<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:13px"><div id="yui_3_16_0_ym19_1_1501569456582_3979">Hi,</div><div id="yui_3_16_0_ym19_1_1501569456582_4435"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4433"> I am integrating Infinera devices with radius. I have done the radius config as following:</div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4483">I am storing password in plaintext on LDAP. Can someone please hint what can be wrong in config ?</div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4432"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4079"># Infinera<br id="yui_3_16_0_ym19_1_1501569456582_4054"><AuthBy LDAP2><br id="yui_3_16_0_ym19_1_1501569456582_4055"> NoDefault<br id="yui_3_16_0_ym19_1_1501569456582_4056"> Identifier infi_user_auth<br id="yui_3_16_0_ym19_1_1501569456582_4057"> Host xxxx<br id="yui_3_16_0_ym19_1_1501569456582_4058"> Port xxxx<br id="yui_3_16_0_ym19_1_1501569456582_4059"> Timeout 60<br id="yui_3_16_0_ym19_1_1501569456582_4060"> AuthDN xxxx<br id="yui_3_16_0_ym19_1_1501569456582_4061"> AuthPassword xxxxx<br id="yui_3_16_0_ym19_1_1501569456582_4062"> BaseDN xxxxxx<br id="yui_3_16_0_ym19_1_1501569456582_4063"> Scope subtree<br id="yui_3_16_0_ym19_1_1501569456582_4064"><b id="yui_3_16_0_ym19_1_1501569456582_4097"> SearchFilter (&(access-device-type=infinera)(raduser=%1))</b><br id="yui_3_16_0_ym19_1_1501569456582_4065"><b id="yui_3_16_0_ym19_1_1501569456582_4096"> UsernameAttr raduser<br id="yui_3_16_0_ym19_1_1501569456582_4066"> PasswordAttr radpass</b><br id="yui_3_16_0_ym19_1_1501569456582_4067"><b id="yui_3_16_0_ym19_1_1501569456582_4095"> ServerChecksPassword<br id="yui_3_16_0_ym19_1_1501569456582_4068"> AuthAttrDef radpass,User-Password,check</b><br id="yui_3_16_0_ym19_1_1501569456582_4071"> AuthAttrDef my-Infinera-User-Priv-SA,Infinera-User-Priv-SA,reply<br id="yui_3_16_0_ym19_1_1501569456582_4072"> AuthAttrDef my-Infinera-User-Priv-NE,Infinera-User-Priv-NE,reply<br id="yui_3_16_0_ym19_1_1501569456582_4073"> AuthAttrDef my-Infinera-User-Priv-NA,Infinera-User-Priv-NA,reply<br id="yui_3_16_0_ym19_1_1501569456582_4074"> AuthAttrDef my-Infinera-User-Priv-PR,Infinera-User-Priv-PR,reply<br id="yui_3_16_0_ym19_1_1501569456582_4075"> AuthAttrDef my-Infinera-User-Priv-TT,Infinera-User-Priv-TT,reply<br id="yui_3_16_0_ym19_1_1501569456582_4076"> AddToReplyIfNotExist Service-Type=Login-User<br id="yui_3_16_0_ym19_1_1501569456582_4077"></AuthBy><br id="yui_3_16_0_ym19_1_1501569456582_4078"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4134"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4133"><b id="yui_3_16_0_ym19_1_1501569456582_4403">Allowed client device</b></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4135"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4166"><Client xx.xx.xx.xx><br id="yui_3_16_0_ym19_1_1501569456582_4183"> Secret xxxxxx<br id="yui_3_16_0_ym19_1_1501569456582_4184"></Client></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4187"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4196"><b id="yui_3_16_0_ym19_1_1501569456582_4259">We have checked share secret and password on both ends.</b></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4265"><b id="yui_3_16_0_ym19_1_1501569456582_4259"><br></b></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4401">*** Received from 10.91.142.96 port 11894 ....<br id="yui_3_16_0_ym19_1_1501569456582_4356"><br id="yui_3_16_0_ym19_1_1501569456582_4357">Packet length = 88<br id="yui_3_16_0_ym19_1_1501569456582_4358">01 00 00 58 7b a3 2b 3a d7 73 63 92 65 b4 e2 e8<br id="yui_3_16_0_ym19_1_1501569456582_4359">f4 a9 d7 fa 01 0b 69 6e 66 69 75 73 65 72 32 02<br id="yui_3_16_0_ym19_1_1501569456582_4360">12 a1 15 7e 50 3b 24 89 24 95 03 b3 16 d4 4f a9<br id="yui_3_16_0_ym19_1_1501569456582_4361">1e 1a 0c 00 00 53 30 f9 06 00 00 00 01 20 1b 6f<br id="yui_3_16_0_ym19_1_1501569456582_4362">6e 65 63 62 6c 72 33 2e 62 6c 72 2e 6c 61 62 2e<br id="yui_3_16_0_ym19_1_1501569456582_4363">63 6f 6c 74 2e 6e 65 74<br id="yui_3_16_0_ym19_1_1501569456582_4364">Code: Access-Request<br id="yui_3_16_0_ym19_1_1501569456582_4365">Identifier: 0<br id="yui_3_16_0_ym19_1_1501569456582_4366">Authentic: {<163>+:<215>sc<146>e<180><226><232><244><169><215><250><br id="yui_3_16_0_ym19_1_1501569456582_4367">Attributes:<br id="yui_3_16_0_ym19_1_1501569456582_4368"> User-Name = "infiuser2"<br id="yui_3_16_0_ym19_1_1501569456582_4369"> User-Password = "abcd1234"<br id="yui_3_16_0_ym19_1_1501569456582_4370"> Infinera-Rsvd-Int-Attribute1 = INFINERA<br id="yui_3_16_0_ym19_1_1501569456582_4371"> NAS-Identifier = "onecblr3.blr.lab.xxx.net"<br id="yui_3_16_0_ym19_1_1501569456582_4372"><br id="yui_3_16_0_ym19_1_1501569456582_4373">Tue Aug 1 11:56:38 2017: DEBUG: Handling request with Handler '', Identifier ''<br id="yui_3_16_0_ym19_1_1501569456582_4374">Tue Aug 1 11:56:38 2017: DEBUG: Deleting session for infiuser2, 10.91.142.96,<br id="yui_3_16_0_ym19_1_1501569456582_4375">Tue Aug 1 11:56:38 2017: DEBUG: Handling with Radius::AuthLDAP2: infi_user_auth<br id="yui_3_16_0_ym19_1_1501569456582_4376">Tue Aug 1 11:56:38 2017: INFO: Connecting to 10.91.118.24:389<br id="yui_3_16_0_ym19_1_1501569456582_4377">Tue Aug 1 11:56:38 2017: INFO: Attempting to bind to LDAP server 10.91.118.24:389<br id="yui_3_16_0_ym19_1_1501569456582_4378">Tue Aug 1 11:56:38 2017: DEBUG: LDAP got result for uid=infiuser2,ou=people,o=,ou=customers,dc=xxx,dc=net<br id="yui_3_16_0_ym19_1_1501569456582_4379">Tue Aug 1 11:56:38 2017: DEBUG: LDAP got radpass: abcd1234<br id="yui_3_16_0_ym19_1_1501569456582_4380">Tue Aug 1 11:56:38 2017: DEBUG: LDAP got my-Infinera-User-Priv-SA: SA-PRIVILEGED<br id="yui_3_16_0_ym19_1_1501569456582_4381">Tue Aug 1 11:56:38 2017: DEBUG: LDAP got my-Infinera-User-Priv-NE: NE-PRIVILEGED<br id="yui_3_16_0_ym19_1_1501569456582_4382">Tue Aug 1 11:56:38 2017: DEBUG: LDAP got my-Infinera-User-Priv-NA: NA-PRIVILEGED<br id="yui_3_16_0_ym19_1_1501569456582_4383">Tue Aug 1 11:56:38 2017: DEBUG: LDAP got my-Infinera-User-Priv-PR: PR-PRIVILEGED<br id="yui_3_16_0_ym19_1_1501569456582_4384">Tue Aug 1 11:56:38 2017: DEBUG: LDAP got my-Infinera-User-Priv-TT: TT-PRIVILEGED<br id="yui_3_16_0_ym19_1_1501569456582_4385">Tue Aug 1 11:56:38 2017: DEBUG: Radius::AuthLDAP2 looks for match with infiuser2 [infiuser2]<br id="yui_3_16_0_ym19_1_1501569456582_4386"><b>Tue Aug 1 11:56:38 2017: DEBUG: Radius::AuthLDAP2 REJECT: Bad Password: infiuser2 [infiuser2]<br id="yui_3_16_0_ym19_1_1501569456582_4387">Tue Aug 1 11:56:38 2017: DEBUG: AuthBy LDAP2 result: REJECT, Bad Password<br id="yui_3_16_0_ym19_1_1501569456582_4388">Tue Aug 1 11:56:38 2017: INFO: Access rejected for infiuser2: Bad Password</b><br id="yui_3_16_0_ym19_1_1501569456582_4389">Tue Aug 1 11:56:38 2017: DEBUG: Packet dump:<br id="yui_3_16_0_ym19_1_1501569456582_4390">*** Sending to 10.91.142.96 port 11894 ....<br id="yui_3_16_0_ym19_1_1501569456582_4391"><br id="yui_3_16_0_ym19_1_1501569456582_4392">Packet length = 36<br id="yui_3_16_0_ym19_1_1501569456582_4393">03 00 00 24 91 65 b5 e6 b3 ba 9a c3 db 30 1b c9<br id="yui_3_16_0_ym19_1_1501569456582_4394">90 43 38 56 12 10 52 65 71 75 65 73 74 20 44 65<br id="yui_3_16_0_ym19_1_1501569456582_4395">6e 69 65 64<br id="yui_3_16_0_ym19_1_1501569456582_4396">Code: Access-Reject<br id="yui_3_16_0_ym19_1_1501569456582_4397">Identifier: 0<br id="yui_3_16_0_ym19_1_1501569456582_4398">Authentic: <145>e<181><230><179><186><154><195><219>0<27><201><144>C8V<br id="yui_3_16_0_ym19_1_1501569456582_4399">Attributes:<br id="yui_3_16_0_ym19_1_1501569456582_4400"> Reply-Message = "Request Denied"<b id="yui_3_16_0_ym19_1_1501569456582_4259"><br></b></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4472"><b id="yui_3_16_0_ym19_1_1501569456582_4259"><br></b></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4480"><b id="yui_3_16_0_ym19_1_1501569456582_4259"><br></b></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4412"><b id="yui_3_16_0_ym19_1_1501569456582_4259"><br></b></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4418">Regards,</div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4417">-Manish<b id="yui_3_16_0_ym19_1_1501569456582_4259"><br></b></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4256"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1501569456582_4404"><br></div><div id="yui_3_16_0_ym19_1_1501569456582_3980"><br></div></div></body></html>