Radius DAS won't work

Alan DeKok aland at deployingradius.com
Thu Feb 6 13:56:55 EST 2014

Robert Plestenjak wrote:
> When I send disconnect message, I get this:
> # cat ~/packet.txt | radclient -x disconnect supersecret
> Sending Disconnect-Request of id 224 to port 3799
> 	Acct-Session-Id = "52F38076-00000003"
> 	User-Name = "janez"
> 	NAS-IP-Address =
> rad_recv: Disconnect-NAK packet from host port 3799, id=224, length=50
> rad_verify: Received packet from with invalid Message-Authenticator!  (Shared secret is incorrect.)

  If you're running a very old version of FreeRADIUS, it might have a
bug which gets the Message-Authenticator wrong for disconnect packets.
Try upgrading to the latest version.

  But barring that, if it says the shared secret is wrong, it's because
the shared secret is wrong.

  Alan DeKok.

More information about the HostAP mailing list