Radius DAS won't work

Alan DeKok aland at deployingradius.com
Thu Feb 6 13:56:55 EST 2014


Robert Plestenjak wrote:
> When I send disconnect message, I get this:
> 
> # cat ~/packet.txt | radclient -x 172.16.117.235:3799 disconnect supersecret
> Sending Disconnect-Request of id 224 to 172.16.117.235 port 3799
> 	Acct-Session-Id = "52F38076-00000003"
> 	User-Name = "janez"
> 	NAS-IP-Address = 172.16.117.235
> rad_recv: Disconnect-NAK packet from host 172.16.117.235 port 3799, id=224, length=50
> rad_verify: Received packet from 172.16.117.235 with invalid Message-Authenticator!  (Shared secret is incorrect.)

  If you're running a very old version of FreeRADIUS, it might have a
bug which gets the Message-Authenticator wrong for disconnect packets.
Try upgrading to the latest version.

  But barring that, if it says the shared secret is wrong, it's because
the shared secret is wrong.

  Alan DeKok.


More information about the HostAP mailing list