Messages

1

Installation and Upgrades / Re: HowTo: add radius module with mschap support to zentyal 4.0, 4.2, 5.0

« on: October 30, 2017, 11:44:42 am »

bad news:
Mikrotik using for login, CHAP auth. with clear text password,
this combination of auth. under zentyal LDAP not supported (PEAP-MSCHAPv2+MD5).

And is there a possibility to disable LDAP so this will work?

2

Installation and Upgrades / Re: HowTo: add radius module with mschap support to zentyal 4.0, 4.2, 5.0

« on: October 29, 2017, 02:07:29 pm »

please create new client under Radius - General configuration:
IP Address: 127.0.0.1/32
Shared Secret: your supersecret password

test the connection on the server with (modify the username and passwords):

Code: [Select]

radtest -t mschap your_raduser raduser_password 127.0.0.1:1812 0 shared_secret_password

Login OK from local

But still not ok from Mikrotik device

3

Installation and Upgrades / Re: HowTo: add radius module with mschap support to zentyal 4.0, 4.2, 5.0

« on: October 27, 2017, 04:21:19 pm »

please try one more time with this:

Code: [Select]

sudo zs radius stop
sudo killall freeradius
sudo freeradius -XXX

There you go :-)

sorry but there is no client connection info,
please run the commands and try connecting with your client (Mikrotik device).

Oh ok, now there's client info included, tried 2 times

If it can be any help, this is what I found:

HI
I had the same problem before, my problem solved by moving some lines in /usr/local/etc/raddb/sites-enabled/default
i'm using SQL so i load SQL module and pap,chap

I've changed the lines from

chap
sql
pap

to:

sql
pap
chap

so freeradius first loads the sql and then loads the chap, so it could locate password in SQL.

But I cant find that file...

4

Installation and Upgrades / Re: HowTo: add radius module with mschap support to zentyal 4.0, 4.2, 5.0

« on: October 27, 2017, 09:28:08 am »

please try one more time with this:

Code: [Select]

sudo zs radius stop
sudo killall freeradius
sudo freeradius -XXX

There you go :-)

5

Installation and Upgrades / Re: HowTo: add radius module with mschap support to zentyal 4.0, 4.2, 5.0

« on: October 26, 2017, 02:26:57 pm »

I try to use the RADIUS server to authenticate with Mikrotik devices to Login.
I have added the devices to the Radius clients, and added a usergroup "radusers" as told in another guide.

Although, now I get the message on the radius server: "Login incorrect"   
I have checked the passwords multiple times and still I'm getting this error.

Does anybody have a clue where to look?

please post the freeradius verbose logging output during the connection:

Code: [Select]

sudo zs radius stop
sudo freeradius -XXX

Please see in attachment the full log

6

Installation and Upgrades / Re: HowTo: add radius module with mschap support to zentyal 4.0, 4.2, 5.0

« on: October 24, 2017, 06:25:43 pm »

I try to use the RADIUS server to authenticate with Mikrotik devices to Login.
I have added the devices to the Radius clients, and added a usergroup "radusers" as told in another guide.

Although, now I get the message on the radius server: "Login incorrect"   
I have checked the passwords multiple times and still I'm getting this error.

Does anybody have a clue where to look?