hi > /etc/raddb/users file below. > > #Access point > 00022d-1cf1bb Auth-Type = Local, Password = "password" > Service-Type = Framed-User, > Framed-Protocol = PPP, > Framed-Routing = Broadcast-Listen, > Framed-MTU = 1500, > Framed-Compression = Van-Jacobson-TCP-IP
you don't need the AP in the users file, what for? > #Tom's Card > 00022d-5633af Auth-Type = Local, Password = "password" > Service-Type = Framed-User, > Framed-Protocol = PPP, > Framed-Routing = Broadcast-Listen, > Framed-MTU = 1500, > Framed-Compression = Van-Jacobson-TCP-IP > > output from: radiusd -sfxxyz -l stdout > > rad_recv: Access-Request packet from host 192.168.0.5:192, id=1, length=59 > NAS-IP-Address = 192.168.0.5 > User-Name = "00022d-5633af" > User-Password = "password" > modcall: entering group authorize > modcall[authorize]: module "preprocess" returns ok > rlm_chap: Could not find proper Chap-Password attribute in request > modcall[authorize]: module "chap" returns noop > modcall[authorize]: module "mschap" returns notfound > rlm_realm: No '@' in User-Name = "00022d-5633af", looking up realm NULL > rlm_realm: No such realm NULL > modcall[authorize]: module "suffix" returns noop > users: Matched DEFAULT at 184 evidently, radius does not recognize the specific user you defined in the users file... it rather takes the default entry in the same file (see at the bottom of the file). the passwords for default and the given users do not match, so the access is rejected. at least it is what i understand from what you provided. ciao artur > modcall[authorize]: module "files" returns ok > modcall: group authorize returns ok > rad_check_password: Found Auth-Type System > auth: type "System" > modcall: entering group authenticate > modcall[authenticate]: module "unix" returns notfound > modcall: group authenticate returns notfound > auth: Failed to validate the user. > Delaying request 0 for 1 seconds > Finished request 0 > Going to the next request > --- Walking the entire request list --- > Waking up in 1 seconds... > rad_recv: Access-Request packet from host 192.168.0.5:192, id=1, length=59 > Sending Access-Reject of id 1 to 192.168.0.5:192 > rl_next: returning NULL -- Artur Hecker artur[at]hecker.info - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
