Ivan,

I did what you recommended (I guess). See below:

mysql> select * from radgroupreply;
+----+-----------+--------------------+----+-----------------------+------+
| id | groupname | attribute          | op | value                 | Prio |
+----+-----------+--------------------+----+-----------------------+------+
|  1 | pop-sp    | Framed-Compression | := | Van-Jacobson-TCP-IP   |      |
|  3 | pop-sp    | Service-Type       | := | NAS-Prompt            |      |
|  5 | reject    | reply-message      | := | Autenticação recusada | NULL |
+----+-----------+--------------------+----+-----------------------+------+
3 rows in set (0.00 sec)

But I can't authenticate yet.
-- 

Wagner Pereira

PoP-SP/RNP - Ponto de Presença da RNP em São Paulo
CCE/USP - Centro de Computação Eletrônica da Universidade de São Paulo
http://www.pop-sp.rnp.br
(11) 3091-8902


t...@kalik.net escreveu:
Please, could someone read this output from freeradius' debugging mode to
help me? Thanks in advance.

My scenario is:
- Server: Debian GNU/Linux lenny x86_64 kernel 2.6.26-2-amd64
- Freeradius 2.0.4
- MySQL 5.0.51a
- Calling Station: Windows XP Professional 32 bits SP3
- Software client: SSH Secure Shell 3.2.9
- NAS client: Cisco6500 Catalyst - IOS versão 12.2(17r)S4

Sending Access-Accept of id 121 to NAS-IP-Address port 21645
       Framed-Compression := Van-Jacobson-TCP-IP
       Framed-Protocol := PPP
       Service-Type := Login-User
       Framed-MTU := 1500
    

Freeradius is set up well. Reply attributes you configured are wrong for
ssh. You don't need any of those Framed attributes. And Service-Type
should be NAS-Prompt-User most likely. Read Cisco dokument on the wiki:

http://wiki.freeradius.org/Cisco#Shell_Access


Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
  
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to