Hello Matthew - I don't think you have done anything wrong - but the debug shows the client is sending an MSCHAP-V2 request, which as you can see is not supported by the AuthBy SQLHOTP clause.
regards Hugh On 13 Sep 2010, at 15:57, Matthew Reeves-Hairs wrote: > Hi, > I'm getting the following error relating to REJECT: Authentication type not > supported. > Can anyone point me in the right direction as to what I have done wrong? > > Thanks > > Matthew > > Mon Sep 13 21:53:29 2010: DEBUG: Packet dump: > *** Received from 192.168.100.1 port 51172 .... > > Packet length = 151 > 01 6c 00 97 3e 13 28 89 b3 8c c6 d7 2d 89 cc 86 > 10 23 9c a1 06 06 00 00 00 02 07 06 00 00 00 01 > 01 09 6d 72 65 65 76 65 73 1a 18 00 00 01 37 0b > 12 73 8a 8f 3f b6 f3 31 18 b9 6d 7e 4d 50 ff fa > 4a 1a 3a 00 00 01 37 19 34 44 00 0d 3a 4e 7c 0b > 1e bd 2f 6c 71 51 0a 3d b3 5f 5a 00 00 00 00 00 > 00 00 00 37 a4 37 43 1a c1 8d eb 59 4e eb 47 7f > 9a 09 1c bf 5f 2e 90 1e b4 e5 9f 1f 10 32 31 37 > 2e 33 36 2e 32 35 34 2e 32 30 39 20 06 6c 32 74 > 70 05 06 00 00 00 00 > Code: Access-Request > Identifier: 108 > Authentic: ><19>(<137><179><140><198><215>-<137><204><134><16>#<156><161> > Attributes: > Service-Type = Framed-User > Framed-Protocol = PPP > User-Name = "mreeves" > MS-CHAP-Challenge = s<138><143>?<182><243>1<24><185>m~MP<255><250>J > MS-CHAP2-Response = > D<0><13>:N|<11><30><189>/lqQ<10>=<179>_Z<0><0><0><0><0><0><0><0>7<164>7C<26><193><141><235>YN<235>G<127><154><9><28><191>_.<144><30><180><229><159> > Calling-Station-Id = "217.36.254.209" > NAS-Identifier = "l2tp" > NAS-Port = 0 > > Mon Sep 13 21:53:29 2010: DEBUG: Handling request with Handler > 'Realm=DEFAULT', Identifier '' > Mon Sep 13 21:53:29 2010: DEBUG: Deleting session for mreeves, > 192.168.100.1, 0 > Mon Sep 13 21:53:29 2010: DEBUG: Handling with Radius::AuthSQLHOTP: > Mon Sep 13 21:53:29 2010: DEBUG: Radius::AuthSQLHOTP looks for match with > mreeves [mreeves] > Mon Sep 13 21:53:29 2010: DEBUG: Radius::AuthSQLHOTP REJECT: Authentication > type not supported. Only RADIUS PAP, EAP-OPT and EAP-GTC is supported by > HOTP: mreeves [mreeves] > Mon Sep 13 21:53:29 2010: DEBUG: AuthBy SQLHOTP result: REJECT, > Authentication type not supported. Only RADIUS PAP, EAP-OPT and EAP-GTC is > supported by HOTP > Mon Sep 13 21:53:29 2010: INFO: Access rejected for mreeves: Authentication > type not supported. Only RADIUS PAP, EAP-OPT and EAP-GTC is supported by HOTP > Mon Sep 13 21:53:29 2010: DEBUG: Packet dump: > *** Sending to 192.168.100.1 port 51172 .... > > Packet length = 36 > 03 6c 00 24 95 0b c5 e9 09 d5 b6 10 e2 79 9d 7c > 7f 57 82 c1 12 10 52 65 71 75 65 73 74 20 44 65 > 6e 69 65 64 > Code: Access-Reject > Identifier: 108 > Authentic: <149><11><197><233><9><213><182><16><226>y<157>|<127>W<130><193> > Attributes: > Reply-Message = "Request Denied" > > _______________________________________________ > radiator mailing list > [email protected] > http://www.open.com.au/mailman/listinfo/radiator NB: Have you read the reference manual ("doc/ref.html")? Have you searched the mailing list archive (www.open.com.au/archives/radiator)? Have you had a quick look on Google (www.google.com)? Have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening? -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows, MacOS X. Includes support for reliable RADIUS transport (RadSec), and DIAMETER translation agent. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. - CATool: Private Certificate Authority for Unix and Unix-like systems. _______________________________________________ radiator mailing list [email protected] http://www.open.com.au/mailman/listinfo/radiator
