OpenForum RSS: freeradius - - cisco - - vpn client

freeradius - - cisco - - vpn client (Ecomak)

Tue, 21 Apr 2009 12:19:23 GMT

�� :)
�� , �� , � �� ip-��.
�� , �� Simultenous-use = 1, � �� Simultenous-use := 1
�� :). �� , �� radius.

freeradius - - cisco - - vpn client (Ecomak)

Fri, 10 Apr 2009 13:33:02 GMT

�� ...�� !
icq 348665438

freeradius - - cisco - - vpn client (Ecomak)

Fri, 10 Apr 2009 12:46:40 GMT

>��
>libdir �� ?
>� �� rlm_pap.so � rlm_chap.so

��, �� /usr/local/lib.
ls /usr/local/lib | egrep "rlm_pap.so|rlm_chap.so"
rlm_chap.so
rlm_pap.so

freeradius - - cisco - - vpn client (pavel_simple.)

Fri, 10 Apr 2009 11:28:30 GMT

>[�� ]
> authtype = CHAP
> }
> checkval {
> item-name = Calling-Station-Id
> check-name = Calling-Station-Id
> data-type = string
> }
> files {
>
>� �� ....

��-�� ....
modcall: entering group authorize for request 7
rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this.
modcall[authorize]: module "pap" returns noop for request 7
modcall[authorize]: module "chap" returns noop for request 7
modcall: leaving group authorize (returns noop) for request 7
auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user
auth: Failed to validate the user.
Login incorrect: [bfm_test/bfm_test] (from client korona port 367)

��
libdir �� ?
� �� rlm_pap.so � rlm_chap.so

freeradius - - cisco - - vpn client (Ecomak)

Fri, 10 Apr 2009 11:20:16 GMT

>�� clients.conf � users ???
>� �� -- � �� modules ��???

�� , ��, �� clients.conf � users

modules {
#
# Each module has a configuration as follows:
#
# name [ instance ] {
# config_item = value
# ...
# }
#
# The 'name' is used to load the 'rlm_name' library
# which implements the functionality of the module.
#
# The 'instance' is optional. To have two different instances
# of a module, it first must be referred to by 'name'.
# The different copies of the module are then created by
# inventing two 'instance' names, e.g. 'instance1' and 'instance2'
#
# The instance names can then be used in later configuration
# INSTEAD of the original 'name'. See the 'radutmp' configuration
# below for an example.
#
pap {
auto_header = yes
}
chap {
authtype = CHAP
}
checkval {
item-name = Calling-Station-Id

freeradius - - cisco - - vpn client (pavel_simple.)

Fri, 10 Apr 2009 11:10:51 GMT

�� clients.conf � users ???
� �� -- � �� modules ��???