Re: RADIUS (Merit) setup problem...

William Bulley (web@merit.edu)
Fri, 10 Nov 1995 11:21:05 -0500 (EST)

According to Craig A. Heilman:
>
> DEFAULT Authentication-Type = Unix-PW
> User-Service-Type = Framed-User,
> Framed-Protocol = PPP,
> Filter-Id = "unlim",
> Framed-Address = 255.255.255.254,
> Framed-MTU = 1500,
> Framed-Compression = Van-Jacobsen-TCP-IP
>
> Then I attempt to run radpwtst as follows and it fails.
> # radpwtst -p 1647 -s mendota -r 1 -u ppp -x craigh
> Password:
> Received attribute/value pair(s):
> Reply-Message = "Authentication failure\015\012"
> "craigh" authentication failed: Authentication failure
>
> Any ideas what's happening here? I have a feeling it's something to do
> with the users file but what? (Yes I did remember to HUP radiusd after
> every change to the users file).

Several things:

1) it is Service-Type not User-Service-Type and the type is Framed
not Framed-User

2) also Van-Jacobsen-TCP-IP is Van-Jacobson-TCP-IP

3) you realize that having the Service-Type on DEFAULT will prevent
the {dumb,ppp,slip}user entries from working properly

Whenever you have a problem like this, first look in the logfile.
Then (since you have that "-x" on the radiusd command) look into
the radius.debug file in the config directory (next to the clients
file, etc.) If you need more information, add a second "-x" to
the server's command line. If you can't make sense out of the
contents of the radius.debug file, send a note to me.

Regards,

web...

-- 
William Bulley, N8NXN              Senior Systems Research Programmer
Merit Network Inc.                 Domain: web@merit.edu
4251 Plymouth Road                 MaBell: (313) 764-9993
Ann Arbor, Michigan  48105-2785    Fax:    (313) 747-3185