WAP +Radius

From: Gabriel Granger (gabe_at_pancentric.com)
Date: 08/31/04

Next message: Youngster: "unsubscribe"

Previous message: Jacob S.: "Re: Make-Kpkg SMP"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

To: debian-user@lists.debian.org
Date: Tue, 31 Aug 2004 17:45:07 +0100

Hi all,

Has anyone tried to setup a WAP using Radius to authenticate users? I'm
using FreeRadius and a Belkin F5D7130, my test machine is a Apple
powerbook with airport extreme card. When i try to connect to my WAP
I'm telling that I'm using WEP-Enterprise and supplying the username /
password and the WAP name

I'm running a DHCP server on my debian server, all I'm wanting todo is
get the users authenticated from radius and then my linux box to assign
the IP addresses. I had this working with the standard WEP, as soon as
I changed my belkin router to use Radius I get errors.

I really dont know enough about how all this works, but I've added a
user into the "users" file

steve Auth-Type := EAP, User-Password == "testing"
                Service-Type = Framed-User,
                Framed-Protocol = PPP,
                Framed-IP-Address = xxx.xxx.xxx.xxx,
                Framed-IP-Netmask = 255.255.255.0,
                Framed-Routing = Broadcast-Listen,
                Framed-Filter-Id = "std.ppp",
                Framed-MTU = 1500,
                Framed-Compression = Van-Jacobsen-TCP-IP

Is there some special config needed in radiusd.conf that needs to be
added to EAP section? do I need to use EAP? I want to avoid
certificates on server and client, I would ideally want to use simple
user / password authentication if possible. I thing the line where is
getting caught out is. I could be complete wrong (which is suspect)
any advise would be great

"rlm_eap: EAP Start not found"

/usr/sbin/freeradius -xx (output)

