Re: [Help-gnu-radius] Just can't figure this one out

[Sergey Poznyakoff]

Erik Olson <address@hidden> wrote:

> I'm very stumped about this configuration and it's probably due to my
> fundmental lack of understanding how radius works, 

That's not a problem at all. Feel free to post your questions and doubts to
the list. Just for your information, the complete Radius documentation
is available at http://www.gnu.org/software/radius/manual. Besides,
the GNU Radius manual is published by Free Software Foundation (the
info about the book is available at http://www.gnu.org/doc/radius.html).

> SO MY QUESTION is
> 
> a) Why does user "erik" not work, when it is exactly the same as DEFAULT,
> and radauth returns PASS?

Because the remote party is *not* authenticating as user
'erik'. Instead, it attempts to authenticate itself as 'address@hidden'.

Jun 24 14:02:02 Auth.notice: (Access-Request 66.77.22 1 "erik @ myrealm.com"
CLID=7270000000 CSID=7270000000): Login incorrect [erik @
myrealm.com/{chap-password}]

Now, 'address@hidden' and 'erik' are two different user names.
If you do wish to use Radius realms, you'll find the necessary
information in the following URLs:

http://www.gnu.org/software/radius/manual/html_node/radius_12.html#SEC15
http://www.gnu.org/software/radius/manual/html_node/radius_14.html#SEC17
http://www.gnu.org/software/radius/manual/html_node/radius_55.html#SEC124

> b) Why does my Exec-Program-Wait always give me this error regardless of
> what I execute

The program executed by Exec-Program-Wait must fulfill a number
of requirements. It cannot just print arbitrary data to stdout
and hope it will be understood. Please see

http://www.gnu.org/software/radius/manual/html_node/radius_192.html#SEC290

for the detailed description of  what this program is expected
to return and what its output must be like.

Regards,
Sergey