Radius +NOCAT
Chan Min Wai <[email protected]>
| Newsgroups | gmane.network.nocat |
|---|---|
| Message-ID | <[email protected]> |
Greeting all,
I'm trying to work Radius with NOCAT.
Thank to http://www.pogozone.net/projects/nocat/?#RADIUS
And I follow the list below, make some modification
http://lists.nocat.net/pipermail/nocat/2004-March/004554.html
And also for the 404 Problem
http://lists.nocat.net/pipermail/nocat/2003-October/003902.html
However now after Modification of only allow member to login,
No one can login.
I've also configure the nocat.dictionary for the freeradius.
As Below.
dictionary.nocat
===================
VENDOR NoCat 32767
BEGIN-VENDOR NoCat
ATTRIBUTE NoCat-Groups 1 string # Space
delimited list of groups
ATTRIBUTE NoCat-Groups-Admin 2 string # Space
delimited list of groups user is admin of
END-VENDOR NoCat
ldap.attrmap
===================
replyItem NoCat-Groups radiusLoginLATGroup
Anyone can clear me up somehow?
I'm That close to the finishing line.
Below is the log from freeradius. [Snipped]
==================================
modcall: group post-auth returns ok for request 0
Sending Access-Accept of id 71 to 192.168.0.23:32775
NoCat-Groups = "Member"
Idle-Timeout = 300
Framed-MTU = 1500
Service-Type = Framed-User
Finished request 0
Below is the log of nocat after login with member=1 or disabled
==============================================
[2005-02-19 13:13:13] Gateway running on port 5280.
[2005-02-19 13:13:26] Spawning child process 7431.
[2005-02-19 13:13:26] Connection to 202.73.8.65 from 202.73.8.126
[2005-02-19 13:13:26] Received notify from 202.73.8.126
[2005-02-19 13:13:26] gpg --decrypt --homedir=/usr/local/nocat/pgp
--keyring trustedkeys.gpg --no-tty --no-secmem-warning -o- returned
error message:
gpg: WARNING: unsafe ownership on homedir "/usr/local/nocat/pgp"
gpg: Signature made Sat Feb 19 13:13:22 2005 MYT using DSA key ID 25E23B88
gpg: Good signature from "AUTHCAT <[email protected]>"
[2005-02-19 13:13:26] Got auth msg:
Member ^@^@^?ÿ^A^HMember
Mac 202.73.8.126
User [email protected]
Token $1$55860487$TpgoUoJ6Mh8nh03lBuLM8/
Sessiontimeout 0
Redirect http://www.redhat.com/
Idletimeout 300
Action Permit
Mode login
Timeout 300
[2005-02-19 13:13:26] Unknown ID notify from 202.73.8.126!
[2005-02-19 13:13:26] Capturing 202.73.8.126 for
http://202.73.8.65:5280/?ticket=owGbwMvMwCR4XtknSvWRdQfj6QPCSQxOYqc%2b%2babmJqUWcTIw1P9n5IBwuHwTkzmNDIz0zI31LPQMjcy4QouBSlKSc8sTMx3yk1OLk%2fSS83P1ciu5QvKzU%2fM4VQxVTE0tzAxMLMxVQgrS80Pzvcx8MyzyMgyMc5xKfXwt9LmCU4uLM%2fPzSjJzU%2fNLSzgNuIJSUzKLUpNLODNKSgqs9PXLy8v1ilJTMhJLQGbrc3mm5KTCVBsbGHA5JpcA9XMGpBblZpZw%2beanpHLm5Kdn5nGFICnqsGdmBfsK5k9BpmfpDPOsZsybuWXvTVOWd088xX8KX2IvenCLYX7yelYGjqV1HnV%2bVTe2avXrrbtjEwsA%3d75dy
[2005-02-19 13:13:26] Notifying parent of Capture on peer 202.73.8.126
[2005-02-19 13:13:26] Got notification Capture of peer 202.73.8.126
[2005-02-19 13:13:26] Child process returned 1
Log for no member restriction access
==========================================
[2005-02-19 13:22:13] Connection to 202.73.8.65 from 202.73.8.126
[2005-02-19 13:22:13] Received notify from 202.73.8.126
[2005-02-19 13:22:13] Spawning child process 7575. [2005-02-19 13:22:14]
gpg --decrypt --homedir=/usr/local/nocat/pgp --keyring trustedkeys.gpg
--no-tty --no-secmem-warning -o- returned error message:
gpg: WARNING: unsafe ownership on homedir "/usr/local/nocat/pgp"
gpg: Signature made Sat Feb 19 13:22:03 2005 MYT using DSA key ID 25E23B88
gpg: Good signature from "AUTHCAT <[email protected]>"
[2005-02-19 13:22:14] Got auth msg:
Member ^@^@^?ÿ^A^HMember
Mac 202.73.8.126
User [email protected]
Token $1$40608397$8AiBmaBGYmvNlbvV6pHaN1
Sessiontimeout 0
Redirect http://www.scl.ameslab.gov/netpipe/paper/full.html
Idletimeout 300
Action Permit
Mode login
Timeout 300
[2005-02-19 13:22:14] User (Member Any) v. trusted (Any Member)
[2005-02-19 13:22:14] User [email protected] permitted in class Member
[2005-02-19 13:22:14] Gathering stats from firewall with cmd='stats.fw
202.73.8.126'.
[2005-02-19 13:22:14] Connecting to RADIUS server 203.115.210.254 with
Timeout 5
[2005-02-19 13:22:14] Argument "Location-ID" isn't numeric in int at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 328.
[2005-02-19 13:22:14] Use of uninitialized value in string eq at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 330.
[2005-02-19 13:22:14] Use of uninitialized value in string eq at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 330.
[2005-02-19 13:22:14] Use of uninitialized value in string eq at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 330.
[2005-02-19 13:22:14] Argument "Location-Name" isn't numeric in int at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 328.
[2005-02-19 13:22:14] Use of uninitialized value in string eq at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 330.
[2005-02-19 13:22:14] Use of uninitialized value in string eq at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 330.
[2005-02-19 13:22:14] Use of uninitialized value in string eq at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 330.
Regards,
Chan Min Wai