rad_recv: Access-Request packet from host xxx.xxx.xxx.xxx:2048, id=0,
length=123
Thread 2 assigned request 6
--- Walking the entire request list ---
Threads: total/active/spare threads = 5/1/4
Waking up in 5 seconds...
Thread 2 handling request 6, (2 handled so far)
         User-Name = "steve"
         NAS-IP-Address = xxx.xxx.xxx.xxx
         Called-Station-Id = "0030bd9bbf25"
         Calling-Station-Id = "000393ec89e0"
         NAS-Identifier = "0030bd9bbf25"
         NAS-Port = 133
         Framed-MTU = 1400
         NAS-Port-Type = Wireless-802.11
         EAP-Message = 0x0200000a017374657665
         Message-Authenticator = 0x6a134e8dcac69a6d3ec2293af940a0af
modcall: entering group authorize for request 6
   modcall[authorize]: module "preprocess" returns ok for request 6
   modcall[authorize]: module "chap" returns noop for request 6
   rlm_eap: EAP packet type notification id 0 length 10
   rlm_eap: EAP Start not found
   modcall[authorize]: module "eap" returns updated for request 6
     rlm_realm: No '@' in User-Name = "steve", looking up realm NULL
     rlm_realm: Found realm "NULL"
     rlm_realm: Adding Stripped-User-Name = "steve"
     rlm_realm: Proxying request from user steve to realm NULL
     rlm_realm: Adding Realm = "NULL"
     rlm_realm: Authentication realm is LOCAL.
   modcall[authorize]: module "suffix" returns noop for request 6
     users: Matched DEFAULT at 152
     users: Matched steve at 216
   modcall[authorize]: module "files" returns ok for request 6
   modcall[authorize]: module "mschap" returns noop for request 6
modcall: group authorize returns updated for request 6
   rad_check_password: Found Auth-Type EAP
auth: type "EAP"
modcall: entering group authenticate for request 6
   rlm_eap: list_clean deleted one item
   rlm_eap: EAP packet type notification id 0 length 10
   rlm_eap: EAP Start not found
   rlm_eap: EAP Identity
   rlm_eap: processing type md5
rlm_eap_md5: Issuing Challenge
   modcall[authenticate]: module "eap" returns ok for request 6
modcall: group authenticate returns ok for request 6
Sending Access-Challenge of id 0 to xxx.xxx.xxx.xxx:2048
         Service-Type = Framed-User
         Framed-Protocol = PPP
         Framed-IP-Address = xxx.xxx.xxx.xxx
         Framed-IP-Netmask = 255.255.255.0
         Framed-Routing = Broadcast-Listen
         Framed-Filter-Id = "std.ppp"
         Framed-MTU = 1500
         Framed-Compression = Van-Jacobson-TCP-IP
         EAP-Message = 0x010100160410f8e2f77cbb0a59ee9c94469c5c1f6ebb
         Message-Authenticator = 0x00000000000000000000000000000000
         State =
0x8c84d25021d7fa8dcfa42552d4ad1b47bd8d3441a05c5caa73c81b505062e1c7f44191
f8
Finished request 6
Going to the next request
Thread 2 waiting to be assigned a request
rad_recv: Access-Request packet from host xxx.xxx.xxx.xxx:2048, id=0,
length=157
Thread 3 assigned request 7
rl_next: returning NULL
Waking up in 5 seconds...
Thread 3 handling request 7, (2 handled so far)
         User-Name = "steve"
         NAS-IP-Address = xxx.xxx.xxx.xxx
         Called-Station-Id = "0030bd9bbf25"
         Calling-Station-Id = "000393ec89e0"
         NAS-Identifier = "0030bd9bbf25"
         NAS-Port = 133
         Framed-MTU = 1400
         State =
0x8c84d25021d7fa8dcfa42552d4ad1b47bd8d3441a05c5caa73c81b505062e1c7f44191
f8
         NAS-Port-Type = Wireless-802.11
         EAP-Message = 0x020100060319
         Message-Authenticator = 0x211a6ccf3d330095a28ffadf23df4e26
modcall: entering group authorize for request 7
   modcall[authorize]: module "preprocess" returns ok for request 7
   modcall[authorize]: module "chap" returns noop for request 7
   rlm_eap: EAP packet type notification id 1 length 6
   rlm_eap: EAP Start not found
   modcall[authorize]: module "eap" returns updated for request 7
     rlm_realm: No '@' in User-Name = "steve", looking up realm NULL
     rlm_realm: Found realm "NULL"
     rlm_realm: Adding Stripped-User-Name = "steve"
     rlm_realm: Proxying request from user steve to realm NULL
     rlm_realm: Adding Realm = "NULL"
     rlm_realm: Authentication realm is LOCAL.
   modcall[authorize]: module "suffix" returns noop for request 7
     users: Matched DEFAULT at 152
     users: Matched steve at 216
   modcall[authorize]: module "files" returns ok for request 7
   modcall[authorize]: module "mschap" returns noop for request 7
modcall: group authorize returns updated for request 7
   rad_check_password: Found Auth-Type EAP
auth: type "EAP"
modcall: entering group authenticate for request 7
   rlm_eap: EAP packet type notification id 1 length 6
   rlm_eap: EAP Start not found
   rlm_eap: Request found, released from the list
   rlm_eap: EAP NAK
   rlm_eap: Unknown EAP type 25, reverting to default_eap_type
   rlm_eap: processing type md5
rlm_eap_md5: Issuing Challenge
   modcall[authenticate]: module "eap" returns ok for request 7
modcall: group authenticate returns ok for request 7
Sending Access-Challenge of id 0 to xxx.xxx.xxx.xxx:2048
         Service-Type = Framed-User
         Framed-Protocol = PPP
         Framed-IP-Address = xxx.xxx.xxx.xxx
         Framed-IP-Netmask = 255.255.255.0
         Framed-Routing = Broadcast-Listen
         Framed-Filter-Id = "std.ppp"
         Framed-MTU = 1500
         Framed-Compression = Van-Jacobson-TCP-IP
         EAP-Message = 0x0102001604106885b52fab8da68533d93886d2ae8f73
         Message-Authenticator = 0x00000000000000000000000000000000
         State =
0x8561952572245a678247cdb45e41182abd8d3441abb8a4fd064d50c41d09263c5551f5
3a
Finished request 7
Going to the next request
Thread 3 waiting to be assigned a request
rad_recv: Access-Request packet from host xxx.xxx.xxx.xxx:2048, id=0,
length=157
Thread 4 assigned request 8
rl_next: returning NULL
Waking up in 5 seconds...
Thread 4 handling request 8, (2 handled so far)
         User-Name = "steve"
         NAS-IP-Address = xxx.xxx.xxx.xxx
         Called-Station-Id = "0030bd9bbf25"
         Calling-Station-Id = "000393ec89e0"
         NAS-Identifier = "0030bd9bbf25"
         NAS-Port = 133
         Framed-MTU = 1400
         State =
0x8561952572245a678247cdb45e41182abd8d3441abb8a4fd064d50c41d09263c5551f5
3a
         NAS-Port-Type = Wireless-802.11
         EAP-Message = 0x020200060315
         Message-Authenticator = 0x5820389ad25938e3b8f864f7d015a337
modcall: entering group authorize for request 8
   modcall[authorize]: module "preprocess" returns ok for request 8
   modcall[authorize]: module "chap" returns noop for request 8
   rlm_eap: EAP packet type notification id 2 length 6
   rlm_eap: EAP Start not found
   modcall[authorize]: module "eap" returns updated for request 8
     rlm_realm: No '@' in User-Name = "steve", looking up realm NULL
     rlm_realm: Found realm "NULL"
     rlm_realm: Adding Stripped-User-Name = "steve"
     rlm_realm: Proxying request from user steve to realm NULL
     rlm_realm: Adding Realm = "NULL"
     rlm_realm: Authentication realm is LOCAL.
   modcall[authorize]: module "suffix" returns noop for request 8
     users: Matched DEFAULT at 152
     users: Matched steve at 216
   modcall[authorize]: module "files" returns ok for request 8
   modcall[authorize]: module "mschap" returns noop for request 8
modcall: group authorize returns updated for request 8
   rad_check_password: Found Auth-Type EAP
auth: type "EAP"
modcall: entering group authenticate for request 8
   rlm_eap: EAP packet type notification id 2 length 6
   rlm_eap: EAP Start not found
   rlm_eap: Request found, released from the list
   rlm_eap: EAP NAK
   rlm_eap: Unknown EAP type 21, reverting to default_eap_type
   rlm_eap: processing type md5
rlm_eap_md5: Issuing Challenge
   modcall[authenticate]: module "eap" returns ok for request 8
modcall: group authenticate returns ok for request 8
Sending Access-Challenge of id 0 to xxx.xxx.xxx.xxx:2048
         Service-Type = Framed-User
         Framed-Protocol = PPP
         Framed-IP-Address = xxx.xxx.xxx.xxx
         Framed-IP-Netmask = 255.255.255.0
         Framed-Routing = Broadcast-Listen
         Framed-Filter-Id = "std.ppp"
         Framed-MTU = 1500
         Framed-Compression = Van-Jacobson-TCP-IP
         EAP-Message = 0x0103001604106112f44f269377ed00e2f9b522d32d00
         Message-Authenticator = 0x00000000000000000000000000000000
         State =
0x9e2f1529e86688ee9d8e11537bcf9fddbd8d344173f695259edb069e60a308298786ef
cb
Finished request 8
Going to the next request
Thread 4 waiting to be assigned a request
--- Walking the entire request list ---
Threads: total/active/spare threads = 5/0/5
Waking up in 1 seconds...
--- Walking the entire request list ---
Cleaning up request 8 ID 0 with timestamp 41348dbd
Nothing to do. Sleeping until we see a request.

-- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Next message: Youngster: "unsubscribe"

Previous message: Jacob S.: "Re: Make-Kpkg SMP"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Relevant Pages

OT: Problems with radiusd and EAP-PEAP
... I keep trying in order to radius authenticate and authorize users from XP. ... Module: Loaded eap ... leaving group authorize for request 0 ...
(Debian-User)
OT:Problems with radiusd and EAP-PEAP
... I keep trying in order to radius authenticate and authorize users ... Module: Loaded eap ... leaving group authorize for request 0 ...
(Ubuntu)
Active Directory authentication issue with ASP.NET & IIS
... Trying to authenticate users on AD to access files on fileserver using ... Successfully can log to asp.net pages on IIS with proper AD user ... granting access rights to the resource to the ASP.NET request identity. ...
(microsoft.public.dotnet.framework.aspnet)
Re: Flaws IIS6 with AD (2003) Cert Mapping
... authentication over https, then when they request a user cert, the CA fills ... the certificate in place of the username/password authentication. ... authenticate users, it's the Subject Alternative information with the UPN ...
(microsoft.public.inetserver.iis.security)
WPA and EAP-TTLS oddity
... modcall: leaving group authorize for request 5 ... leaving group authenticate for request 5 ...
(freebsd-questions)