Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RADIUS_SHARED_SECRET not working on ARM64 Docker Build #866

Open
saandre15 opened this issue Jul 2, 2024 · 0 comments
Open

RADIUS_SHARED_SECRET not working on ARM64 Docker Build #866

saandre15 opened this issue Jul 2, 2024 · 0 comments

Comments

@saandre15
Copy link

saandre15 commented Jul 2, 2024

Describe the bug
I'm using the Docker ARM64 build of this software. I've tried changing the $RADIUS_SHARED_SECRET to admin instead of the default value of secret but it doesn't change anything.

To Reproduce
Steps to reproduce the behavior:

On the client machine:

> radtest demo@realm_name demo 10.175.125.198 1812 admin
Sent Access-Request Id 189 from 0.0.0.0:e097 to 10.175.125.198:1812 length 87
        User-Name = "demo@realm_name"
        User-Password = "demo"
        NAS-IP-Address = 10.175.125.127
        NAS-Port = 1812
        Message-Authenticator = 0x00
        Cleartext-Password = "demo"
(0) Reply verification failed: Received Access-Reject packet from home server 10.175.125.198 port 1812 with invalid Response Authenticator!  (Shared secret is incorrect.)
> radtest demo@realm_name demo 10.175.125.198 1812 secret
Sent Access-Request Id 8 from 0.0.0.0:d45d to 10.175.125.198:1812 length 87
        User-Name = "demo@realm_name"
        User-Password = "demo"
        NAS-IP-Address = 10.175.125.127
        NAS-Port = 1812
        Message-Authenticator = 0x00
        Cleartext-Password = "demo"
Received Access-Accept Id 8 from 10.175.125.198:714 to 10.175.125.127:54365 length 20
> radtest demo@realm_name demo1 10.175.125.198 1812 secret
Sent Access-Request Id 110 from 0.0.0.0:c44b to 10.175.125.198:1812 length 87
        User-Name = "demo@realm_name"
        User-Password = "demo1"
        NAS-IP-Address = 10.175.125.127
        NAS-Port = 1812
        Message-Authenticator = 0x00
        Cleartext-Password = "demo1"
Received Access-Reject Id 110 from 10.175.125.198:714 to 10.175.125.127:50251 length
20

In the pod:

$ echo $RADIUS_SHARED_SECRET
admin

Expected behavior
In the client machine:

> radtest demo@realm_name demo 10.175.125.198 1812 admin
Sent Access-Request Id 8 from 0.0.0.0:d45d to 10.175.125.198:1812 length 87
        User-Name = "demo@realm_name"
        User-Password = "demo"
        NAS-IP-Address = 10.175.125.127
        NAS-Port = 1812
        Message-Authenticator = 0x00
        Cleartext-Password = "demo"
Received Access-Accept Id 8 from 10.175.125.198:714 to 10.175.125.127:54365 length 20

Client :

  • OS: Arch Linux x86_64

Server/Docker Build
Architecture: ARM64
OS: Debian 11
Image: vassio/keycloak-radius-plugin:latest-multiarch
Image ID: docker.io/vassio/keycloak-radius-plugin@sha256:f5dbe911dc3a537f60a03626fdb47c42a8a0f9aea4de3f247868bba100356059

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant