Quantcast
Channel: Sophos User Bulletin Board
Viewing all articles
Browse latest Browse all 14361

Web proxy with authentication doesn't work with freeradius server.

$
0
0
Hi,

I created a new authentication server on astaro (asg525 v.8.300) for our freeradius server. On the authentication server page, both "test server settings" and "authenticate example user" tests work with success. Then I created a proxy profile, transparent with browser authentication. It works as expected, the login page appears but it does not authenticate the user.

Here is user authentication logs:

Code:

2012:02:07-08:25:01 mx1-2 aua[7855]: id="3006" severity="info" sys="System" sub="auth" name="Trying ***.***.***.*** (radius)"
2012:02:07-08:25:01 mx1-2 aua[7855]: id="3006" severity="info" sys="System" sub="auth" name="Server ***.***.***.*** (ldap) is disabled"
2012:02:07-08:25:01 mx1-2 aua[7855]: id="3005" severity="warn" sys="System" sub="auth" name="Authentication failed" srcip="192.168.7.44" user="user@company.com" caller="http" reason="DENIED"

But the freeradius logs shows it accepts the user:

Code:

rad_recv: Access-Request packet from host ***.***.***.*** port 52771, id=11, length=66
        User-Name = "user@company.com"
        User-Password = "password"
        NAS-Identifier = "http"

....
....

Sending Access-Accept of id 11 to ***.***.***.*** port 52771
        User-Name := "user@company.com"
        NAS-Identifier := "http"
Finished request 3.
Going to the next request

We use this radius server for 802.1x authentication and it works without a problem. So it seems astaro need something more to work? Like some specific Reply-Item maybe?

Thanks.

Viewing all articles
Browse latest Browse all 14361

Trending Articles