Did you pick the operators by chance? You are not very lucky, as only one
(for the password) is correct. Even that is not correct if this is the
latest version of the server (1.1.6) - you should use Cleartext-Password
and := as an operator.

radgroupcheck:

>+----+-----------+------------------+-------+----+
>| id | GroupName | Attribute        | Value | op |
>+----+-----------+------------------+-------+----+
>|  1 | dialup    | Auth-Type        | Local | == |
>|  2 | dialup    | Simultaneous-Use | 1     | == |
>+----+-----------+------------------+-------+----+

- delete Auth-Type; you don't need it for a recent server version
- change op for Simultaneous-Use to :=

radgroupreply:

>+----+-----------+--------------------+---------------------+----+
>| id | GroupName | Attribute          | Value               | op |
>+----+-----------+--------------------+---------------------+----+
>| 27 | dialup    | Framed-IP-Address  | 255.255.255.254     | == |
>| 28 | dialup    | Framed-Compression | Van-Jacobson-TCP-IP | == |
>| 29 | dialup    | Framed-IP-Netmask  | 255.255.255.255     | == |
>| 30 | dialup    | Framed-MTU         | 576                 | == |
>| 31 | dialup    | Idle-Timeout       | 900                 | := |
>+----+-----------+--------------------+---------------------+----+

- change all ops to =
- is this (255.255.255.254) really the IP address you want to give your
user; client is unlikely to accept IP address above 224 subnet

users file:

>    users: Matched DEFAULT at 173
>  rad_check_password:  Found Auth-Type System

There is a DEFAULT entry towards the end of users file setting Auth-Type
System. Comment it out.

Ivan Kalik
Kalik Informatika ISP

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to