Unable to get true from verify_response

[retailnext]

Unable to get true from verify_response

[muirdm]

let request = sent_packets[response.identifier];

The response identifier is only one byte, so it can rollover or get repeats very quickly. Is it possible you are sending two different requests with the same identifier before you process the first request's response?

[pihomeserver]

I added as many as console.log instructions and i receive only one instruction from coova, sending only one to freeradius. Maybe the storage of the packet in sent_packets is incorrect ?

	client.bind(49001);
	// Prepare the CHAP-Password attribute
	let bufChapPass = Buffer.from(req.query.chap_pass, 'hex');
	if (bufChapPass.length < 17) {
		let zero = Buffer.alloc(17 - bufChapPass.length);
		bufChapPass = Buffer.concat([zero, bufChapPass], 17)
	}
	// Prepare attributes
	packet_freeradius.attributes = [
		['User-Name', req.query.user],
		['CHAP-Password', bufChapPass],
		['CHAP-Challenge', new Buffer.from(req.query.chap_chal, 'hex')],
	];
	// Send request to FreeRadius
	let encoded = radius.encode(packet_freeradius);
	sent_packets[packet_freeradius.identifier++] = {
		raw_packet: encoded,
		secret: packet_freeradius.secret
	};
	client.send(encoded, 0, encoded.length, 2812, "localhost");
	console.log('*-*-* Message sent');
	console.log('*-*-*');

[muirdm]

The most likely explanations are either the RADIUS server is sending the Access-Accept using the wrong shared secret, or it is calculating the authenticator incorrectly. Can you attach a tcpdump of the request and response (and provide the shared secret)?

[psanford]

I'm going to close this due to lack of activity. Feel free to reopen if you are still having the issue and are able to provide more information.