Re: Start FreeRadius 4.0 with rlm_tacacs failed due to segV error

Alan DeKok <[email protected]>
Newsgroups gmane.comp.freeradius.user
Message-ID <[email protected]>
On Apr 25, 2025, at 5:18 AM, bryan xiang <[email protected]> wrote:
> I have some good progress, but still failed in last step, seems TACACS
> server already send pass to FreeRadius, but FreeRadius report one error and
> reject the request:
> ...
> Debug : (0.0)        tacacs - Received Authentication-Pass ID 2 length 18
> reply packet on connection proto tcp local 0.0.0.0 port 0 remote
> 10.76.89.50 port 49
> ...
> Error : tacacs - Connection proto tcp local 0.0.0.0 port 0 remote
> 10.76.89.50 port 49 failed: No additional error information

  I suspect that the other end just closed the connection after one packet.  This is actually normal for TACACS+.

> ...
> Debug : (0)    } # recv Access-Request (ok)
> Debug : (0)    No 'Auth-Type' attribute found, cannot authenticate the user
> - rejecting the request

  So... configure FreeRADIUS to authenticate the user?  i.e. uif the TACACS+ module returns "ok", set Auth-Type = Accept.

  Alan DeKok.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.