Unsure why radius connector fails test

bwentworth.ops · 07-01-2011, 02:58 PM

Hi,

We recently decided to give Untangle's captive portal a try. The plan was to use directory connector's "radius connector" for authentication (currently using the 14 day free trial to see if we can get it working). After entering our radius server's info and trying the test function, it fails.

The radius server is configured to accept either PAP or CHAP auth requests. Confirmed that the server name resolves properly from the untangle server.

I then opened up a terminal on the untangle server and used /usr/bin/radtest to test the connection to our radius server. It succeeds. Used the same information for radtest that I entered for the webui radius test.

At this point I'm totally stumped. Is there something I'm missing? What sort of backend does the webui use for this radius test?

I realize that info for a paid app like this will be easily obtained through support after purchase but it would be nice if we could confirm that this works with our existing infrastructure before purchasing. Any input would be much appreciated !

Thanks.

mrunkel · 07-01-2011, 06:44 PM

You can't do encryption with RADIUS. Plain text only.

bwentworth.ops · 07-02-2011, 03:34 PM

Thank you for the response.

I apologize if I misunderstood it

Both PAP and CHAP auth give the same result for the Radius test in the webui; it instantly fails. The wiki indicates that clear text should also be an option but it doesn't show up in the drop down menu.

Additionally, we ran a tcpdump while running radtest and the webui's radius test. While performing radtest, we saw the expected packets. Strangely, when we ran the webui radius test, tcpdump showed nothing. Its almost as if the webui wasn't even attempting to establish a connection.

Are there perhaps other apps or packages that this depends on? (currently only have captive portal and directory connector installed)

Thank you.

bwentworth.ops · 07-02-2011, 04:19 PM

Just wanted to clarify,

We're also an untangle reseller. Is this the correct location to be asking questions or is there some other place behind the partner portal that I should be posting them?

Thanks.

mrunkel · 07-02-2011, 07:16 PM

Please call support.

07-01-2011, 02:58 PM	#1 (permalink)
bwentworth.ops Newbie Join Date: Jul 2011 Posts: 3	Unsure why radius connector fails test Hi, We recently decided to give Untangle's captive portal a try. The plan was to use directory connector's "radius connector" for authentication (currently using the 14 day free trial to see if we can get it working). After entering our radius server's info and trying the test function, it fails. The radius server is configured to accept either PAP or CHAP auth requests. Confirmed that the server name resolves properly from the untangle server. I then opened up a terminal on the untangle server and used /usr/bin/radtest to test the connection to our radius server. It succeeds. Used the same information for radtest that I entered for the webui radius test. At this point I'm totally stumped. Is there something I'm missing? What sort of backend does the webui use for this radius test? I realize that info for a paid app like this will be easily obtained through support after purchase but it would be nice if we could confirm that this works with our existing infrastructure before purchasing. Any input would be much appreciated ! Thanks.

07-01-2011, 06:44 PM	#2 (permalink)
mrunkel Join Date: Jul 2008 Posts: 2,766	You can't do encryption with RADIUS. Plain text only. __________________ m. Big Frickin Disclaimer: While I'm pretty sure, I can't guarantee that I know what I'm doing. There might be a better way to do this, and this way might actually suck. Make sure you understand the implications of what you're doing before trying to follow these directions. It often helps troubleshooting if you have a good network map. Look here if you want my advice on how to draw one. Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself. If you need Untangle support please call or email support@untangle.com

07-02-2011, 07:16 PM	#5 (permalink)
mrunkel Join Date: Jul 2008 Posts: 2,766	Please call support. __________________ m. Big Frickin Disclaimer: While I'm pretty sure, I can't guarantee that I know what I'm doing. There might be a better way to do this, and this way might actually suck. Make sure you understand the implications of what you're doing before trying to follow these directions. It often helps troubleshooting if you have a good network map. Look here if you want my advice on how to draw one. Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself. If you need Untangle support please call or email support@untangle.com

Protect

Filter

Perform

Connect

Manage

Add-Ons

07-02-2011, 03:34 PM	#3 (permalink)
bwentworth.ops Newbie Join Date: Jul 2011 Posts: 3	Thank you for the response. I apologize if I misunderstood it Both PAP and CHAP auth give the same result for the Radius test in the webui; it instantly fails. The wiki indicates that clear text should also be an option but it doesn't show up in the drop down menu. Additionally, we ran a tcpdump while running radtest and the webui's radius test. While performing radtest, we saw the expected packets. Strangely, when we ran the webui radius test, tcpdump showed nothing. Its almost as if the webui wasn't even attempting to establish a connection. Are there perhaps other apps or packages that this depends on? (currently only have captive portal and directory connector installed) Thank you.

07-02-2011, 04:19 PM	#4 (permalink)
bwentworth.ops Newbie Join Date: Jul 2011 Posts: 3	Just wanted to clarify, We're also an untangle reseller. Is this the correct location to be asking questions or is there some other place behind the partner portal that I should be posting them? Thanks.