I get something similar from some of our equipment that is connected to out of
band routers (Ciscos). I've been told that it is a serial port
misconfiguration on the OOB router. I have not determined if this is the
cause as the config looks perfect to me.
Example:
Auth: Login incorrect: [uA=IQE5YaIi]
I also get parts of the login prompt and banner for the equipment that does
AAA (Authentication Authorization Accounting on Cisco stuff) to radius:
Auth: Login incorrect: [Username: ]
Auth: Login incorrect: [port1-vxr = Console connected to vxr-pir on port 1]
I haven't been able to figure it out. I'm constantly getting hit with those
messages, which I think upsets radiusd and it just mysteriously dies from
time to time....
On Monday 02 June 2003 13:49, [EMAIL PROTECTED] wrote:
> I have seen this before when the client doing the authentication is using a
> different shared secret than the RADIUS server is expecting. Could this be
> the case?
>
> - Mark
>
> On Mon, 2 Jun 2003 09:22:30 -0700 (PDT), you wrote:
>
>
> Hello -
>
> We are running FreeRadius 0.8.1
> Almost everytime I monitor the Radius logs I notice
> entries like this and I would like to know if anybody
> knows what they may be about. They seem to be garbled
> entries or some kind of brute force attempt. The
> client
> that they seem to come from most of the time, has
> no problems authenticating.
>
> Auth: Login
> incorrect:[I'/=a2[n|nc["RP/\0261GKRl{\003VmnBa]
> (from client dnv-dts1 port 11)
>
> Please advise on what can be done about this.
>
> Thanks
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
--
Brendon Colby
Systems Administrator
Midcontinent Communications
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
