cant connect with ntradping
Hi, i'm trying to ntradping my radius server but this is what radius log
shows
Thu Nov 8 14:10:39 2007 : Auth: rlm_unix: [root]: invalid password
Thu Nov 8 14:10:39 2007 : Auth: Login incorrect: [root/ \...(:;] (from
client testesomente port 0)
i understand that this root password is the linux root password from my
server, but it keeps saying that this is incorrect. and at the radius.conf i
setted port to be 1812 and its saying port 0.
this is what freeradius -X shows:
main: nospace_user = "no"
main: nospace_pass = "no"
main: checkrad = "/usr/sbin/checkrad"
main: proxy_requests = no
security: max_attributes = 200
security: reject_delay = 1
security: status_server = no
main: debug_level = 0
read_config_files: reading dictionary
read_config_files: reading naslist
Using deprecated naslist file. Support for this will go away soon.
read_config_files: reading clients
Using deprecated clients file. Support for this will go away soon.
read_config_files: reading realms
radiusd: entering modules setup
Module: Library search path is /usr/lib/freeradius
Module: Loaded exec
exec: wait = yes
exec: program = "(null)"
exec: input_pairs = "request"
exec: output_pairs = "(null)"
exec: packet_type = "(null)"
rlm_exec: Wait=yes but no output defined. Did you mean output=none?
Module: Instantiated exec (exec)
Module: Loaded expr
Module: Instantiated expr (expr)
Module: Loaded PAP
pap: encryption_scheme = "crypt"
Module: Instantiated pap (pap)
Module: Loaded CHAP
Module: Instantiated chap (chap)
Module: Loaded MS-CHAP
mschap: use_mppe = yes
mschap: require_encryption = no
mschap: require_strong = no
mschap: with_ntdomain_hack = no
mschap: passwd = "(null)"
mschap: ntlm_auth = "(null)"
Module: Instantiated mschap (mschap)
Module: Loaded System
unix: cache = no
unix: passwd = "/etc/passwd"
unix: shadow = "/etc/shadow"
unix: group = "/etc/group"
unix: radwtmp = "/var/log/freeradius/radwtmp"
unix: usegroup = no
unix: cache_reload = 600
Module: Instantiated unix (unix)
Module: Loaded eap
eap: default_eap_type = "md5"
eap: timer_expire = 60
eap: ignore_unknown_eap_types = no
eap: cisco_accounting_username_bug = no
rlm_eap: Loaded and initialized type md5
rlm_eap: Loaded and initialized type leap
gtc: challenge = "Password: "
gtc: auth_type = "PAP"
rlm_eap: Loaded and initialized type gtc
mschapv2: with_ntdomain_hack = no
rlm_eap: Loaded and initialized type mschapv2
Module: Instantiated eap (eap)
Module: Loaded preprocess
preprocess: huntgroups = "/etc/freeradius/huntgroups"
preprocess: hints = "/etc/freeradius/hints"
preprocess: with_ascend_hack = no
preprocess: ascend_channels_per_line = 23
preprocess: with_ntdomain_hack = no
preprocess: with_specialix_jetstream_hack = no
preprocess: with_cisco_vsa_hack = no
preprocess: with_alvarion_vsa_hack = no
Module: Instantiated preprocess (preprocess)
Module: Loaded realm
realm: format = "suffix"
realm: delimiter = "@"
realm: ignore_default = no
realm: ignore_null = no
Module: Instantiated realm (suffix)
Module: Loaded files
files: usersfile = "/etc/freeradius/users"
files: acctusersfile = "/etc/freeradius/acct_users"
files: preproxy_usersfile = "/etc/freeradius/preproxy_users"
files: compat = "no"
Module: Instantiated files (files)
Module: Loaded SQL
sql: driver = "rlm_sql_mysql"
sql: server = "localhost"
sql: port = ""
sql: login = "root"
sql: password = "#s3nh4$r00t%"
sql: radius_db = "radius"
sql: nas_table = "nas"
sql: sqltrace = no
sql: sqltracefile = "/var/log/freeradius/sqltrace.sql"
sql: readclients = no
sql: deletestalesessions = yes
sql: num_sql_socks = 5
sql: sql_user_name = "%{User-Name}"
sql: default_user_profile = ""
sql: query_on_not_found = no
sql: authorize_check_query = "SELECT id, UserName, Attribute, Value,
op FROM radcheck WHERE Username =
'%{SQL-User-Name}' ORDER BY id"
sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value,
op FROM radreply WHERE Username =
'%{SQL-User-Name}' ORDER BY id"
sql: authorize_group_check_query = "SELECT radgroupcheck.id,
radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,
radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username =
'%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER
BY radgroupcheck.id"
sql: authorize_group_reply_query = "SELECT radgroupreply.id,
radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,
radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username =
'%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER
BY radgroupreply.id"
sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S',
AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime),
AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay =
'%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND AcctStopTime=0 AND
NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'"
sql: accounti
Re: cant connect with ntradping
This is (only) the server startup debug. You need to send also the debug
when request from ntradping is processed (you can skip the server
startup bit for that).
