Hello,

What kind of magic tricks are needed to get Auth-Type = System to work?

Running FreeRADIUS Version 1.0.4 on SuSE 10 with MD5 and shadow passwords, using the following 'users' file:

DEFAULT Auth-Type = System
      Service-Type = Framed-User,
      Framed-Protocol = PPP,
      Port-Limit = 2,
      Framed-IP-Address = 255.255.255.254,
      Framed-MTU = 1500


Now, I restart radiusd and test it:

# echo "User-Name = ###, User-Password = ###" | radclient -x localhost auth ###
Sending Access-Request of id 151 to 127.0.0.1:1645
      User-Name = "###"
      User-Password = "###"
rad_recv: Access-Reject packet from host 127.0.0.1:1645, id=151, length=20


I get this in my radius log:
Fri Apr  7 14:39:01 2006 : Auth: rlm_unix: [###]: invalid password


Running radiusd in -X mode, I get this:
rad_recv: Access-Request packet from host 127.0.0.1:32926, id=131, length=46
      User-Name = "###"
      User-Password = "###"
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request 0
modcall[authorize]: module "chap" returns noop for request 0
modcall[authorize]: module "mschap" returns noop for request 0
  rlm_realm: No '@' in User-Name = "###", looking up realm NULL
  rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 0
rlm_eap: No EAP-Message, not doing EAP
modcall[authorize]: module "eap" returns noop for request 0
  users: Matched entry DEFAULT at line 5
modcall[authorize]: module "files" returns ok for request 0
modcall: group authorize returns ok for request 0
rad_check_password:  Found Auth-Type System
auth: type "System"
Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 0
rlm_unix: [###]: invalid password
modcall[authenticate]: module "unix" returns reject for request 0
modcall: group authenticate returns reject for request 0
auth: Failed to validate the user.


Been banging my head against the wall over this problem for almost two weeks now, and getting a bit desperate for a solution....


-Andreas.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to