Hello, now in debug mode:
HASH: Stored 1905 entries from /etc/passwd.radius
HASH: Stored 107 entries from /etc/group.radius
Module: Instantiated unix (unix)
Module: Loaded eap
eap: default_eap_type = "chap"
eap: timer_expire = 60
rlm_eap: Loaded and initialized the type md5
Module: Instantiated eap (eap)
Module: Loaded preprocess
preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups"
preprocess: hints = "/usr/local/etc/raddb/hints"
preprocess: with_ascend_hack = no
preprocess: ascend_channels_per_line = 23
preprocess: with_ntdomain_hack = no
preprocess: with_specialix_jetstream_hack = no
preprocess: with_cisco_vsa_hack = no
Module: Instantiated preprocess (preprocess)
Module: Loaded detail
detail: detailfile =
"/usr/local/etc/raddb/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d"
detail: detailperm = 384
detail: dirperm = 493
detail: locking = no
Module: Instantiated detail (auth_log)
Module: Loaded realm
realm: format = "suffix"
realm: delimiter = "@"
Module: Instantiated realm (suffix)
Module: Loaded files
files: usersfile = "/usr/local/etc/raddb/users"
files: acctusersfile = "/usr/local/etc/raddb/acct_users"
files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users"
files: compat = "no"
Module: Instantiated files (files)
Module: Loaded passwd
passwd: filename = "/etc/shadow.radius"
passwd: format = "*User-Name:Password:::::::"
passwd: authtype = "System"
passwd: delimiter = ":"
passwd: ignorenislike = no
passwd: allowmultiplekeys = no
passwd: hashsize = 3000
rlm_passwd: nfields: 9 keyfield 0(User-Name) listable: no
Module: Instantiated passwd (etc_shadow)
Module: Loaded Acct-Unique-Session-Id
acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address,
Client-IP-Address, NAS-Port-Id"
Module: Instantiated acct_unique (acct_unique)
detail: detailfile =
"/usr/local/etc/raddb/radacct/%{Client-IP-Address}/detail-%Y%m%d"
detail: detailperm = 384
detail: dirperm = 493
detail: locking = no
Module: Instantiated detail (detail)
Module: Loaded radutmp
radutmp: filename = "/usr/local/etc/raddb/radutmp"
radutmp: username = "%{User-Name}"
radutmp: case_sensitive = yes
radutmp: check_with_nas = yes
radutmp: perm = 384
radutmp: callerid = yes
Module: Instantiated radutmp (radutmp)
Listening on IP address 150.214.156.2, ports 1812/udp and 1813/udp, with proxy on
1814/udp.
Ready to process requests.
I can't read /etc/shadow. Password are encrypt.
The error is (in debug mode):
rad_recv: Access-Request packet from host 10.0.120.11:2049, id=133, length=104
User-Name = "jose"
NAS-Port = 101
NAS-Port-Type = Ethernet
NAS-IP-Address = 10.0.120.11
Service-Type = Framed-User
Framed-MTU = 1024
Calling-Station-Id = "00-4F-4E-06-84-2D"
EAP-Message = 0x02010009016a6f7365
Message-Authenticator = 0x07be8f6cb6064cc05029d8dd9e900693
modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request 0
radius_xlat: '/usr/local/etc/raddb/radacct/10.0.120.11/auth-detail-20031022'
rlm_detail: /usr/local/etc/raddb/radacct/%{Client-IP-Address}/auth-detail-%Y%m%2
modcall[authorize]: module "auth_log" returns ok for request 0
modcall[authorize]: module "chap" returns noop for request 0
rlm_eap: EAP packet type notification id 1 length 9
rlm_eap: EAP Start not found
modcall[authorize]: module "eap" returns updated for request 0
rlm_realm: No '@' in User-Name = "jose", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 0
users: Matched DEFAULT at 152
users: Matched DEFAULT at 174
modcall[authorize]: module "files" returns ok for request 0
rlm_passwd: Added Password: 'YLp6TAFQQQ6Ek' to config_items
rlm_passwd: Adding Auth-Type: System
modcall[authorize]: module "etc_shadow" returns ok for request 0
modcall: group authorize returns updated for request 0
rad_check_password: Found Auth-Type EAP
rad_check_password: Found Auth-Type System
Warning: Found 2 auth-types on request for user 'jose'
auth: type "System"
modcall: entering group authenticate for request 0
rlm_unix: Attribute "User-Password" is required for authentication.
modcall[authenticate]: module "unix" returns invalid for request 0
modcall: group authenticate returns invalid for request 0
auth: Failed to validate the user.
Login incorrect: [jose/<no User-Password attribute>] (from client prueba port 1)
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 133 to 10.0.120.11:2049
Waking up in 4 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 133 with timestamp 3f9639b9
Nothing to do. Sleeping until we see a request.
RADIUSD.CONF:
..
user = root
group = shadow
..
modules {
..
chap {
authtype = CHAP
}
unix {
cache = yes
cache_reload = 600
passwd = /etc/passwd.radius
shadow = /etc/shadow.radius
group = /etc/group.radius
radwtmp = ${logdir}/radwtmp
}
eap {
#default_eap_type = md5
default_eap_type = chap
timer_expire = 60
md5 {
}
}
..
passwd etc_shadow {
filename = /etc/shadow.radius
format = "*User-Name:Password:::::::"
authtype = System
hashsize = 3000
ignorenislike = no
allowmultiplekeys = no
delimiter = ":"
}
...
authorize {
preprocess
auth_log
chap
eap
suffix
files
etc_shadow
}
..
authenticate {
Auth-Type CHAP {
chap
}
unix
eap
}
..
accounting {
acct_unique
detail
unix # wtmp file
radutmp
}
CLIENTS.CONF:
..
client 10.0.120.11 {
secret = testing123
shortname = prueba
}
..
USERS:
..
DEFAULT Auth-Type = System
Fall-Through = 1
..
DEFAULT Service-Type == Framed-User
Framed-IP-Address = 255.255.255.254,
Framed-MTU = 576,
Service-Type = Framed-User,
Fall-Through = Yes
DEFAULT Framed-Protocol == PPP
Framed-Protocol = PPP,
Framed-Compression = Van-Jacobson-TCP-IP
DEFAULT Hint == "CSLIP"
Framed-Protocol = SLIP,
Framed-Compression = Van-Jacobson-TCP-IP
DEFAULT Hint == "SLIP"
Framed-Protocol = SLIP
Alan DeKok ha escrito:
> =?iso-8859-1?Q?Jos=E9?= Berenguer <[EMAIL PROTECTED]> wrote:
> > We are trying to authenticate users with FreeRadius 0.9.2 against
> > the /etc/shadow file in a Solaris system, but we always get an error
> > like this:
> >
> > Info: Ready to process requests.
> > Info: rlm_eap_md5: Issuing Challenge
> > Auth: Login OK: [jose/<no User-Password attribute>]
> > Info: rlm_eap_md5: No password configured for this user
> > Auth: Login incorrect: [jose/<no User-Password attribute>]
>
> System authentication will NEVER work for EAP-MD5. It's CHAP. See
> the FAQ.
>
> Alan DeKok.
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
smime.p7s
Description: Firma criptogr�fica S/MIME