Port 0 is NAS-Port that ntradping is sending in the request.
Ivan Kalik
Kalik Informatika ISP
Dana 8/11/2007, "Murilo Bernardes" <[EMAIL PROTECTED]> piše:
>Hi, i'm trying to ntradping my radius server but this is what radius log
>shows
>
>Thu Nov 8 14:10:39 2007 : Auth: rlm_unix: [root]: invalid password
>Thu Nov 8 14:10:39 2007 : Auth: Login incorrect: [root/ \...(:;] (from
>client testesomente port 0)
>
>i understand that this root password is the linux root password from my
>server, but it keeps saying that this is incorrect. and at the radius.conf i
>setted port to be 1812 and its saying port 0.
>
>this is what freeradius -X shows:
>
> main: nospace_user = "no"
> main: nospace_pass = "no"
> main: checkrad = "/usr/sbin/checkrad"
> main: proxy_requests = no
> security: max_attributes = 200
> security: reject_delay = 1
> security: status_server = no
> main: debug_level = 0
>read_config_files: reading dictionary
>read_config_files: reading naslist
>Using deprecated naslist file. Support for this will go away soon.
>read_config_files: reading clients
>Using deprecated clients file. Support for this will go away soon.
>read_config_files: reading realms
>radiusd: entering modules setup
>Module: Library search path is /usr/lib/freeradius
>Module: Loaded exec
> exec: wait = yes
> exec: program = "(null)"
> exec: input_pairs = "request"
> exec: output_pairs = "(null)"
> exec: packet_type = "(null)"
>rlm_exec: Wait=yes but no output defined. Did you mean output=none?
>Module: Instantiated exec (exec)
>Module: Loaded expr
>Module: Instantiated expr (expr)
>Module: Loaded PAP
> pap: encryption_scheme = "crypt"
>Module: Instantiated pap (pap)
>Module: Loaded CHAP
>Module: Instantiated chap (chap)
>Module: Loaded MS-CHAP
> mschap: use_mppe = yes
> mschap: require_encryption = no
> mschap: require_strong = no
> mschap: with_ntdomain_hack = no
> mschap: passwd = "(null)"
> mschap: ntlm_auth = "(null)"
>Module: Instantiated mschap (mschap)
>Module: Loaded System
> unix: cache = no
> unix: passwd = "/etc/passwd"
> unix: shadow = "/etc/shadow"
> unix: group = "/etc/group"
> unix: radwtmp = "/var/log/freeradius/radwtmp"
> unix: usegroup = no
> unix: cache_reload = 600
>Module: Instantiated unix (unix)
>Module: Loaded eap
> eap: default_eap_type = "md5"
> eap: timer_expire = 60
> eap: ignore_unknown_eap_types = no
> eap: cisco_accounting_username_bug = no
>rlm_eap: Loaded and initialized type md5
>rlm_eap: Loaded and initialized type leap
> gtc: challenge = "Password: "
> gtc: auth_type = "PAP"
>rlm_eap: Loaded and initialized type gtc
> mschapv2: with_ntdomain_hack = no
>rlm_eap: Loaded and initialized type mschapv2
>Module: Instantiated eap (eap)
>Module: Loaded preprocess
> preprocess: huntgroups = "/etc/freeradius/huntgroups"
> preprocess: hints = "/etc/freeradius/hints"
> preprocess: with_ascend_hack = no
> preprocess: ascend_channels_per_line = 23
> preprocess: with_ntdomain_hack = no
> preprocess: with_specialix_jetstream_hack = no
> preprocess: with_cisco_vsa_hack = no
> preprocess: with_alvarion_vsa_hack = no
>Module: Instantiated preprocess (preprocess)
>Module: Loaded realm
> realm: format = "suffix"
> realm: delimiter = "@"
> realm: ignore_default = no
