Alan - Thanks for the quick reply. I am assuming that when you say " Don't set "Auth-Type" The server will figure it out" you mean on the cisco as I don't know where that would be set in the radiusd.conf; however, I have followed the book to the "t" and it has local in it. So you say just remove the local from the ppp authentication?
Tim -----Original Message----- From: Alan DeKok [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 29, 2004 5:02 PM To: [EMAIL PROTECTED] Subject: Re: freeRADIUS/Cisco 5300 configuration? issue? "Tim Rich, Jr." <[EMAIL PROTECTED]> wrote: > Here is the clip from the output as Alan requested. (and thanks, Alan, I > should have mentioned that I looked in the FAQ, the book, and the archives > before posting the note - thanks for the reminder. I have been on the list > for 17 months or so and realize how much you add to the list - Thanks for > all you do.) Thanks. > rad_recv: Access-Request packet from host 192.168.10.29:1645, id=8, > length=142 > Framed-Protocol = PPP > User-Name = "timrichjr" > MS-CHAP-Challenge = 0xb39bb991e902d032 ... > auth: type Local > auth: No User-Password or CHAP-Password attribute in the request > auth: Failed to validate the user. > Login incorrect: [timrichjr/<no User-Password attribute>] (from client > USSCRAS01 port 9 cli async) Don't set "Auth-Type". The server will figure it out. In this case, setting "Auth-Type := Local" ensures that MS-CHAP, EAP, etc. won't work. Don't do it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
