Is the FreeRadius Server a client of IAS ? Ron.
http://www.positive-logic.net -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Israel Alves Sent: Sunday, January 30, 2005 11:44 AM To: freeradius-users@lists.freeradius.org Subject: Proxy PEAP+MSCHAPV2 Hi, I want to do proxy of users authentication [EMAIL PROTECTED], this is generated with domain login of Windows XP. I configured the freeradius server that receive the request for do proxy to a second server. When I try a connection with Windows XP, I receive the error bellow on the first server, then more bellow, I put the result of second freeradius server: rlm_eap: Request is supposed to be proxied to Realm TESTE. Not doing EAP. rad_recv: Access-Request packet from host 172.22.2.32:1746, id=254, length=98 User-Name = "[EMAIL PROTECTED]" EAP-Message = 0x020100110154455354455c69737261656c NAS-IP-Address = 172.22.2.32 Service-Type = Login-User Calling-Station-Id = "0.0.0.0" NAS-Port-Type = Ethernet Message-Authenticator = 0x4b7d7eb7f7c7d152f7781ccef4d74eb2 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 radius_xlat: '/usr/local/radius/var/log/radius/radacct/172.22.2.32/auth-detail-20050128' rlm_detail: /usr/local/radius/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y %m% d expands to /usr/local/radius/var/log/radius/radacct/172.22.2.32/auth-detail-20050128 modcall[authorize]: module "auth_log" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: Looking up realm "TESTE" for User-Name = "israel <at> TESTE" rlm_realm: Found realm "TESTE" rlm_realm: Adding Stripped-User-Name = "israel" rlm_realm: Proxying request from user israel to realm TESTE rlm_realm: Adding Realm = "TESTE" rlm_realm: Preparing to proxy authentication request to realm "TESTE" modcall[authorize]: module "suffix" returns updated for request 0 rlm_eap: Request is supposed to be proxied to Realm TESTE. Not doing EAP. modcall[authorize]: module "eap" returns noop for request 0 modcall[authorize]: module "files" returns notfound for request 0 modcall: group authorize returns updated for request 0 Sending Access-Request of id 0 to 172.22.3.69:1812 User-Name = "israel" EAP-Message = 0x020100110154455354455c69737261656c NAS-IP-Address = 172.22.2.32 Service-Type = Login-User Calling-Station-Id = "0.0.0.0" NAS-Port-Type = Ethernet Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x323534 --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Reject packet from host 172.22.3.69:1812, id=0, length=108 Extreme-Netlogin-Url = "http://172.22.2.180"; Extreme-Netlogin-Url-Desc = "Extreme Networks Home" Extreme-Netlogin-Only = Enabled Extreme-Netlogin-Vlan = "servers" Proxy-State = 0x323534 Login incorrect (Home Server says so): [israel/<no User-Password attribute>] (from client extreme port 0 cli 0.0.0.0) Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... rad_recv: Access-Request packet from host 172.22.2.32:1746, id=254, length=98 Sending Access-Reject of id 254 to 172.22.2.32:1746 Extreme-Netlogin-Url = "http://172.22.2.180"; Extreme-Netlogin-Url-Desc = "Extreme Networks Home" Extreme-Netlogin-Only = Enabled Extreme-Netlogin-Vlan = "servers" --- Walking the entire request list --- Waking up in 5 seconds... rad_recv: Access-Request packet from host 172.22.0.47:1814, id=0, length=97 User-Name = "israel" EAP-Message = 0x020100110154455354455c69737261656c NAS-IP-Address = 172.22.2.32 Service-Type = Login-User Calling-Station-Id = "0.0.0.0" NAS-Port-Type = Ethernet Message-Authenticator = 0x0195a000df15f453a0effe23b403fb50 Proxy-State = 0x323534 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 radius_xlat: '/usr/local/radius/var/log/radius/radacct/172.22.0.47/auth-detail-20050128' rlm_detail: /usr/local/radius/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y %m% d expands to /usr/local/radius/var/log/radius/radacct/172.22.0.47/auth-detail-20050128 modcall[authorize]: module "auth_log" returns ok for request 0 rlm_realm: No ' <at> ' in User-Name = "israel", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: EAP packet type response id 1 length 17 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched israel at 18 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns updated for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: Identity does not match User-Name, setting from EAP Identity. rlm_eap: Failed in handler modcall[authenticate]: module "eap" returns invalid for request 0 modcall: group authenticate returns invalid for request 0 auth: Failed to validate the user. Login incorrect: [israel/<no User-Password attribute>] (from client radius port 0 cli 0.0.0.0) Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 0 to 172.22.0.47:1814 Extreme-Netlogin-Url = "http://172.22.2.180"; Extreme-Netlogin-Url-Desc = "Extreme Networks Home" Extreme-Netlogin-Only = Enabled Extreme-Netlogin-Vlan = "servers" Proxy-State = 0x323534 Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 0 with timestamp 41fa778b Nothing to do. Sleeping until we see a request. Thanks for help. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
