Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 20 Oct 2000 03:19:23 -0400
From:      Jim Durham <durham@w2xo.pgh.pa.us>
To:        Mike Tancsa <mike@sentex.net>
Cc:        questions@freebsd.org
Subject:   Re: Radiusd with Portmaster2 on FreeBSD4.1
Message-ID:  <39EFF1FB.33A2318A@w2xo.pgh.pa.us>
References:  <SEN.971924764.962929327@news.sentex.net> <nc5vus474304u546up6k3qctgcgrte6i86@4ax.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Mike Tancsa wrote:
> 
> On 18 Oct 2000 23:06:04 -0400, in sentex.lists.freebsd.questions you wrote:
> 
> >I'm using the cistron radiusd on FreeBSD 4.1 with an old Portmaster
> >2E to authenticate a user base of around 100 users.
> 
> It does work, as we have several such boxes still in a few pops.  What does
> /var/log/radius show for the error ? ie. why is RADIUS rejected them ?
> Also, is your radius server running on a machine that has multiple
> interfaces ? If so, specify the address to bind to explicitly.
> 

Since I posted, I played around with it today and discovered that
turning on PAP authentication on the Portmaster made it work.

The docs indicate that you have to have CHAP off for the authentication
to work, but I don't believe it said that PAP must be on, although
it did indicate that PAP would work. I just tried it in desperation,
and it started working. 

There were no error messages with PAP and CHAP off and running
radiusd in "-x -x" mode for max debugging. The only clue was that
it kept reporting a CHAP password was being sent from the Portmaster,
even though CHAP was off.

I've been watching the log file all night, and I haven't seen a failed
authentication yet, so I guess I'm all OK, but puzzled.

Thanks for the interest.

Jim Durham


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?39EFF1FB.33A2318A>