Hello group,
I try to migrate a freeradius-Server from 1.1.7 to 2.0.3 using the new 2.0
syntax. Authentication uses the plain textfile /etc/raddb/users.
Although my test-user matches an entry, I get an error-message "auth: No
authenticate method (Auth-Type)..."
I have no idea how to change this Auth-Type.
The exact error you can see in an excerpt of radiusd -X:
#radiusd -X
FreeRADIUS Version 2.0.3, for host i686-pc-linux-gnu, built on Apr 3 2008
at 13:33:47
Copyright (C) 1999-2008 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License.
Starting - reading configuration files ...
[...]
files {
usersfile = "/usr/local/etc/raddb/users"
acctusersfile = "/usr/local/etc/raddb/acct_users"
preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users"
compat = "cistron"
}
[/usr/local/etc/raddb/users]:1 Cistron compatibility checks for entry odsl ...
Changing 'Password =' to 'Password =='
Changing 'Huntgroup-Name =' to 'Huntgroup-Name =='
Changing 'Simultaneous-Use =' to 'Simultaneous-Use +='
[...]
Ready to process requests.
[...]
Going to the next request
Ready to process requests.
User-Password = "XYZ8AB"
User-Name = "odsl"
Acct-Session-Id = "erx GigabitEthernet 6/0.44:44:0004269184"
Service-Type = Framed-User
Framed-Protocol = PPP
ERX-Pppoe-Description = "pppoe 00:a0:c5:53:c9:40"
Calling-Station-Id = "#erx705#E60#44"
NAS-Port-Type = Ethernet
NAS-Port = 1610612780
NAS-Port-Id = "GigabitEthernet 6/0.44:44"
NAS-IP-Address = XX.XX.XX.XX
NAS-Identifier = "erx705"
+- entering group authorize
++[preprocess] returns ok
WARNING: Found User-Password == "...".
WARNING: Are you sure you don't mean Cleartext-Password?
WARNING: See "man rlm_pap" for more information.
users: Matched entry odsl at line 1
++[files] returns ok
auth: No authenticate method (Auth-Type) configuration found for the
request: Rejecting the user
auth: Failed to validate the user.
Login incorrect: [odsl/XYZ8AB] (from client testerx port 1610612780 cli
#erx705#E60#44)
Delaying reject of request 0 for 1 seconds
Going to the next request
I have nothing special in my authorize and authenticate sections, because
there was no need for it in 1.1.7 (no pap-settings for example). In short
these entries:
/etc/raddb/radiusd.conf:
[...]
files {
usersfile = ${confdir}/users
acctusersfile = ${confdir}/acct_users
preproxy_usersfile = ${confdir}/preproxy_users
compat = cistron
}
[...]
$INCLUDE sites-enabled/
/etc/raddb/sites-available/default:
authorize {
preprocess
}
authenticate {
}
[...]
Do I need rlm_pap now in 2.0.3 for using "files"-authentication?
Any ideas, how I can make users/files authentication work again?
Greetings,
oz
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
