After upgrading to Freeradius 1.0.1, I am getting an error when trying
to authenticate users via Kerberos 5.
Below is debug output from an authentication attempt:
Ready to process requests.
rad_recv: Access-Request packet from host XXX.XXX.XXX.XXX:21743, id=239,
length=78
User-Name = "seliason"
User-Password = "mitchell"
NAS-Port = 226
NAS-Port-Type = Virtual
Calling-Station-Id = "XX.XX.XX.XX"
NAS-IP-Address = XXX.XXX.XXX.XXX
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request 0
rlm_realm: No '@' in User-Name = "seliason", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 0
users: Matched seliason at 135
modcall[authorize]: module "files" returns ok for request 0
modcall: group authorize returns ok for request 0
rad_check_password: Found Auth-Type KRB5
auth: type "KRB5"
Processing the authenticate section of radiusd.conf
modcall: entering group Auth-Type for request 0
rlm_krb5: Attribute "User-Password" is required for authentication.
Cannot use "User-Name".
modcall[authenticate]: module "krb5" returns invalid for request 0
modcall: group Auth-Type returns invalid for request 0
auth: Failed to validate the user.
Login incorrect: [seliason] (from client CIDR port 226 cli xx.XX.XX.X)
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
Does anybody have any ideas on how I might resolve this issue?
Thanks,
Ken Mix
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
