"Victor Churchill" <[EMAIL PROTECTED]> wrote:
>       Does anyone have any sample configurations for
>       using freeradius with Cisco ??

  Look in the 'doc' directory?

>       Now a login attempt which fails.....
> 
> Ready to process requests.
> rad_recv: Access-Request packet from host 192.168.1.1:1645, id=69, length=76
...
>         User-Password =
> "\267\013\211\300\027\332\235\001\324\322\263iQ\320\334"
...
>   rad_check_password:  Found Auth-Type System
> auth: type "System"
> modcall: entering group authenticate
> rlm_unix: [test]: invalid password
>   modcall[authenticate]: module "unix" returns reject
> modcall: group authenticate returns reject
> auth: Failed to validate the user.
>   WARNING: Unprintable characters in the password. ?  Double-check the
> shared secret on the server and the NAS!

  That message would appear to be useful...

>       It seems to be trying to use the unix password even though I
>       have a password for it in the raddb/users file

  You configured that user (through DEFAULT) to use System
authentication.  If you want another kind of authentication, then fix
your 'users' file, so that a request is matched against a non-system
authentication.

>       Also the shared secret is correct for the server and the NAS
>       but it complains...

  Garbage passwords mean one of two things:

1. The shared secret is wrong.
2. The user entered a garbage password

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to