Надо было всего лишь поменять местами строки
plugin radattr.so
plugin radius.so теперь новая проблема
Клиента кидает с 691 неправильными логин\пароль.
rad_recv: Access-Request packet from host 127.0.0.1 port 39885, id=191, length=132
Service-Type = Framed-User
Framed-Protocol = PPP
User-Name = "test"
MS-CHAP-Challenge = "o~\253\235z-1\356A\3031\224R\247\324)"
MS-CHAP2-Response = ")\000[\246\202\211\355\241\370\330\365Z;\362о─\355\030\000\000\000\000\000\000\000\000\363h\205\253|\th\322.^\306\350r\014\361\360\010\327.\324\034\332Io"
NAS-IP-Address = 127.0.0.1
NAS-Port = 0
+- entering group authorize
++[preprocess] returns ok
Exec-Program output: User-Password == "123456"
Exec-Program-Wait: value-pairs: User-Password == "123456"
Exec-Program: returned: 0
++[pre_auth] returns ok
rlm_mschap: Found MS-CHAP attributes. Setting 'Auth-Type = mschap'
++[mschap] returns ok
users: Matched entry DEFAULT at line 204
++[files] returns ok
rad_check_password: Found Auth-Type mschap
auth: type "MSCHAP"
+- entering group MS-CHAP
rlm_mschap: No Cleartext-Password configured. Cannot create LM-Password.
rlm_mschap: No Cleartext-Password configured. Cannot create NT-Password.
rlm_mschap: Told to do MS-CHAPv2 for test with NT-Password
rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication.
rlm_mschap: FAILED: MS-CHAP2-Response is incorrect
++[mschap] returns reject
auth: Failed to validate the user.
Login incorrect: [test/<via Auth-Type = mschap>] (from client localhost port 0)
Found Post-Auth-Type Reject
+- entering group REJECT
Exec-Program output:
Exec-Program: returned: 0
++[post_auth] returns ok
Delaying reject of request 0 for 1 seconds
Going to the next request
Sending delayed reject for request 0
Sending Access-Reject of id 191 to 127.0.0.1 port 39885
MS-CHAP-Error = ")E=691 R=1"
Waking up in 3.7 seconds.
Cleaning up request 0 ID 191 with timestamp +5
Ready to process requests.
кусок из radius.conf
mschap {
authtype = MS-CHAP
use_mppe = yes
require_encryption = no
require_strong = no
with_ntdomain_hack = no
}
кусок из sites-enables/abills
authorize {
preprocess
pre_auth
mschap
files
}
...
authenticate {
Auth-Type MS-CHAP {
mschap
}
вот линк на обсуждение на лоре со всеми конфигами.
http://www.linux.org.ru/forum/admin/4846355?lastmod=12729757...
