On 8 Jun 2014, at 08:26, Linus Nordberg <[log in to unmask]> wrote:
> There should be a warning somewhere. I wonder where.
>
> rs_context_read_config() should've returned non-zero and mech_eap
> should've failed initiating (gssEapCreateRadiusContext()). I don't know
> how mech_eap is communicating with the user.
It seems the error gets swallowed by mech_eap - I’ve appended opensshd’s log file to this message. libradsec manages to successfully log "peer disconnected tcp.c:216) but nothing else.
> If you want to test PSK separate from moonshot, you could try
> the test program libradsec/examples/client together with the
> client-psk.conf file in the same directory.
Ah, that’d be handy for quickly testing config changes, thanks.
I wonder if the example clients are included in the moonshot binary packages - they may be useful for users to test radsec connectivity.
Regards,
Adam Bishop
Systems Development Specialist
gpg: 0x6609D460
t: +44 (0)1235 822 245
xmpp: [log in to unmask]
Janet, the UK's research and education network.
--
debug1: userauth-request for user moonshot service ssh-connection method none
debug1: attempt 0 failures 0
debug3: Trying to reverse map address 212.219.210.203.
debug2: parse_server_config: config reprocess config len 706
debug2: input_userauth_request: setting up authctxt for moonshot
debug1: PAM: initializing for "moonshot"
debug1: PAM: setting PAM_RHOST to "ms-idp.dev.ja.net"
debug1: PAM: setting PAM_TTY to "ssh"
debug2: input_userauth_request: try method none
Failed none for moonshot from 212.219.210.203 port 47494 ssh2
debug1: userauth-request for user moonshot service ssh-connection method gssapi-with-mic
debug1: attempt 1 failures 0
debug2: input_userauth_request: try method gssapi-with-mic
Postponed gssapi-with-mic for moonshot from 212.219.210.203 port 47494 ssh2
debug1: Got no client credentials
debug1: Unspecified GSS failure. Minor code may provide more information
peer disconnected (tcp.c:216)
debug1: Got no client credentials
Failed gssapi-with-mic for moonshot from 212.219.210.203 port 47494 ssh2
Janet(UK) is a trading name of Jisc Collections and Janet Limited, a
not-for-profit company which is registered in England under No. 2881024
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238
|