Re: помогите определится
> Возьми исходники pppd из unstable и собери сам. IIRC, плагин для
> радиуса в Debian варианте pppd не скомпилирован.
взял, пересобрал, почти все работает, но авторизация не проходит. Вот,
что выдает freeradius в debug-mode:
Listening on IP address *, ports 1812/udp and 1813/udp, with proxy on
1814/udp. Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1:32809, id=177,
length=132 Service-Type = Framed-User
Framed-Protocol = PPP
User-Name = "test"
MS-CHAP-Challenge = 0xe3740ec2c633e91c76bbff4d4acc22ed
MS-CHAP2-Response =
0xc174b2dec7bc5377e60239985ad58c1e82000000000000000009ef28a42bd71c501af
89207a1082878449859b637ae7f7f00 NAS-IP-Address = 192.168.1.1
NAS-Port = 0
rlm_sql (sql): Reserving sql socket id: 1
rlm_sql (sql): Released sql socket id: 1
Login incorrect: [test/<no User-Password attribute>] (from client
localhost port 0) Sending Access-Reject of id 177 to 127.0.0.1:32809
MS-CHAP-Error = "\301E=691 R=1"
rad_recv: Access-Request packet from host 127.0.0.1:32809, id=178,
length=132 Service-Type = Framed-User
Framed-Protocol = PPP
User-Name = "test"
MS-CHAP-Challenge = 0x2c10812237f9ccf8a75aa54490077d66
MS-CHAP2-Response =
0xd974f0cd669e4c98ab5743c7800e958cde0000000000000000e72631c4d44e558af73
16b341ff64ef697186217339b4eb800 NAS-IP-Address = 192.168.1.1
NAS-Port = 0
rlm_sql (sql): Reserving sql socket id: 0
rlm_sql (sql): Released sql socket id: 0
Login incorrect: [test/<no User-Password attribute>] (from client
localhost port 0) Sending Access-Reject of id 178 to 127.0.0.1:32809
MS-CHAP-Error = "\331E=691 R=1"
rad_recv: Access-Request packet from host 127.0.0.1:32809, id=203,
length=56 User-Name = "test"
User-Password = "test"
NAS-IP-Address = 255.255.255.255
NAS-Port = 1645
rlm_sql (sql): Reserving sql socket id: 1
rlm_sql (sql): Released sql socket id: 1
Login OK: [test] (from client localhost port 1645)
Sending Access-Accept of id 203 to 127.0.0.1:32809
Framed-IP-Address := 10.0.1.111
Framed-Protocol := PPP
Service-Type := Framed-User
Framed-Compression := Van-Jacobson-TCP-IP
Последнее достигнуто за счет использования radtest, который работает.
Что не так? Куда копать?
Reply to: