请教一个freeradius的问题，谢谢。 - Chinaunix

[root@Radius raddb]# radiusd -v
radiusd: FreeRADIUS Version 2.1.3, for host i686-pc-linux-gnu, built on Jan 24 2009 at 17:21:45
Copyright (C) 1999-2008 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License.
For more information about these matters, see the file named COPYRIGHT.
[root@Radius raddb]#

复制代码

[root@Radius ~]# radtest test test 127.0.0.1:1812 2001 testing123
Sending Access-Request of id 75 to 127.0.0.1 port 1812
User-Name = "test"
User-Password = "test"
NAS-IP-Address = 127.0.0.1
NAS-Port = 2001
rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=75, length=20
[root@Radius ~]#

复制代码

rad_recv: Access-Request packet from host 127.0.0.1 port 37646, id=75, length=56
User-Name = "test"
User-Password = "test"
NAS-IP-Address = 127.0.0.1
NAS-Port = 2001
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "test", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
++[unix] returns updated
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
++[pap] returns updated
Found Auth-Type = PAP
+- entering group PAP {...}
[pap] login attempt with password "test"
[pap] Using CRYPT encryption.
[pap] User authenticated successfully
++[pap] returns ok
+- entering group post-auth {...}
++[exec] returns noop
Sending Access-Accept of id 75 to 127.0.0.1 port 37646
Finished request 1.
Going to the next request
Waking up in 4.9 seconds.
Cleaning up request 1 ID 75 with timestamp +107
Ready to process requests.

复制代码

"test1" Auth-Type = Local,Password == "test1"
Fall-Through = Yes

复制代码

[root@Radius ~]# radtest test1 test1 127.0.0.1:1812 2001 testing123
Sending Access-Request of id 50 to 127.0.0.1 port 1812
User-Name = "test1"
User-Password = "test1"
NAS-IP-Address = 127.0.0.1
NAS-Port = 2001
rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=50, length=20
[root@Radius ~]#

复制代码

rad_recv: Access-Request packet from host 127.0.0.1 port 52926, id=50, length=57
User-Name = "test1"
User-Password = "test1"
NAS-IP-Address = 127.0.0.1
NAS-Port = 2001
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "test1", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
++[unix] returns notfound
WARNING: Found User-Password == "...".
WARNING: Are you sure you don't mean Cleartext-Password?
WARNING: See "man rlm_pap" for more information.
[files] users: Matched entry test1 at line 61
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.
++[pap] returns noop
Found Auth-Type = Local
WARNING: Please update your configuration, and remove 'Auth-Type = Local'
WARNING: Use the PAP or CHAP modules instead.
No "known good" password was configured for the user.
As a result, we cannot authenticate the user.
Failed to authenticate the user.
Using Post-Auth-Type Reject
+- entering group REJECT {...}
[attr_filter.access_reject] expand: %{User-Name} -> test1
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 2 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 2
Sending Access-Reject of id 50 to 127.0.0.1 port 52926
Waking up in 4.9 seconds.
Cleaning up request 2 ID 50 with timestamp +418
Ready to process requests.

复制代码

test1  Cleartext-Password := "test"
   Service-Type = Framed-User,
   Framed-Protocol = PPP,
   Framed-IP-Address = 255.255.255.254,
   Framed-IP-Netmask = 255.255.255.0
DEFAULT Framed-Protocol == PPP
      Framed-Protocol = PPP,
      Framed-Compression = Van-Jacobson-TCP-IP
DEFAULT Hint == "CSLIP"
      Framed-Protocol = SLIP,
      Framed-Compression = Van-Jacobson-TCP-IP
DEFAULT Hint == "SLIP"
      Framed-Protocol = SLIP