FreeRadius 3.0简单安装测试失败，请求技术支持

环境与操作步骤 #

• 系统：Fedora 38、Ubuntu 20.04
• 安装方式：通过系统官方软件仓库（dnf/apt）安装FreeRadius v3.0.20
• 测试操作：
  1. 编辑users文件，添加明文密码用户：tester Cleartext-Password := "secret"
  2. 启动本地调试服务器：sudo freeradius -X -xx -i 127.0.0.1 -p 1645
  3. 运行测试命令：radtest -x -4 t eap-md5 tester secret 127.0.0.1:1645 0 testing123

测试在两个系统中均失败，相关日志如下：

客户端返回错误日志 #

Sent Access-Request Id 36 from 0.0.0.0:50449 to 127.0.0.1:1645 length 69
        User-Name = "tester"
        Cleartext-Password = "secret"
        NAS-IP-Address = 127.0.1.1
        NAS-Port = 0
        Message-Authenticator = 0x00
        EAP-Code = Response
        EAP-Type-Identity = 0x4a49473436
        EAP-Message = 0x0271000a014a49473436
failed decoding EAP: EAP-Message not found
Transaction: 0, received packet (id: 36).
Received Access-Reject Id 36 from 127.0.0.1:1645 to 0.0.0.0:50449 length 20
EAP transaction finished, but reply is not an Access-AcceptDeallocating (sockfd: 5, id: 36)

服务器日志 #

Mon Aug 14 17:36:54 2023 : Debug: (0) Received Access-Request Id 36 from 127.0.0.1:50449 to 127.0.0.1:1645 length 69
Mon Aug 14 17:36:54 2023 : Debug: (0)   User-Name = "tester"
Mon Aug 14 17:36:54 2023 : Debug: (0)   NAS-IP-Address = 127.0.1.1
Mon Aug 14 17:36:54 2023 : Debug: (0)   NAS-Port = 0
Mon Aug 14 17:36:54 2023 : Debug: (0)   Message-Authenticator = 0x75a83521d32f7707cc160bf43d15fc04
Mon Aug 14 17:36:54 2023 : Debug: (0)   EAP-Message = 0x0271000a014a49473436
Mon Aug 14 17:36:54 2023 : Debug: (0) session-state: No State attribute
Mon Aug 14 17:36:54 2023 : Debug: (0) Empty authorize section.  Using default return values.
Mon Aug 14 17:36:54 2023 : ERROR: (0) No Auth-Type found: rejecting the user via Post-Auth-Type = Reject
Mon Aug 14 17:36:54 2023 : Debug: (0) Failed to authenticate the user
Mon Aug 14 17:36:54 2023 : Debug: (0) Using Post-Auth-Type Reject
Mon Aug 14 17:36:54 2023 : Debug: (0) Post-Auth-Type sub-section not found.  Ignoring.
Mon Aug 14 17:36:54 2023 : Debug: (0) Delaying response for 1.000000 seconds
Mon Aug 14 17:36:54 2023 : Debug: Waking up in 0.3 seconds.
Mon Aug 14 17:36:54 2023 : Debug: Waking up in 0.6 seconds.
Mon Aug 14 17:36:55 2023 : Debug: (0) Sending delayed response
Mon Aug 14 17:36:55 2023 : Debug: (0) Sent Access-Reject Id 36 from 127.0.0.1:1645 to 127.0.0.1:50449 length 20
Mon Aug 14 17:36:55 2023 : Debug: Waking up in 3.9 seconds.
Mon Aug 14 17:36:59 2023 : Debug: (0) Cleaning up request packet ID 36 with timestamp +20
Mon Aug 14 17:36:59 2023 : Info: Ready to process requests

核心疑问 #

服务器未触发EAP握手，日志显示「Empty authorize section」和「No Auth-Type found」，但未修改过配置文件的authorize段。请问是官方指南过时，还是操作中遗漏了关键步骤？

内容的提问来源于stack exchange，提问作者ddbug