Re: lug-bg: Problem s Freeradius i pppd CHAP autorizaciq

[diablodh <diablodh@xxxxxxx>]

diablodh wrote:

> Проблемът над който си блъскам главата е следния :
> freeradius-0.9.3
> ppp-2.4.3 -- from source
> radius.so -- from source
> pptp-1.1.2
> mysql-4.018
> SuSE SLES x86-64
>
> options.ppp0
> ##############################
> nobsdcomp
> nodeflate
>
> #
> # We want MPPE
> #
> #mppe-40
> #mppe-128
> #mppe-stateless
> name pptpd
> proxyarp
> asyncmap 0
> passive
> nodetach
> -pap
> -mschap
> +mschap-v2
> +chap
> lcp-echo-failure 30
> lcp-echo-interval 10
> ipcp-accept-local
> ipcp-accept-remote
> ms-dns 80.72.67.190
> #plugin radius.so
>
> #We want a sane mtu/mru
> mtu 1450
> mru 1450
> connect-delay 500
> eap-timeout 5
> В тази конфигурация клиента се връзва bez problem kato autorizaciqata 
> minava prez chap-secrets radlogin sushto vrushta pravilna autorizaciq 
> prez radiusa kum bazata na mysql
> no kogato autorizaciqata na tunela mine prez  radiusa debuga vrushta 
> slednoto
> radiusd -xx
> Ready to process requests.
> rad_recv: Access-Request packet from host 127.0.0.1:32781, id=141, 
> length=73
> Thread 1 assigned request 0
> --- Walking the entire request list ---
> Thread 1 handling request 0, (1 handled so far)
> Threads: total/active/spare threads = 4/1/3
>        Nothing to do.  Sleeping until we see a request.
> Service-Type = Framed-User
>        Framed-Protocol = PPP
>        User-Name = "diablodh"
>        CHAP-Password = 0x2b3e8b2d2b3aecde1bf80474818b018361
>        NAS-IP-Address = 80.72.87.195
>        NAS-Port = 0
> modcall: entering group authorize for request 0
>  modcall[authorize]: module "preprocess" returns ok for request 0
>  rlm_chap: Setting 'Auth-Type := CHAP'
>  modcall[authorize]: module "chap" returns ok for request 0
>    rlm_realm: No '@' in User-Name = "diablodh", looking up realm NULL
>    rlm_realm: No such realm "NULL"
>  modcall[authorize]: module "suffix" returns noop for request 0
> radius_xlat:  'diablodh'
> rlm_sql (sql): sql_set_user escaped user --> 'diablodh'
> radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radcheck 
> WHERE Username = 'diablodh' ORDER BY id'
> rlm_sql (sql): Reserving sql socket id: 4
> radius_xlat:  ''
> radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radreply 
> WHERE Username = 'diablodh' ORDER BY id'
> radius_xlat:  ''
> rlm_sql (sql): Released sql socket id: 4
>  modcall[authorize]: module "sql" returns ok for request 0
>  modcall[authorize]: module "files" returns notfound for request 0
>  modcall[authorize]: module "mschap" returns noop for request 0
> modcall: group authorize returns ok for request 0
>  rad_check_password:  Found Auth-Type CHAP
> auth: type "CHAP"
> modcall: entering group Auth-Type for request 0
>  rlm_chap: login attempt by "diablodh" with CHAP password
>  rlm_chap: Using clear text password paladin for user diablodh 
> authentication.
>  rlm_chap: Pasword check failed
>  modcall[authenticate]: module "chap" returns reject for request 0
> modcall: group Auth-Type returns reject for request 0
> auth: Failed to validate the user.
> Login incorrect (rlm_chap: Wrong user password): 
> [diablodh/<CHAP-Password>] (from client localhost port 0)
> Delaying request 0 for 2 seconds
> Finished request 0
> Going to the next request
> Thread 1 waiting to be assigned a request
> rad_recv: Access-Request packet from host 127.0.0.1:32781, id=141, 
> length=73
> Sending Access-Reject of id 141 to 127.0.0.1:32781
>
> Nqakoi da ima ideq zashto radiusa ne moje da validira parolata ....
> ============================================================================ 
>
> A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
> http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara 
> Zagora
> To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
> ============================================================================ 
mysql> select * from radcheck;
+----+----------+-----------+----+---------+
| id | UserName | Attribute | op | Value   |
+----+----------+-----------+----+---------+
|  1 | diablodh | Password  | == | paladin |
+----+----------+-----------+----+---------+
mysql> select * from radreply;
+----+----------+-------------------+----+---------------+
| id | UserName | Attribute         | op | Value         |
+----+----------+-------------------+----+---------------+
|  1 | diablodh | Framed-IP-Address | := | 192.168.1.112 |
+----+----------+-------------------+----+---------------+


============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================