I am adding a new MSC to our list of clients and trying to verify the config 
with -X and ntradping.
I keep getting rejected. 

I have the following in clients.conf:
 client 192.168.10.100 (MY LAPTOP IP FOR NOW) {
        secret = [EMAIL PROTECTED]
        shortname = cn3200_hiegalleria
        nastype = other

In NTRADPING, I am using:
 username: bufhiegall_cn3200
 secret: [EMAIL PROTECTED]
 password: password1 (same as in radius.radcheck)

I note the "could not find clear text password" at bottom of reply, but am not 
sure why this is so;
The password is present in radcheck.

The -X out put is as follows:

rad_recv: Access-Request packet from host 192.168.10.100:49424, id=11, length=58
        User-Name = "bufhiegall_cn3200"
        CHAP-Password = 0x8f98ab538676182e04964979e34fbc0580
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok for request 0
  rlm_chap: Setting 'Auth-Type := CHAP'
  modcall[authorize]: module "chap" returns ok for request 0
  modcall[authorize]: module "mschap" returns noop for request 0
    rlm_realm: No '@' in User-Name = "bufhiegall_cn3200", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 0
  rlm_eap: No EAP-Message, not doing EAP
  modcall[authorize]: module "eap" returns noop for request 0
radius_xlat:  'bufhiegall_cn3200'
rlm_sql (sql): sql_set_user escaped user --> 'bufhiegall_cn3200'
radius_xlat:  'SELECT id, UserName, Attribute, Value, op           FROM 
radcheck           WHERE Username = 'bufhiegall_cn3200'           ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 4
radius_xlat:  'SELECT 
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
  FROM radgroupcheck,usergroup WHERE usergroup.Username = 'bufhiegall_cn3200' 
AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
radius_xlat:  'SELECT id, UserName, Attribute, Value, op           FROM 
radreply           WHERE Username = 'bufhiegall_cn3200'           ORDER BY id'
radius_xlat:  'SELECT 
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
  FROM radgroupreply,usergroup WHERE usergroup.Username = 'bufhiegall_cn3200' 
AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql (sql): Released sql socket id: 4
rlm_sql (sql): No matching entry in the database for request from user 
[bufhiegall_cn3200]
  modcall[authorize]: module "sql" returns notfound for request 0
rlm_sqlcounter: Entering module authorize code
rlm_sqlcounter: Could not find Check item value pair
  modcall[authorize]: module "noresetcounter" returns noop for request 0
rlm_sqlcounter: Entering module authorize code
rlm_sqlcounter: Could not find Check item value pair
  modcall[authorize]: module "dailycounter" returns noop for request 0
rlm_sqlcounter: Entering module authorize code
rlm_sqlcounter: Could not find Check item value pair
  modcall[authorize]: module "monthlycounter" returns noop for request 0
rlm_sqlcounter: Entering module authorize code
rlm_sqlcounter: Could not find Check item value pair
  modcall[authorize]: module "daypasscounter" returns noop for request 0
modcall: leaving group authorize (returns ok) for request 0
  rad_check_password:  Found Auth-Type CHAP
auth: type "CHAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group CHAP for request 0
  rlm_chap: login attempt by "bufhiegall_cn3200" with CHAP password
  rlm_chap: Could not find clear text password for user bufhiegall_cn3200
  modcall[authenticate]: module "chap" returns invalid for request 0
modcall: leaving group CHAP (returns invalid) for request 0
auth: Failed to validate the user.
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 11 to 1

I have run all the queries manually on the server, and they all return results 
as 
expected (except the query to radgroupreply, as there is nothing configured 
there).


Regards,

Andrew Long


****** CONFIDENTIALITY NOTICE ******
NOTICE: This e-mail message and all attachments transmitted with it may contain 
legally 
privileged and confidential information intended solely for the use of the 
addressee. If the 
reader of this message is not the intended recipient, you are hereby notified 
that any reading, 
dissemination, distribution, copying, or other use of this message or its 
attachments is strictly 
prohibited. If you have received this message in error, please notify the 
sender immediately 
and delete this message from your system. Thank you.






- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to