在Debian 8.9上安装freeradius后，我试图validation广告中的现有用户，但是我有一些错误，我不明白为什么花了很长时间去debugging后，我意识到我需要帮助
这是我试图做的testing
radtest test .CPNV-123 localhost 0 testing123 这是我使用freeradius -X命令时的输出
rad_recv: Access-Request packet from host 127.0.0.1 port 32787, id=199, length=80 User-Name = "test" User-Password = ".CPNV-123" NAS-IP-Address = 172.20.1.20 NAS-Port = 1812 Message-Authenticator = 0xb3ca6f144d934df985672ac767afe945 Framed-Protocol = PPP # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] No '@' in User-Name = "test", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] = noop [eap] No EAP-Message, not doing EAP ++[eap] = noop [files] users: Matched entry DEFAULT at line 1 ++[files] = ok ++[expiration] = noop ++[logintime] = noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] = noop +} # group authorize = ok Found Auth-Type = ntlm_auth # Executing group from file /etc/freeradius/sites-enabled/default +group ntlm_auth { [ntlm_auth] expand: --username=%{mschap:User-Name} -> --username=test [ntlm_auth] expand: --password=%{User-Password} -> --password=.CPNV-123 WARNING: The "idmap uid" option is deprecated WARNING: The "idmap gid" option is deprecated Exec output: NT_STATUS_NO_SUCH_USER: No such user (0xc0000064) Exec plaintext: NT_STATUS_NO_SUCH_USER: No such user (0xc0000064) [ntlm_auth] Exec: program returned: 1 ++[ntlm_auth] = reject +} # group ntlm_auth = reject Failed to authenticate the user. Using Post-Auth-Type REJECT # Executing group from file /etc/freeradius/sites-enabled/default +group REJECT { [attr_filter.access_reject] expand: %{User-Name} -> test attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] = updated +} # group REJECT = updated Delaying reject of request 3 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 3 Sending Access-Reject of id 199 to 127.0.0.1 port 32787 Waking up in 4.9 seconds. Cleaning up request 3 ID 199 with timestamp +628 Ready to process requests.
这是一个输出我的winbind -SFd5命令
[ 2677]: request interface version (version = 27) [ 2677]: request location of privileged pipe [ 2677]: request misc info [ 2677]: pam auth RADIUS+test child daemon request 13 [ 2435]: dual pam auth RADIUS+test attempting to make a user_info for test (test) making strings for test's user_info struct making blobs for test's user_info struct Making default auth method list for server role = 'domain member' load_auth_module: Attempting to find an auth method to match guest load_auth_module: auth method guest has a valid init load_auth_module: Attempting to find an auth method to match sam load_auth_module: auth method sam has a valid init load_auth_module: Attempting to find an auth method to match winbind:ntdomain load_auth_module: Attempting to find an auth method to match ntdomain load_auth_module: auth method ntdomain has a valid init load_auth_module: auth method winbind has a valid init check_ntlm_password: Checking password for unmapped user [RADIUS]\[test]@[RADIUS] with the new password interface check_ntlm_password: mapped user is: [RADIUS]\[test]@[RADIUS] [0000] A0 E0 F9 B0 DE 6B 96 C2 .....k.. pdb_getsampwnam (TDB): error fetching database. Key: USER_test check_sam_security: Couldn't find user 'test' in passdb. check_ntlm_password: sam authentication for user [test] FAILED with error NT_STATUS_NO_SUCH_USER check_ntlm_password: Authentication for user [test] -> [test] FAILED with error NT_STATUS_NO_SUCH_USER Plain-text authentication for user RADIUS+test returned NT_STATUS_NO_SUCH_USER (PAM: 10) Finished processing child request 13 child daemon request 20 [ 2435]: list trusted domains samr: trusted domains Create pipe requested lsarpc Created internal pipe lsarpc _lsa_OpenPolicy2: ACCESS should be DENIED (requested: 0x000f0fff) but overritten by euid == initial uid _lsa_OpenPolicy2: access GRANTED (requested: 0x000f0fff, granted: 0x000f0fff) Finished processing child request 20 Already reaped child 2718 died child daemon request 20 [ 2435]: list trusted domains samr: trusted domains Create pipe requested lsarpc Created internal pipe lsarpc _lsa_OpenPolicy2: ACCESS should be DENIED (requested: 0x000f0fff) but overritten by euid == initial uid _lsa_OpenPolicy2: access GRANTED (requested: 0x000f0fff, granted: 0x000f0fff) Finished processing child request 20
如果需要，我可以发布configuration文件的内容，我在一个没有机密内容的testing实验室工作
最好的祝福
安德烈