Dnia Śr Września 26 2007, 2:51 pm, Wojciech Ziniewicz napisał(a): > Dnia Śr Września 26 2007, 11:57 am, Alan DeKok napisał(a): >> Try also with "ntradping", or another non-FreeRADIUS client. If CHAP >> works for those clients, then the CHAP code in PPPoE is broken. >> >> Alan DeKok. > > Alan, probably you were right. > Testing CHAP auth locally with ntradping (runs easily over wine ) > succeeded ;/ . > > Here's what i have from my radiusd -X debug : > > rlm_sql (sql): Released sql socket id: 2 > modcall[authorize]: module "sql" returns ok for request 2 > modcall: leaving group authorize (returns ok) for request 2 > rad_check_password: Found Auth-Type CHAP > auth: type "CHAP" > Processing the authenticate section of radiusd.conf > modcall: entering group CHAP for request 2 > rlm_chap: login attempt by "TEST" with CHAP password > rlm_chap: Using clear text password "TEST987" for user TEST > authentication. > rlm_chap: chap user TEST authenticated succesfully > modcall[authenticate]: module "chap" returns ok for request 2 > modcall: leaving group CHAP (returns ok) for request 2 > Login OK: [TEST/<CHAP-Password>] (from client localhost port 0) > Sending Access-Accept of id 21 to 127.0.0.1 port 1854 > Service-Type = Framed-User > Framed-Compression = Van-Jacobson-TCP-IP > Framed-MTU = 1400 > Framed-IP-Netmask = 255.255.255.0 > Framed-IP-Address = 10.100.2.156 > Framed-Protocol = PPP > Password == "TEST987" > Finished request 2 > > > Thank You very much. If i find out what is broken in pppoe server i will > notify You. Thank You one more time. >
The problem is solved. The freeradius dictionary differed from radiusclient dictionary . I ommited the "Sep 24 09:31:53 beta pppd[27534]: rc_avpair_new: unknown attribute 60" in my logs . Before : beta radiusclient # cat /etc/radiusclient/dictionary | grep CHAP ATTRIBUTE CHAP-Password 3 string After : beta radiusclient # cat /etc/radiusclient/dictionary | grep CHAP ATTRIBUTE CHAP-Password 3 string ATTRIBUTE CHAP-Challenge 60 string Solved - thank You once again Alan. regards. -- Pozdrawiam, Wojciech Ziniewicz Administrator Cebit - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html