[RADIATOR] Authentication type not support - HELP

[Hugh Irvine]

Hello Matthew -

I don't think you have done anything wrong - but the debug shows the client is sending an MSCHAP-V2 request, which as you can see is not supported by the AuthBy SQLHOTP clause.

regards

Hugh


On 13 Sep 2010, at 15:57, Matthew Reeves-Hairs wrote:

> Hi,
>  I'm getting the following error relating to REJECT: Authentication type not supported.
>  Can anyone point me in the right direction as to what I have done wrong?
> 
> Thanks
> 
> Matthew
> 
> Mon Sep 13 21:53:29 2010: DEBUG: Packet dump:
> *** Received from 192.168.100.1 port 51172 ....
> 
> Packet length = 151
> 01 6c 00 97 3e 13 28 89 b3 8c c6 d7 2d 89 cc 86
> 10 23 9c a1 06 06 00 00 00 02 07 06 00 00 00 01
> 01 09 6d 72 65 65 76 65 73 1a 18 00 00 01 37 0b
> 12 73 8a 8f 3f b6 f3 31 18 b9 6d 7e 4d 50 ff fa
> 4a 1a 3a 00 00 01 37 19 34 44 00 0d 3a 4e 7c 0b
> 1e bd 2f 6c 71 51 0a 3d b3 5f 5a 00 00 00 00 00
> 00 00 00 37 a4 37 43 1a c1 8d eb 59 4e eb 47 7f
> 9a 09 1c bf 5f 2e 90 1e b4 e5 9f 1f 10 32 31 37
> 2e 33 36 2e 32 35 34 2e 32 30 39 20 06 6c 32 74
> 70 05 06 00 00 00 00
> Code:       Access-Request
> Identifier: 108
> Authentic:  ><19>(<137><179><140><198><215>-<137><204><134><16>#<156><161>
> Attributes:
> 	Service-Type = Framed-User
> 	Framed-Protocol = PPP
> 	User-Name = "mreeves"
> 	MS-CHAP-Challenge = s<138><143>?<182><243>1<24><185>m~MP<255><250>J
> 	MS-CHAP2-Response = D<0><13>:N|<11><30><189>/lqQ<10>=<179>_Z<0><0><0><0><0><0><0><0>7<164>7C<26><193><141><235>YN<235>G<127><154><9><28><191>_.<144><30><180><229><159>
> 	Calling-Station-Id = "217.36.254.209"
> 	NAS-Identifier = "l2tp"
> 	NAS-Port = 0
> 
> Mon Sep 13 21:53:29 2010: DEBUG: Handling request with Handler 'Realm=DEFAULT', Identifier ''
> Mon Sep 13 21:53:29 2010: DEBUG:  Deleting session for mreeves, 192.168.100.1, 0
> Mon Sep 13 21:53:29 2010: DEBUG: Handling with Radius::AuthSQLHOTP: 
> Mon Sep 13 21:53:29 2010: DEBUG: Radius::AuthSQLHOTP looks for match with mreeves [mreeves]
> Mon Sep 13 21:53:29 2010: DEBUG: Radius::AuthSQLHOTP REJECT: Authentication type not supported. Only RADIUS PAP, EAP-OPT and EAP-GTC is supported by HOTP: mreeves [mreeves]
> Mon Sep 13 21:53:29 2010: DEBUG: AuthBy SQLHOTP result: REJECT, Authentication type not supported. Only RADIUS PAP, EAP-OPT and EAP-GTC is supported by HOTP
> Mon Sep 13 21:53:29 2010: INFO: Access rejected for mreeves: Authentication type not supported. Only RADIUS PAP, EAP-OPT and EAP-GTC is supported by HOTP
> Mon Sep 13 21:53:29 2010: DEBUG: Packet dump:
> *** Sending to 192.168.100.1 port 51172 ....
> 
> Packet length = 36
> 03 6c 00 24 95 0b c5 e9 09 d5 b6 10 e2 79 9d 7c
> 7f 57 82 c1 12 10 52 65 71 75 65 73 74 20 44 65
> 6e 69 65 64
> Code:       Access-Reject
> Identifier: 108
> Authentic:  <149><11><197><233><9><213><182><16><226>y<157>|<127>W<130><193>
> Attributes:
> 	Reply-Message = "Request Denied"
> 
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator



NB: 

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets), 
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.