calc_replydigest(packet, original, secret) >
> > 1) {
> >                                 char buffer[32];
> >                                 librad_log("Received %s packet "
> >                                            "from %s with invalid
> > signature!",
> >                                            packet_codes[packet->code],
> >                                            ip_ntoa(buffer,
> > packet->src_ipaddr));
> >                                 return 1;
> >                         }
> >
> > Does anyone know what is making calc_replydigest come back with value >
> > 1?
> >
> > Could it be how the password is being sent to 209.145.209.2:1645?
> >
> > Thanks,
> > Murrah Boswell
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 
> ------------------------------------
> Marcelo Ferreira
> Canbras Acesso
> Canbras TVA Cabo Ltda
> 55-11-4993-8717
> ------------------------------------
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- 
"If something's worth doing, it's worth doing badly,
        until you can learn to do it well."

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to