Добрый день, пытаюсь настроить авторизацию на DES3200-26 через Freeradius, настраиваю по мануалу отсюда
https://www.dlink.ru/ru/faq/62/953.htmlАвторизация не работает, в логах радиуса - Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [oper/oper] (from client mgmt_v135 port 0)
Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [admin/asdwx123] (from client mgmt_v135 port 0)
Локально тест проходит корректно:
radtest admin asdwx123 127.0.0.1:18120 0 testing123
Sent Access-Request Id 25 from 0.0.0.0:d78b to 127.0.0.1:18120 length 75
User-Name = "admin"
User-Password = "asdwx123"
NAS-IP-Address = 192.168.45.19
NAS-Port = 0
Message-Authenticator = 0x00
Cleartext-Password = "asdwx123"
Received Access-Accept Id 25 from 127.0.0.1:46c8 to 127.0.0.1:55179 length 32
dlink-Privelege-Level = Admin
В чем может быть проблема?
Ubuntu 20.04.6 LTS
FreeRADIUS Version 3.2.4
DES-3200-26 Fast Ethernet Switch Firmware: Build 4.51.B013
dictionary.dlink
VENDOR dlink 171
BEGIN-VENDOR dlink
ATTRIBUTE dlink-Privelege-Level 1 integer
END-VENDOR dlink
dictionary
$INCLUDE /etc/freeradius/dictionary.dlink
/etc/freeradius/users
#dlink
admin Cleartext-Password := "asdwx123"
dlink-Privelege-Level = 5
enable Cleartext-Password := "asdwx1234"
dlink-Privelege-Level = 5
puser Cleartext-Password := "puser123"
dlink-Privelege-Level = 6
user Cleartext-Password := "user123"
dlink-Privelege-Level = 3
oper Cleartext-Password := "oper"
dlink-Privelege-Level = 4
------------------------------------------------------------
create authen server_host 192.168.45.19 protocol radius port 1812 key "mypass" timeout 5 retransmit 2
config authen server_group radius delete server_host 192.168.45.19 protocol radius
config authen server_group radius add server_host 192.168.45.19 protocol radius
config authen_login default method local
create authen_login method_list_name tel_ext
config authen_login method_list_name tel_ext method radius local
config authen_enable default method local_enable
create authen_enable method_list_name tel_ext_ena
config authen_enable method_list_name tel_ext_ena method radius local_enable
config accounting default method none
config authen application console login default
config authen application console enable default
config authen application telnet login method_list_name tel_ext
config authen application telnet enable method_list_name tel_ext_ena
config authen application ssh login default
config authen application ssh enable default
config authen application http login default
config authen application http enable default
config authen parameter response_timeout 30
config authen parameter attempt 3
enable authen_policy
config accounting service network state disable
config accounting service shell state disable
config accounting service system state disable
config accounting service command administrator none
config accounting service command operator none
config accounting service command power_user none
config accounting service command user none
disable authen_policy_encryption