[Modules] mod_auth_xradius cannot communicate with FreeRadius server
Edward Rudd
urkle at outoforder.cc
Tue Jul 21 09:53:47 EDT 2009
what version of apache httpd are you using?
from the error, it looks like it's not understanding "valid_user" and
is treating it as a userID.
Have you run httpd in LogLevel debug?
On Jul 16, 2009, at 8:50 AM, Justin Mitchell wrote:
> I am experiencing a problem with the module not sending requests
> to my radius server. I am getting prompted for a UID and password
> but after entering valid information the prompt immediately returns
> a 401 error. Running my radius in debug confirms that the service
> is never polling the radius server for authentication.
> The freeradius server is on the same host as the apache so this is
> not a networking issue. I am also certain that this is not a radius
> issue since the service is functioning for other applications. The
> module is loading properly and the error logs are less than
> helpful. Apache error log states the following :
>
> access to / failed, reason: verification of user id 'valid_user' not
> configured
>
> Below is the section of my httpd.conf file that pertains to this
> module. Can anyone tell me what I have done wrong? I copied the
> example config from the website as a template so it’s a little wordy.
>
> ## This Loads mod_auth_xradius into Apache
> LoadModule auth_xradius_module modules/mod_auth_xradius.so
>
> ## The Cache for mod_auth_xradius must be configured globally.
> ## If you do not want Authentication Caching, set:
> # AuthXRadiusCache none -
>
> ## A Local DBM Based Cache (low performance)
> # AuthXRadiusCache dbm "conf/auth_xradius_cache"
>
> ## Only a Single memcached Server
> # AuthXRadiusCache memcache "127.0.0.1"
> ## Multiple memcached Servers
> # AuthXRadiusCache memcache "127.0.0.1 10.0.0.10 10.0.0.11
> 10.0.0.11:11212"
>
> ## Time in Seconds that an entry will be cached.
> # AuthXRadiusCacheTimeout 300
>
> <Directory "/var/www/html/">
> ## All of the directives inside the <Directory> block can be
> placed
> ## inside '.htaccess' files.
>
> ## This is what the client sees in their Prompt.
> AuthName "Private Area"
>
> ## Type of authentication to use.
> AuthType basic
>
> ## Address and the Shared Secret of the RADIUS Server to
> contact.
> AuthXRadiusAddServer "localhost:1812" "valid-secret"
> ## Multiple Servers can be added in the same context.
> # AuthXRadiusAddServer "10.0.0.10:1812" "2secrets"
> # AuthXRadiusAddServer "10.0.0.11:1812" "secret1"
>
> ## Time in Seconds to wait for replies from the RADIUS Servers
> AuthXRadiusTimeout 2
>
> ## Number of times to resend a request to a server if no reply is
> received.
> AuthXRadiusRetries 2
>
> ## This tells apache that we want a valid user and password.
> require valid-user
> </Directory>
>
>
>
> Thank you,
>
> Justin Mitchell
> Systems Administrator
> Shentel Communications Company
> 540.984.5522
>
> _______________________________________________
> Modules mailing list
> Modules at lists.outoforder.cc
> http://lists.outoforder.cc/mailman/listinfo/modules
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.outoforder.cc/pipermail/modules/attachments/20090721/71b37511/attachment.html
More information about the Modules
mailing list