See log file below:
FreeRADIUS Version 2.1.12, for host i686-pc-linux-gnu, built on Feb 24 2014 at 15:00:10
Copyright (C) 1999-2009 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License v2.
Starting - reading configuration files ...
(Remove for length)
... adding new socket proxy address * port 34059
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel
Listening on proxy address * port 1814
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1 port 33562, id=43, length=78
User-Name = "podojilc"
User-Password = "password"
NAS-IP-Address = 127.0.1.1
NAS-Port = 0
Message-Authenticator = 0x776f49438a2073525a02d66125b7f8de
# Executing section authorize from file /etc/freeradius/sites-enabled/yubico-default
+- entering group authorize {...}
++[preprocess] returns ok
rlm_perl: Added pair User-Name = podojilc
rlm_perl: Added pair User-Password = password
rlm_perl: Added pair NAS-Port = 0
rlm_perl: Added pair Message-Authenticator = 0x776f49438a2073525a02d66125b7f8de
rlm_perl: Added pair NAS-IP-Address = 127.0.1.1
rlm_perl: Added pair Auth-Type = Perl
++[perl] returns updated
++[chap] returns noop
++[mschap] returns noop
++[digest] returns noop
[suffix] No '@' in User-Name = "podojilc", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.
++[pap] returns noop
Found Auth-Type = Perl
# Executing group from file /etc/freeradius/sites-enabled/yubico-default
+- entering group Perl {...}
rlm_perl: Added pair User-Name = podojilc
rlm_perl: Added pair User-Password = password
rlm_perl: Added pair NAS-Port = 0
rlm_perl: Added pair NAS-IP-Address = 127.0.1.1
rlm_perl: Added pair Message-Authenticator = 0x776f49438a2073525a02d66125b7f8de
rlm_perl: Added pair Reply-Message = false
rlm_perl: Added pair Auth-Type = Perl
++[perl] returns reject
Failed to authenticate the user.
Using Post-Auth-Type Reject
# Executing group from file /etc/freeradius/sites-enabled/yubico-default
+- entering group REJECT {...}
[attr_filter.access_reject] expand: %{User-Name} -> podojilc
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Sending Access-Reject of id 43 to 127.0.0.1 port 33562
Reply-Message = "false"
Finished request 0.
Going to the next request
UPDATE:
After removing the assigned YuibKey, local authentication works successfully...It seems that when appending the OTP when testing a login it doesn't know what to do. If the password is typed incorrectly it rejects, but if the password is typed and then the OTP is added, it times out. Possible scripting error??Statistics: Posted by Mitazake — Tue Jul 01, 2014 7:13 pm
]]>