> realm: ignore_null = no
>Module: Instantiated realm (suffix)
>Module: Loaded files
> files: usersfile = "/etc/freeradius/users"
> files: acctusersfile = "/etc/freeradius/acct_users"
> files: preproxy_usersfile = "/etc/freeradius/preproxy_users"
> files: compat = "no"
>Module: Instantiated files (files)
>Module: Loaded SQL
> sql: driver = "rlm_sql_mysql"
> sql: server = "localhost"
> sql: port = ""
> sql: login = "root"
> sql: password = "#s3nh4$r00t%"
> sql: radius_db = "radius"
> sql: nas_table = "nas"
> sql: sqltrace = no
> sql: sqltracefile = "/var/log/freeradius/sqltrace.sql"
> sql: readclients = no
> sql: deletestalesessions = yes
> sql: num_sql_socks = 5
> sql: sql_user_name = "%{User-Name}"
> sql: default_user_profile = ""
> sql: query_on_not_found = no
> sql: authorize_check_query = "SELECT id, UserName, Attribute, Value,
>op FROM radcheck WHERE Username =
>'%{SQL-User-Name}' ORDER BY id"
> sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value,
>op FROM radreply WHERE Username =
>'%{SQL-User-Name}' ORDER BY id"
> sql: authorize_group_check_query = "SELECT radgroupcheck.id,
>radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,
>radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username =
>'%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER
>BY radgroupcheck.id"
> sql: authorize_group_reply_query = "SELECT radgroupreply.id,
>radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,
>radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.User
Re: cant connect with ntradping
I solved the problem, the thing is that my password has a '$' and it was
recongnizing it as s command or sth instead a password. i did this
radtest root 'my$password' my.ip 0 secretkey
with ' ' not " "
On 08/11/2007, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
>
> This is (only) the server startup debug. You need to send also the debug
> when request from ntradping is processed (you can skip the server
> startup bit for that).
>
> Port 0 is NAS-Port that ntradping is sending in the request.
>
> Ivan Kalik
> Kalik Informatika ISP
>
>
> Dana 8/11/2007, "Murilo Bernardes" <[EMAIL PROTECTED]> piše:
>
> >Hi, i'm trying to ntradping my radius server but this is what radius log
> >shows
> >
> >Thu Nov 8 14:10:39 2007 : Auth: rlm_unix: [root]: invalid password
> >Thu Nov 8 14:10:39 2007 : Auth: Login incorrect: [root/ \...(:;] (from
> >client testesomente port 0)
> >
> >i understand that this root password is the linux root password from my
> >server, but it keeps saying that this is incorrect. and at the
> radius.conf i
> >setted port to be 1812 and its saying port 0.
> >
> >this is what freeradius -X shows:
> >
> > main: nospace_user = "no"
> > main: nospace_pass = "no"
> > main: checkrad = "/usr/sbin/checkrad"
> > main: proxy_requests = no
> > security: max_attributes = 200
> > security: reject_delay = 1
> > security: status_server = no
> > main: debug_level = 0
> >read_config_files: reading dictionary
> >read_config_files: reading naslist
> >Using deprecated naslist file. Support for this will go away soon.
> >read_config_files: reading clients
> >Using deprecated clients file. Support for this will go away soon.
