Hello all,i am trying to configure an as5300 to authenticate telnet
connections to my freeradius
but i keep getting authentication failed,i wanted to check out if
everything is ok..
I already have the as5300 logging voip connections to the radius server
without any problem..
Sorry for the long mail
The config. goes as follows:
Jhon is a valid username in the cisco as5300
Users file:
mike Auth-Type := Local, User-Password == "lem1"
Reply-Message = "Hello, %u"
mike2 Auth-Type := Local, User-Password == "lem1"
Reply-Message = "Hello, %u"
Jhon Password = "tryout" --> The same password as in the cisco
device
User-Service-Type = Login-User,
Login-Host = 10.0.0.1,
Login-Service = Telnet
This is the debug output from the freeradius sever:
Sending Access-Reject of id 19 to 10.0.0.1:1645 --> I am using 1812 in
radiusd.conf
Waking up in 4 seconds...
rad_recv: Accounting-Request packet from host 10.0.0.1:1646, id=20,
length=109
NAS-IP-Address = 10.0.0.1
NAS-Port = 2
NAS-Port-Type = Virtual
User-Name = "Jhon"
Calling-Station-Id = "10.0.0.2"
Acct-Status-Type = Stop
Acct-Authentic = RADIUS
Service-Type = NAS-Prompt-User
Acct-Session-Id = "00000716"
Acct-Terminate-Cause = User-Error
Acct-Session-Time = 2
Acct-Delay-Time = 0
modcall: entering group preacct
modcall[preacct]: module "preprocess" returns noop
rlm_realm: Looking up realm NULL for User-Name = "Jhon"
rlm_realm: No such realm NULL
modcall[preacct]: module "suffix" returns noop
modcall[preacct]: module "files" returns noop
modcall: group preacct returns noop
modcall: entering group accounting
radius_xlat: '/usr/lcoal/raddb/var/log/radius/radacct/10.0.0.1/detail'
rlm_detail:
/home/raddb/var/log/radius/radacct/%{Client-IP-Address}/detail expands
to /home/raddb/var/log/radius/radacct/10.0.0.1/detail
modcall[accounting]: module "detail" returns ok
modcall[accounting]: module "unix" returns ok
radius_xlat: 'Jhon'
modcall[accounting]: module "radutmp" returns ok
modcall: group accounting returns ok
Sending Accounting-Response of id 20 to 10.0.0.1:1646---> The problem
seems to be here..
Finished request 29
Going to the next request
I only have the 1812,1813 ports configured in the as5300,i tried to
configure 1845,1846 but
the results are the same..any ideas why the Response is being sent
trough the 1646 port
Sending Accounting-Response of id 20 to 10.0.0.1:1646--->
Thank you very much,againsorry for the long mail
Hernan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
