Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 19 Aug 2008 14:18:33 -0700 (PDT)
From:      kavita123 <kavita.chitnis@gmail.com>
To:        freebsd-questions@freebsd.org
Subject:   Radius server ans NAS keys don't match! ?
Message-ID:  <19058901.post@talk.nabble.com>

next in thread | raw e-mail | index | archive | help

Hi,
I am trying to work with Radius on a  FreeBSD machine.
When I try radlogin on the client machine , I get the following message fro=
m
the server

Ready to process requests.
        Service-Type =3D 0x0000000100000000
        User-Name =3D "xxx"
        User-Password =3D "\240\365\313=C3=84=C2=A7\255\371\r\203\300.\275=
=C3=9C=C3=82=C2=A4"
        NAS-Port =3D 0x0000000000000000
        NAS-IP-Address =3D 0x0a2a009b00000000
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
    rlm_realm: No '@' in User-Name =3D "xxx", looking up realm NULL
    rlm_realm: No such realm "NULL"
++[suffix] returns noop
  rlm_eap: No EAP-Message, not doing EAP
++[eap] returns noop
++[unix] returns notfound
    users: Matched entry xxx at line 17
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
++[pap] returns updated
  rad_check_password:  Found Auth-Type
auth: type "PAP"
+- entering group PAP
rlm_pap: login attempt with password "?=C3=B5=C3=8B=C3=84=C2=A7=C2=AD=C3=B9=
 ?=C3=80.=C2=BD=C3=9C?=C3=82=C2=A4"
rlm_pap: Using clear text password "xxx"
rlm_pap: Passwords don't match
++[pap] returns reject
auth: Failed to validate the user.
Login incorrect (rlm_pap: CLEAR TEXT password check failed):
[kavita/\240\365\313=C3=84=C2=A7\255\371\r\203\300.\275=C3=9C?=C3=82=C2=A4]=
 (from client hwq5 port 0)
  WARNING: Unprintable characters in the password.        Double-check the
shared secret on the server and the NAS!
  Found Post-Auth-Type Reject
+- entering group REJECT
        expand: %{User-Name} -> xxx
 attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 1 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 1
Waking up in 4.9 seconds.
Cleaning up request 1 ID 127 with timestamp +24
Ready to process requests.



I have checked the secret key on the server and the client and it is the
same!

Is there any setting to be done in
/radiusclient-ng-0.5.6/etc/servers
apart from=20
radius_server_ip    secret_key

and=20
/radiusclient-ng/radiusclient.conf

apart from
authserver      radius_server_ip:1812=20

Thank you,
Kavita





--=20
View this message in context: http://www.nabble.com/Radius-server-ans-NAS-k=
eys-don%27t-match%21---tp19058901p19058901.html
Sent from the freebsd-questions mailing list archive at Nabble.com.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19058901.post>