> >read_config_files: reading realms
> >radiusd: entering modules setup
> >Module: Library search path is /usr/lib/freeradius
> >Module: Loaded exec
> > exec: wait = yes
> > exec: program = "(null)"
> > exec: input_pairs = "request"
> > exec: output_pairs = "(null)"
> > exec: packet_type = "(null)"
> >rlm_exec: Wait=yes but no output defined. Did you mean output=none?
> >Module: Instantiated exec (exec)
> >Module: Loaded expr
> >Module: Instantiated expr (expr)
> >Module: Loaded PAP
> > pap: encryption_scheme = "crypt"
> >Module: Instantiated pap (pap)
> >Module: Loaded CHAP
> >Module: Instantiated chap (chap)
> >Module: Loaded MS-CHAP
> > mschap: use_mppe = yes
> > mschap: require_encryption = no
> > mschap: require_strong = no
> > mschap: with_ntdomain_hack = no
> > mschap: passwd = "(null)"
> > mschap: ntlm_auth = "(null)"
> >Module: Instantiated mschap (mschap)
> >Module: Loaded System
> > unix: cache = no
> > unix: passwd = "/etc/passwd"
> > unix: shadow = "/etc/shadow"
> > unix: group = "/etc/group"
> > unix: radwtmp = "/var/log/freeradius/radwtmp"
> > unix: usegroup = no
> > unix: cache_reload = 600
> >Module: Instantiated unix (unix)
> >Module: Loaded eap
> > eap: default_eap_type = "md5"
> > eap: timer_expire = 60
> > eap: ignore_unknown_eap_types = no
> > eap: cisco_accounting_username_bug = no
> >rlm_eap: Loaded and initialized type md5
> >rlm_eap: Loaded and initialized type leap
> > gtc: challenge = "Password: "
> > gtc: auth_type = "PAP"
> >rlm_eap: Loaded and initialized type gtc
> > mschapv2: with_ntdomain_hack = no
> >rlm_eap: Loaded and initialized type mschapv2
> >Module: Instantiated eap (eap)
> >Module: Loaded preprocess
> > preprocess: huntgroups = "/etc/freeradius/huntgroups"
> > preprocess: hints = "/etc/freeradius/hints"
> > preprocess: with_ascend_hack = no
> > preprocess: ascend_channels_per_line = 23
> > preprocess: with_ntdomain_hack = no
> > preprocess: with_specialix_jetstream_hack = no
> > preprocess: with_cisco_vsa_hack = no
> > preprocess: with_alvarion_vsa_hack = no
> >Module: Instantiated preprocess (preprocess)
> >Module: Loaded realm
> > realm: format = "suffix"
> > realm: delimiter = "@"
> > realm: ignore_default = no
> > realm: ignore_null = no
> >Module: Instantiated realm (suffix)
> >Module: Loaded files
> > files: usersfile = "/etc/freeradius/users"
> > files: acctusersfile = "/etc/freeradius/acct_users"
> > files: preproxy_usersfile = "/etc/freeradius/preproxy_users"
> > files: compat = "no"
> >Module: Instantiated files (files)
> >Module: Loaded SQL
> > sql: driver = "rlm_sql_mysql"
> > sql: server = "localhost"
> > sql: port = ""
> > sql: login = "root"
> > sql: password = "#s3nh4$r00t%"
> > sql: radius_db = "radius"
> > sql: nas_table = "nas"
> > sql: sqltrace = no
> > sql: sqltracefile = "/var/log/freeradius/sqltrace.sql"
> > sql: readclients = no
> > sql: deletestalesessions = yes
> > sql: num_sql_socks = 5
> > sql: sql_user_name = "%{User-Name}"
> > sql: default_user_profile = ""
> > sql: query_on_not_found = no
> > sql: authorize_check_query = "SELECT id, UserName, Attribute, Value,
> >op FROM radcheck WHERE Username =
> >'%{SQL-User-Name}' ORDER BY id"
> > sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value,
> >op FROM radreply WHERE Username =
> >'%{SQL-User-Name}'
