Operating System - HP-UX
1833832 Members
2086 Online
110063 Solutions
New Discussion

Re: HP Radius. Auth Reject for user with Realm

 
Balsutiev Stanislav
Occasional Contributor

HP Radius. Auth Reject for user with Realm

Dear sirs,
Can you help me wtih solving next problem?

I configured Local Realm(gprs.apn) with auth from file 'gprs.apn' (this file with username and password exist in /etc/opt/aaa/), added User to it(apn_user@gprs.apn) and configured it with Auth. Type=Local, Passw Hashing = Plain Text.


But, after my NAS sent Radius Auth.Request I got following debug printout:


09:47:23 find_auth_ent: entered. realm('gprs.apn') pfx('')
User-Realm = "gprs.apn" [flags = 0x141400]
09:47:23 parse_realm2: name = 'apn_user', realm = 'gprs.apn'
09:47:23 get_vp_vend: entered. attr=0/7
09:47:23 user_find: entered. name('apn_user@gprs.apn') pfx('') prot(0) not_user_file(0)
09:47:23 user_find: entered. name('DEFAULT') pfx('') prot(0) not_user_file(0)
09:47:23 state_machine: after action: event = [logall-3.00::Start (0) iaaaUsers 36 ]
09:47:23 state_machine: current state was (0) logall-3.00::Start, now (1) logall-3.00::UsersCheck
09:47:23 state_machine: decision: action = iaaaRealm next_state = logall-3.00::Stage1 (8)
09:47:23 call_action: AATV 'iaaaRealm', type 0, value 1 and ''
09:47:23 aaa_realm: entered
09:47:23 parse_realm: entered
09:47:23 parse_realm2: entered
09:47:23 get_vp_vend: entered. attr=61/223
09:47:23 get_vp_vend: entered. attr=0/3
09:47:23 get_vp_vend: entered. attr=311/11
09:47:23 get_vp_vend: entered. attr=0/79
09:47:23 find_auth_type_ent: entered. realm('gprs.apn') pfx('') prot(2)
09:47:23 value2aatv: value(34) maps to AATV 'iaaaFile'
09:47:23 call_action: AATV 'iaaaFile', type 0, value 1 and 'gprs.apn'
09:47:23 realm_file_auth: entered
09:47:23 get_vp_vend: entered. attr=61/222
09:47:23 parse_realm: entered
09:47:23 parse_realm2: entered
09:47:23 get_vp_vend: entered. attr=61/223
09:47:23 get_vp_vend: entered. attr=0/7
09:47:23 user_find: entered. name('apn_user') pfx('gprs.apn.') prot(0) not_user_file(1)
09:47:23 user_find: entered. name('DEFAULT') pfx('gprs.apn.') prot(0) not_user_file(1)
09:47:23 state_machine: after action: event = [logall-3.00::UsersCheck (1) iaaaRealm 36 ]
09:47:23 state_machine: current state was (1) logall-3.00::UsersCheck, now (8) logall-3.00::Stage1
09:47:23 state_machine: decision: action = iaaaRealm next_state = logall-3.00::RealmCheck (9)
09:47:23 call_action: AATV 'iaaaRealm', type 0, value 0 and 'EAP.'
09:47:23 aaa_realm: entered
09:47:23 parse_realm: entered
09:47:23 parse_realm2: entered
09:47:23 get_vp_vend: entered. attr=61/223
09:47:23 get_vp_vend: entered. attr=0/3
09:47:23 get_vp_vend: entered. attr=311/11
09:47:23 get_vp_vend: entered. attr=0/79
09:47:23 find_auth_type_ent: entered. realm('gprs.apn') pfx('EAP.') prot(2)
09:47:23 value2aatv: value(32) maps to AATV 'iaaaAuthenticate'
09:47:23 call_action: AATV 'iaaaAuthenticate', type 0, value 0 and 'gprs.apn'
09:47:23 get_vp_vend: entered. attr=0/79
09:47:23 get_vp_vend: entered. attr=0/2
09:47:23 do_pap_chap: No password configured
09:47:23 state_machine: after action: event = [logall-3.00::Stage1 (8) iaaaRealm -1 EAP.]
09:47:23 state_machine: current state was (8) logall-3.00::Stage1, now (9) logall-3.00::RealmCheck
09:47:23 state_machine: decision: action = REPLY next_state = logall-3.00::Hold (6)
09:47:23 call_action: AATV 'REPLY', type 1, value 0 and ''
09:47:23 rad_reply: entered
09:47:23 free_event_list: entered
09:47:23 protocol_check: entered
09:47:23 get_vp_vend: entered. attr=0/79
09:47:23 get_vp_vend: entered. attr=0/7
09:47:23 get_vp_vend: entered. attr=0/18
Reply-Message = "Authentication failure" [flags = 0x40000]


And Auth Fail for PPP connection from GPRS terminal.

So, the question is - why Radius Server rejects Authentication? Is is just only because it can't process Password format or the problem is it looks for password in wrong path?

Thank you in advance!
1 REPLY 1
Balsutiev Stanislav
Occasional Contributor

Re: HP Radius. Auth Reject for user with Realm

I read and tried to understand what HP guies wanted to say. Hopefully after several attempts it became clear.
Thanks anyway!