> Darkshot <[EMAIL PROTECTED]> wrote:
>> >> Auth: rlm_unix: Attribute "Password" is required for authentication.
>> >> Cannot use "CHAP-Password".
>> 
>> >   You can't use CHAP on /etc/passwd.  See the FAQ.
>> 
>> I'm not trying to. I want to use the "users" file.

>   That's not what you told the server to do.  It's doing Unix
> authentication (as it says above), which is the default in the shipped
> 'users' file.

I'm not getting that same error now- I posted some other stuff last
night with full diagnostics.

>> Well, the error I get from radiusd -X says:
>> 
>> auth: No Auth-Type configuration for the request, rejecting the user
>> auth: Failed to validate the user.

>   So add an Auth-Type attribute to the 'users' file.

> bob  Auth-Type := Local, Password == "bob"
>      Reply-Message = "Hello, bob"

That's what it looks like now. I tried Auth-type :=Chap too- just for
the heck of it.

>> Any info is appreciated- maybe I'm using the wrong dictionary.....

>   Nope.

Ok: Here's an entry from my users file:

darkshot Auth-Type := Local, Password == "example"
        Service-Type = Framed-User,
        Framed-Protocol = PPP,
        Framed-Routing = None,
        Ascend-Assign-IP-Pool = 1,
        Ascend-Data-Filter = "ip in forward dstip 216.228.96.0/20",
        Ascend-Data-Filter = "ip in drop tcp dstport = 25",
        Ascend-Data-Filter = "ip in forward"

   Running a radtest for this returns:
rad_recv: Access-Request packet from host 127.0.0.1:32831, id=21, length=57
        User-Name = "darkshot"
        Password = "1\362m\266\212\025J\323x?YED\272\203\264"
        NAS-IP-Address = 255.255.255.255
        NAS-Port-Id = "0"
modcall: entering group authorize
  modcall[authorize]: module "preprocess" returns ok
modcall: group authorize returns ok
auth: No Auth-Type configuration for the request, rejecting the user
auth: Failed to validate the user.
Sending Access-Reject of id 21 to 127.0.0.1:32831
Finished request 1   


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to