*** coolacid has quit (Read error: Connection reset by peer) | 01:19 | |
*** coolacid (~CoolAcid@unaffiliated/coolacid) has joined #wikid | 01:20 | |
*** nowen (~nowen@99-174-93-102.lightspeed.tukrga.sbcglobal.net) has joined #wikid | 12:51 | |
*** Jason__ (0c6ee002@gateway/web/freenode/ip.12.110.224.2) has joined #wikid | 15:36 | |
Jason__ | Hey Nick. | 15:36 |
---|---|---|
nowen | hey | 15:37 |
Jason__ | I got my firewall/ISP issues sorted and now am seeing traffic hit the WiKID server. I am not authenticating though. | 15:37 |
nowen | is the user enabled? do you see any errors in the WiKIDAdmin logs? | 15:37 |
Jason__ | <3> Access-Request(1) LEN=134 192.168.111.1:56151 Access-Request by jrorie Failed: AccessRejectException: Microsoft MS-CHAP failed authentication. | 15:38 |
Jason__ | The user is enabled. | 15:38 |
nowen | you can set the logging to debug: http://www.wikidsystems.com/support/wikid-support-center/troubleshooting-faq/how-can-i-set-radius-logging-to-debug-how-can-i-see-if-wikid-is-getting-the-radius-requests | 15:38 |
nowen | the server is getting the username that is enabled and the OTP? | 15:39 |
nowen | the logging isn't all javascripty, you have to set the log level to debug and then hit filter | 15:41 |
nowen | oh - and try to login again | 15:41 |
Jason__ | 2013-09-06 11:41:55.402 INFO com.wikidsystems.radius.access.WikidAccess4 Access denied for jrorie, domain code: 075150216125 client: /192.168.111.1 2013-09-06 11:41:55.402 INFO com.wikidsystems.radius.log.DBSvrLogImpl <5> Access-Request(1) LEN=134 192.168.111.1:55486 Access-Request by jrorie Failed: AccessRejectException: Microsoft MS-CHAP failed authentication. 2013-09-06 11:41:55.401 DEBUG com.mchange.v2.resourcepool.BasicResou | 15:42 |
nowen | do you see something like User-Name (1), Length: 7, Data: [nowen], 0x6E6F77656E Acct-Session-Id (44), Length: 18, Data: | 15:43 |
nowen | ... | 15:43 |
Jason__ | Service-Type (6), Length: 6, Data: [# 2 (Framed-User)], 0x00000002 Framed-Protocol (7), Length: 6, Data: [# 1 (PPP)], 0x00000001 User-Name (1), Length: 8, Data: [jrorie], 0x6A726F726965 Vendor-Specific ID: Microsoft (311), VSA Count: 1 MS-CHAP-Challenge (11), Length: 18, Data: 0x0283FB15BFACAE04D141654F65F71824 Vendor-Specific ID: Microsoft (311), VSA Count: 1 MS-CHAP2-Response (25), Length: 52, Data: 0x3200F80288E3EBA56C5ACDB25FB9C3D8 | 15:45 |
Jason__ | That? | 15:45 |
nowen | yes. | 15:46 |
nowen | looks normal | 15:46 |
nowen | is this the latest version of WiKID? | 15:47 |
Jason__ | Yes, it is. | 15:47 |
nowen | is 192.168.111.1 the VPN? | 15:48 |
Jason__ | It is the watchguard firewall. | 15:48 |
nowen | take a look at this thread: http://wikid-strong-authentication-forums.1491522.n2.nabble.com/Some-questions-Change-listen-Port-Use-wikidsystem-net-NPS-2008-RESOLVED-td6070177.html. | 15:49 |
nowen | they had to add the Message authenticator attribute | 15:49 |
nowen | is that an option? | 15:49 |
nowen | on the watchguard? | 15:49 |
Jason__ | I must have removed my user account and never revalidated it. I am connected! | 15:53 |
nowen | awesome! | 15:54 |
Jason__ | Thanks for the help. | 15:59 |
*** Jason__ has quit (Quit: Page closed) | 15:59 | |
*** nowen has quit (Quit: Leaving.) | 21:03 |
Generated by irclog2html.py 2.11.0 by Marius Gedminas - find it at mg.pov.lt!