centos – Freeradius身份验证失败原因不明

前端之家收集整理的这篇文章主要介绍了centos – Freeradius身份验证失败原因不明前端之家小编觉得挺不错的,现在分享给大家,也给大家做个参考。
我按照 this instruction强制freeradius使用MysqL数据库.

并在debug mod中运行freeradius.
但它拒绝所有身份验证.

MysqL数据库

  1. MysqL> select * from radcheck;
  2. +----+----------+-----------+----+---------+
  3. | id | username | attribute | op | value |
  4. +----+----------+-----------+----+---------+
  5. | 1 | test | Password | == | test123 |
  6. | 2 | test | Auth-Type | == | Local |
  7. +----+----------+-----------+----+---------+
  8. 2 rows in set (0.02 sec)

radtest命令:

  1. # radtest test test123 localhost 0 testing123
  2. Sending Access-Request of id 235 to 127.0.0.1 port 1812
  3. User-Name = "test"
  4. User-Password = "test123"
  5. NAS-IP-Address = 127.0.0.1
  6. NAS-Port = 0
  7. Message-Authenticator = 0x00000000000000000000000000000000
  8. rad_recv: Access-Reject packet from host 127.0.0.1 port 1812,id=235,length=20

radiusd调试模式日志:

  1. rad_recv: Access-Request packet from host 127.0.0.1 port 51034,length=74
  2. User-Name = "test"
  3. User-Password = "test123"
  4. NAS-IP-Address = 127.0.0.1
  5. NAS-Port = 0
  6. Message-Authenticator = 0xbf111cbbae24fb0f0a558bfa26f53476
  7. # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  8. +- entering group authorize {...}
  9. ++[preprocess] returns ok
  10. ++[chap] returns noop
  11. ++[mschap] returns noop
  12. ++[digest] returns noop
  13. [suffix] No '@' in User-Name = "test",looking up realm NULL
  14. [suffix] No such realm "NULL"
  15. ++[suffix] returns noop
  16. [eap] No EAP-Message,not doing EAP
  17. ++[eap] returns noop
  18. ++[files] returns noop
  19. ++[expiration] returns noop
  20. ++[logintime] returns noop
  21. [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.
  22. ++[pap] returns noop
  23. ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user
  24. Failed to authenticate the user.
  25. Using Post-Auth-Type Reject
  26. # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  27. +- entering group REJECT {...}
  28. [attr_filter.access_reject] expand: %{User-Name} -> test
  29. attr_filter: Matched entry DEFAULT at line 11
  30. ++[attr_filter.access_reject] returns updated
  31. Delaying reject of request 20 for 1 seconds
  32. Going to the next request
  33. Waking up in 0.9 seconds.
  34. Sending delayed reject for request 20
  35. Sending Access-Reject of id 235 to 127.0.0.1 port 51034
  36. Waking up in 4.9 seconds.
  37. Cleaning up request 20 ID 235 with timestamp +4325
  38. Ready to process requests.
  39.  

问题在哪里,我该如何解决

可能是一个愚蠢的问题,但你有没有注释该线
  1. $INCLUDE sql.conf

猜你在找的CentOS相关文章