Hello,
I'm running freeradius-snapshot-20020516, which I have almost 100% working.
radtest between the freeradius server and the cistron 1.6.6 look exactly the
same, it handles higher loads, it does ldap lookups correctly, and doesn't seem
to be crashing (With a full 5400 and 9 5300s, it held up quite well).
The problem we discovered during testing is that the NAS (which are cisco 5300
and 5400 routers) are rejecting dial-up customers while freeradius is
authenticating them. The customers are getting password authentication errors
(windows 691). Our radius logs show the users authenticating correctly, the nas
rad st shows that it is receiving the packet back from radius, but the user still
gets rejected.
-----------------------------------
rad-test against cistron:
Service-Type = Framed-User
Framed-Protocol = PPP
Port-Limit = 1
Idle-Timeout = 1800
-----------------------------------
rad-test against freeradius:
Service-Type = Framed-User
Framed-Protocol = PPP
Port-Limit = 1
Idle-Timeout = 1800
-----------------------------------
Once again, I beseach the help of the list. In my mind, the problem is that the
packet sent back is not in a form that the cisco's understand. What should I be
looking at next? (I think when I'm done, I could probably write a document of my
experiences. ;)
John Hogenmiller, kb3dfz
Systems Administrator, Pennswoods.net
877.716.2002 x 529
---
Wouldn't the sentence "I want to put a hyphen between the words Fish
and And and And and Chips in my Fish-And-Chips sign" have been clearer if
quotation marks had been placed before Fish, and between Fish and and, and
and and And, and And and and, and and and And, and And and and, and and
and Chips, as well as after Chips?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html