Operating System - HP-UX
1833310 Members
2907 Online
110051 Solutions
New Discussion

HP Radius. Auth Reject for user with Realm

 
Balsutiev Stanislav
Occasional Contributor

HP Radius. Auth Reject for user with Realm

Dear sirs,
Can you help me wtih solving next problem?

I configured Local Realm(gprs.apn) with auth from file 'gprs.apn' (this file with username and password exist in /etc/opt/aaa/), added User to it(apn_user@gprs.apn) and configured it with Auth. Type=Local, Passw Hashing = Plain Text.


But, after my NAS sent Radius Auth.Request I got following debug printout:


09:47:23 find_auth_ent: entered. realm('gprs.apn') pfx('')
User-Realm = "gprs.apn" [flags = 0x141400]
09:47:23 parse_realm2: name = 'apn_user', realm = 'gprs.apn'
09:47:23 get_vp_vend: entered. attr=0/7
09:47:23 user_find: entered. name('apn_user@gprs.apn') pfx('') prot(0) not_user_file(0)
09:47:23 user_find: entered. name('DEFAULT') pfx('') prot(0) not_user_file(0)
09:47:23 state_machine: after action: event = [logall-3.00::Start (0) iaaaUsers 36 ]
09:47:23 state_machine: current state was (0) logall-3.00::Start, now (1) logall-3.00::UsersCheck
09:47:23 state_machine: decision: action = iaaaRealm next_state = logall-3.00::Stage1 (8)
09:47:23 call_action: AATV 'iaaaRealm', type 0, value 1 and ''
09:47:23 aaa_realm: entered
09:47:23 parse_realm: entered
09:47:23 parse_realm2: entered
09:47:23 get_vp_vend: entered. attr=61/223
09:47:23 get_vp_vend: entered. attr=0/3
09:47:23 get_vp_vend: entered. attr=311/11
09:47:23 get_vp_vend: entered. attr=0/79
09:47:23 find_auth_type_ent: entered. realm('gprs.apn') pfx('') prot(2)
09:47:23 value2aatv: value(34) maps to AATV 'iaaaFile'
09:47:23 call_action: AATV 'iaaaFile', type 0, value 1 and 'gprs.apn'
09:47:23 realm_file_auth: entered
09:47:23 get_vp_vend: entered. attr=61/222
09:47:23 parse_realm: entered
09:47:23 parse_realm2: entered
09:47:23 get_vp_vend: entered. attr=61/223
09:47:23 get_vp_vend: entered. attr=0/7
09:47:23 user_find: entered. name('apn_user') pfx('gprs.apn.') prot(0) not_user_file(1)
09:47:23 user_find: entered. name('DEFAULT') pfx('gprs.apn.') prot(0) not_user_file(1)
09:47:23 state_machine: after action: event = [logall-3.00::UsersCheck (1) iaaaRealm 36 ]
09:47:23 state_machine: current state was (1) logall-3.00::UsersCheck, now (8) logall-3.00::Stage1
09:47:23 state_machine: decision: action = iaaaRealm next_state = logall-3.00::RealmCheck (9)
09:47:23 call_action: AATV 'iaaaRealm', type 0, value 0 and 'EAP.'
09:47:23 aaa_realm: entered
09:47:23 parse_realm: entered
09:47:23 parse_realm2: entered
09:47:23 get_vp_vend: entered. attr=61/223
09:47:23 get_vp_vend: entered. attr=0/3
09:47:23 get_vp_vend: entered. attr=311/11
09:47:23 get_vp_vend: entered. attr=0/79
09:47:23 find_auth_type_ent: entered. realm('gprs.apn') pfx('EAP.') prot(2)
09:47:23 value2aatv: value(32) maps to AATV 'iaaaAuthenticate'
09:47:23 call_action: AATV 'iaaaAuthenticate', type 0, value 0 and 'gprs.apn'
09:47:23 get_vp_vend: entered. attr=0/79
09:47:23 get_vp_vend: entered. attr=0/2
09:47:23 do_pap_chap: No password configured
09:47:23 state_machine: after action: event = [logall-3.00::Stage1 (8) iaaaRealm -1 EAP.]
09:47:23 state_machine: current state was (8) logall-3.00::Stage1, now (9) logall-3.00::RealmCheck
09:47:23 state_machine: decision: action = REPLY next_state = logall-3.00::Hold (6)
09:47:23 call_action: AATV 'REPLY', type 1, value 0 and ''
09:47:23 rad_reply: entered
09:47:23 free_event_list: entered
09:47:23 protocol_check: entered
09:47:23 get_vp_vend: entered. attr=0/79
09:47:23 get_vp_vend: entered. attr=0/7
09:47:23 get_vp_vend: entered. attr=0/18
Reply-Message = "Authentication failure" [flags = 0x40000]


And Auth Fail for PPP connection from GPRS terminal.

So, the question is - why Radius Server rejects Authentication? Is is just only because it can't process Password format or the problem is it looks for password in wrong path?

Thank you in advance!
1 REPLY 1
Balsutiev Stanislav
Occasional Contributor

Re: HP Radius. Auth Reject for user with Realm

I read and tried to understand what HP guies wanted to say. Hopefully after several attempts it became clear.
Thanks anyway!