Hi Marius, guys
I am stucked. I made some changes in the config file and added Auth-Type to the
radgroupcheck table (which was previously empty) and now I cannot authenticate at all.
Seems like the problem is somewhere else.
My radiusd.conf:
modules {
mschap {
authtype = MD5
use_mppe = yes
require_encryption = yes
require_strong = yes
encryption_scheme = md5
}
authorize {
preprocess
suffix
sql
}
authenticate {
authtype MD5 {
mschap
}
}
mysql> select * from radgroupreply;
+----+-----------+-------------------+----+-----------------+------+
| id | GroupName | Attribute | op | Value | prio |
+----+-----------+-------------------+----+-----------------+------+
| 1 | user | Framed-IP-Netmask | := | 255.255.255.0 | 0 |
| 2 | user | Framed-IP-Address | := | 255.255.255.254 | 0 |
| 3 | user | Service-Type | := | Framed-User | 0 |
| 4 | user | Auth-Type | := | Local | 0 |
+----+-----------+-------------------+----+-----------------+------+
mysql> select * from usergroup;
+----+-----------------+-----------+
| id | UserName | GroupName |
+----+-----------------+-----------+
| 1 | [EMAIL PROTECTED] | user |
+----+-----------------+-----------+
mysql> select * from radgroupcheck;
+----+-----------+-----------+----+-------+
| id | GroupName | Attribute | op | Value |
+----+-----------+-----------+----+-------+
| 1 | user | Auth-Type | := | MD5 |
+----+-----------+-----------+----+-------+
mysql> select * from radcheck;
+----+-----------------+---------------+----+----------------+
| id | UserName | Attribute | op | Value |
+----+-----------------+---------------+----+----------------+
| 1 | [EMAIL PROTECTED] | User-Password | := | $1$bc8bf6f2fd343cab9d387d5dcc777be3
|
+----+-----------------+---------------+----+----------------+
Then running:
radtest [EMAIL PROTECTED] my_pass 127.0.0.1 1812 radius_pass 127.0.0.1
i get following error:
rad_recv: Access-Request packet from host 127.0.0.1:57048, id=44, length=73
User-Name = "[EMAIL PROTECTED]"
User-Password = "my_pass"
NAS-IP-Address = 255.255.255.255
NAS-Port = 1812
Framed-Protocol = PPP
modcall: entering group authorize
modcall[authorize]: module "preprocess" returns ok
modcall[authorize]: module "mschap" returns notfound
rlm_realm: Looking up realm yazzy.org for User-Name = "[EMAIL PROTECTED]"
rlm_realm: Found realm DEFAULT
rlm_realm: Adding Stripped-User-Name = "yazzy"
rlm_realm: Proxying request from user yazzy to realm DEFAULT
rlm_realm: Adding Realm = "DEFAULT"
rlm_realm: Authentication realm is LOCAL.
***SNIP***
rlm_sql (sql): Released sql socket id: 1
modcall[authorize]: module "sql" returns ok
modcall: group authorize returns ok
rad_check_password: Found Auth-Type MD5
auth: type "MD5"
modcall: entering group authtype
rlm_mschap: No LM/NT password configured. Check authorization.
modcall[authenticate]: module "mschap" returns invalid
modcall: group authtype returns invalid
auth: Failed to validate the user.
Delaying request 4 for 1 seconds
Finished request 4
Any idea what can be wrong and how to fix it?
On Tue, 16 Sep 2003 20:27:03 -0500
Marius Strom <[EMAIL PROTECTED]> wrote:
> Martin,
> Try adding $1$ to the beginning of an MD5 password.
>
> On Wed, 17 Sep 2003, Martin Jessa wrote:
> > Hi guys.
> >
> > I have set up freeradius with authentication agains MySQL.
> > I have poptop talking to the radius server and in that way authenticating my users.
> > The problem is I cannot make the radius server read md5 encrypted passwords, only
> > plain text.
> > Any idea what to do to make it read md5 passwords?
> > Example of the password table:
> >
> > table 'radcheck' :
> >
> > Cleartext (works):
> > INSERT INTO radcheck VALUES (2,'[EMAIL
> > PROTECTED]','User-Password',':=','12233445');
> >
> > MD5 (no love):
> > INSERT INTO radcheck VALUES (3,'[EMAIL
> > PROTECTED]','User-Password',':=','bc8bf6f2fd343cab9d387d5dcc777be3');
> >
> >
> > Regards,
> > Martin Jessa
> > _______________________________________________
> > [EMAIL PROTECTED] mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> > To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> >
>
> --
> /------------------------------------------------->
> Marius Strom | Always carry a short length of fibre-optic cable.
> Professional Geek | If you get lost, then you can drop it on the
> System/Network Admin | ground, wait 10 minutes, and ask the backhoe
> http://www.marius.org/ | operator how to get back to civilization.
> \-------------| Alan Frame |---------------------->
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
