主页 / server / 问题 / 442325
Accepted
Korjavin Ivan
Asked: 2012-10-26 07:07:26 +0800 CST

如何接受 freeradius2 中的所有连接？

  • 772

我需要设置接受任何用户名/密码的半径，并为 mpd 提供一些属性。

像这样的东西：（raddb/用户）

DEFAULT Framed-Protocol == PPP                                                                                    
    Service-Type = Framed-User,                                                                                   
    mpd-limit = "out#1=all shape 10240000 pass ",                                                                 
    mpd-limit += "in#1=all rate-limit 2048000 pass",                                                              
    Framed-Pool = "local"

我不关心 auth 、 username 和其他，因为它的备份 radius 和它的任务在我们维护“主要”radiusd 时接受所有连接。

我尝试在可用站点/默认站点中对所有内容进行评论，

我尝试添加 DEFAULT Auth-Type = Accept

我尝试使用 Exec-Program-Wait = 程序总是返回 ok

但是 radius 总是从 mschap 组返回 REJECT，就像这样：

# Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
+- entering group authorize {...}
++[chap] returns noop
[mschap] Found MS-CHAP attributes.  Setting 'Auth-Type  = mschap'
++[mschap] returns ok
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
[files] users: Matched entry DEFAULT at line 208
++[files] returns ok
Found Auth-Type = MSCHAP
# Executing group from file /usr/local/etc/raddb/sites-enabled/default
+- entering group MS-CHAP {...}
[mschap] No Cleartext-Password configured.  Cannot create LM-Password.
[mschap] No Cleartext-Password configured.  Cannot create NT-Password.
[mschap] Creating challenge hash with username: test
[mschap] Client is using MS-CHAPv2 for test, we need NT-Password
[mschap] FAILED: No NT/LM-Password.  Cannot perform authentication.
[mschap] FAILED: MS-CHAP2-Response is incorrect
++[mschap] returns reject
Failed to authenticate the user.
Login incorrect: [test] (from client localhost port 2 cli 00e05290b3e3 / 00:e0:52:90:b3:e3 / em1)
Using Post-Auth-Type REJECT
# Executing group from file /usr/local/etc/raddb/sites-enabled/default
+- entering group REJECT {...}
[attr_filter.access_reject]     expand: %{User-Name} -> test
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 0
Sending Access-Reject of id 175 to 127.0.0.1 port 64198
        MS-CHAP-Error = "\001E=691 R=1"

请帮帮我。如何为所有用户名/密码设置接受？

freeradius2

1 个回答

  1. Best Answer

    您可以设置Auth-Type属性来接受请求：

    DEFAULT Auth-Type := Accept
    • 1

相关问题