您好，我正在尝试让FreeRADIUS v3安装程序从我的思科设备进行身份validation。 我目前正在运行CentOS 7.3。
这是我在我的用户文件中：
test1 Cleartext-Password := "hello" Service-Type = Administrative-User, Auth-Type := Accept, Reply-Message := "Hello, %{User-Name}", Cisco-AVPair = "shell:roles=network-admin", Cisco-AVPair = "shell:priv-lvl=15" 这是我的客户configuration：
clients network-equipment { ipaddr = 10.150.1.0/24 secret = Infotech5! nas_type = cisco shortname = network-equipment } clients linux-servers { ipaddr = 10.150.10.0/24 secret = Infotech5! proto = * nas_type = other shortname = linux-servers }
其他一切都是默认的。
这里是debugging输出日志：
Ready to process requests Waking up in 0.3 seconds. (1) Received Access-Request packet from host 10.150.1.213 port 1645, id=11, length=98 (1) User-Name = 'test1' (1) Reply-Message = 'Password: ' (1) User-Password = '\305ɥ\273\306\335\026\257l{\033)z\017\343o' (1) NAS-Port = 1 (1) NAS-Port-Type = Virtual (1) Calling-Station-Id = '10.150.1.250' (1) NAS-IP-Address = 10.150.1.213 (1) NAS-Identifier = 'ASMCAP1' (1) # Executing section authorize from file /etc/raddb/sites-enabled/default (1) # Executing group from file /etc/raddb/sites-enabled/default (1) pap : Login attempt with password (1) ERROR: pap : Cleartext password does not match "known good" password (1) pap : Passwords don't match (1) # Executing group from file /etc/raddb/sites-enabled/default Waking up in 0.6 seconds. (1) Sending Access-Reject packet to host 10.150.1.213 port 1645, id=11, length=0 (1) Reply-Message = 'Hello, test1' Waking up in 3.9 seconds. Ready to process requests Waking up in 0.3 seconds. (2) Received Access-Request packet from host 10.150.1.213 port 1645, id=11, length=98 (2) User-Name = 'test1' (2) Reply-Message = 'Password: ' (2) User-Password = '\305ɥ\273\306\335\026\257l{\033)z\017\343o' (2) NAS-Port = 1 (2) NAS-Port-Type = Virtual (2) Calling-Station-Id = '10.150.1.250' (2) NAS-IP-Address = 10.150.1.213 (2) NAS-Identifier = 'ASMCAP1' (2) # Executing section authorize from file /etc/raddb/sites-enabled/default (2) # Executing group from file /etc/raddb/sites-enabled/default (2) pap : Login attempt with password (2) ERROR: pap : Cleartext password does not match "known good" password (2) pap : Passwords don't match (2) # Executing group from file /etc/raddb/sites-enabled/default Waking up in 0.6 seconds. (2) Sending Access-Reject packet to host 10.150.1.213 port 1645, id=11, length=0 (2) Reply-Message = 'Hello, test1' Waking up in 3.9 seconds.
我不明白为什么我得到一个被拒绝的数据包。