The Auth-Type must match what is in the dictionary (the default dictionaries have "Kerberos" rather than "KRB5")
On Wed, 2004-09-22 at 15:21, Kenneth Mix wrote: > After upgrading to Freeradius 1.0.1, I am getting an error when trying > to authenticate users via Kerberos 5. > > Below is debug output from an authentication attempt: > > Ready to process requests. > rad_recv: Access-Request packet from host XXX.XXX.XXX.XXX:21743, id=239, > length=78 > User-Name = "seliason" > User-Password = "mitchell" > NAS-Port = 226 > NAS-Port-Type = Virtual > Calling-Station-Id = "XX.XX.XX.XX" > NAS-IP-Address = XXX.XXX.XXX.XXX > Processing the authorize section of radiusd.conf > modcall: entering group authorize for request 0 > modcall[authorize]: module "preprocess" returns ok for request 0 > rlm_realm: No '@' in User-Name = "seliason", looking up realm NULL > rlm_realm: No such realm "NULL" > modcall[authorize]: module "suffix" returns noop for request 0 > users: Matched seliason at 135 > modcall[authorize]: module "files" returns ok for request 0 > modcall: group authorize returns ok for request 0 > rad_check_password: Found Auth-Type KRB5 > auth: type "KRB5" > Processing the authenticate section of radiusd.conf > modcall: entering group Auth-Type for request 0 > rlm_krb5: Attribute "User-Password" is required for authentication. > Cannot use "User-Name". > modcall[authenticate]: module "krb5" returns invalid for request 0 > modcall: group Auth-Type returns invalid for request 0 > auth: Failed to validate the user. > Login incorrect: [seliason] (from client CIDR port 226 cli xx.XX.XX.X) > Delaying request 0 for 1 seconds > Finished request 0 > Going to the next request > > > Does anybody have any ideas on how I might resolve this issue? > > Thanks, > > Ken Mix > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
