Hi,
I created a new authentication server on astaro (asg525 v.8.300) for our freeradius server. On the authentication server page, both "test server settings" and "authenticate example user" tests work with success. Then I created a proxy profile, transparent with browser authentication. It works as expected, the login page appears but it does not authenticate the user.
Here is user authentication logs:
But the freeradius logs shows it accepts the user:
We use this radius server for 802.1x authentication and it works without a problem. So it seems astaro need something more to work? Like some specific Reply-Item maybe?
Thanks.
I created a new authentication server on astaro (asg525 v.8.300) for our freeradius server. On the authentication server page, both "test server settings" and "authenticate example user" tests work with success. Then I created a proxy profile, transparent with browser authentication. It works as expected, the login page appears but it does not authenticate the user.
Here is user authentication logs:
Code:
2012:02:07-08:25:01 mx1-2 aua[7855]: id="3006" severity="info" sys="System" sub="auth" name="Trying ***.***.***.*** (radius)"
2012:02:07-08:25:01 mx1-2 aua[7855]: id="3006" severity="info" sys="System" sub="auth" name="Server ***.***.***.*** (ldap) is disabled"
2012:02:07-08:25:01 mx1-2 aua[7855]: id="3005" severity="warn" sys="System" sub="auth" name="Authentication failed" srcip="192.168.7.44" user="user@company.com" caller="http" reason="DENIED"
Code:
rad_recv: Access-Request packet from host ***.***.***.*** port 52771, id=11, length=66
User-Name = "user@company.com"
User-Password = "password"
NAS-Identifier = "http"
....
....
Sending Access-Accept of id 11 to ***.***.***.*** port 52771
User-Name := "user@company.com"
NAS-Identifier := "http"
Finished request 3.
Going to the next request
Thanks.