Re: [Help-gnu-radius] Compiling GNU Radius 1.5.0 on www.clarkconnect.com box

[Mikael Syska]

My hair is faling off .... dont think I understand this the right way
.... but here are my setup so far ...

radiusd is running ...
Mar 13 16:36:39 Main.info: Starting
Mar 13 16:36:39 Main.info: Terminating the subprocesses
Mar 13 16:36:39 Main.info: Loading configuration files.
Mar 13 16:36:39 Main.info: reading /usr/local/etc/raddb/config
Mar 13 16:36:39 Main.info: /usr/local/etc/raddb/users reloaded.
Mar 13 16:36:39 Main.info: Ready
Mar 13 16:36:39 Main.info: Ready to process requests.

trying to Auth. from the console
radauth -v syska 1234
radtest: debug: client.c:248:grad_client_send0: sending Access-Request
radtest: debug: client.c:266:grad_client_send0: server 127.0.0.1:1812
radtest: debug: send: User-Name = (STRING) syska
radtest: debug: send: NAS-IP-Address = (IPADDR) 127.0.0.1
radtest: debug: send: User-Password = (STRING)
\207\001\275\064\103\176\212\256\112\362\065\125\173\234\021k
radtest: debug: client.c:140:grad_client_recv: received Access-Reject
radtest: debug: radpdu.c:400:grad_decode_pdu: allocated radreq: 0x9a6cd80
radtest: debug: radpdu.c:415:grad_decode_pdu: Access-Reject from
127.0.0.1, id=71, length=39
radtest: debug: recv: Reply-Message = (STRING) \015\012Access denied\015\012
Authentication failed.
Access denied

so ... now I'm wondering ....

/usr/local/etc/raddb/users contains:
DEFAULT Group = "*LOCKED_ACCOUNT*",
                Auth-Type = Reject
        Reply-Message = "Your account is currently locked.\n\
Please, contact your system administrator\n"

## Default entry.
DEFAULT Auth-Type = SQL,
                Simultaneous-Use = 1
        Service-Type = Framed-User,
                Framed-Protocol = PPP

from: /var/log/radius.log:
Mar 13 16:59:47 Main.info: Starting
Mar 13 16:59:47 Main.info: Terminating the subprocesses
Mar 13 16:59:47 Main.info: Loading configuration files.
Mar 13 16:59:47 Main.info: reading /usr/local/etc/raddb/config
Mar 13 16:59:47 Main.info: /usr/local/etc/raddb/users reloaded.
Mar 13 16:59:47 Main.info: Ready
Mar 13 16:59:47 Main.info: Ready to process requests.
Mar 13 16:59:51 Auth.notice: (Access-Request local 84 "syska"): Login
incorrect [syska/1234]

I dont think I understand all that Auth ... what its actually doing ...

The reason I'm trying to configure this, I'm going to Authenticate
some users via a few Cisco Aironet 1100 if that helps ...

I'm using the default database scheme from:
http://www.gnu.org/software/radius/manual/radius.html#sqlserver-file

My tables:
attrib
calls
groups
passwd ( I have added a active char(1) column here

>From the above output, its finds my user ...

But still fails for some reason, because I'm probebly forgetting
something ... hope there are someone that have some ideas about how to
fix this ... could be really great ..

I will happely supple any additional information .... ( As I might
have forgotten something usefull )

best regards
Mikael Syska

On Thu, Mar 13, 2008 at 4:17 PM, Sergey Poznyakoff <address@hidden> wrote:
> Hi,
>
>
>  > Now I know that there actually are people on the list, are there are
>
>  Feel free to write anytime:)
>
>
>  > another question:
>  > web-radact: only used for looking at accounting or ?
>
>  Yes, it displays only accounting information.
>
>  Regards,
>  Sergey
>