Hello all, Does anyone have a tip for debugging an intermittent authorization/authentication problem?
I am running FreeRadius 0.5 on Linux using: ./configure --prefix=/usr/local --sysconfdir=/etc/radius --mandir=/usr/share/man --localstatedir=/var --with-logdir=/var/log --with-radacctdir=/var/log --with-raddbdir=/etc/radius --with-snmp=no --without-pam --disable-shadow --enable-ltdl-install=no as the config line and a pretty stripped down radius.conf/users file Matching (only) User Entry: DEFAULT Auth-Type := System Ascend-Client-Primary-DNS = "x.x.x.x", Ascend-Client-Secondary-DNS = "x.x.x.x", Idle-Timeout = 1800, Session-Timeout = 28800 when running radiusd as: /usr/local/sbin/radiusd -s -f -y -z -A -X I don't ever see the symptom but when it runs as /usr/local/sbin/radiusd -s -f -y -z -A without debugging I see randomly that a user gets denied access with a CORRECT username/password then a subsequent try with the same user/pass is successful. When they are denied access we see in the logs: Auth: Login incorrect: [user/pass] and when they are denied access with an incorrect username/password we see: Auth: rlm_unix: [user/badpass]: invalid password The latter is obvious...but the former means to me that it is happening in the autorization stage and not authentication (only authentication method is unix). If anyone can point me in a direction to get some better debugging done it would be most appreciated.... -Dave - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
