Error in User manager(configuration error unknown user prof)

RouterOS The User Manager
1

Hi !
My Hotspot is ok with Local Users But When i choose a user in user manager (Set as radius on my mikrotik (127.0.0.1) i got this error

configuration error (unknown user profile <Test)

Interestingly, Log in user manager says :

testuser192.168.0.10127.0.0.1Nov/10/2010 07:33:36authorization success

but loging in with my user fails.
any help would be appreciated

2

You have entered a user attribute “group” that has no match in “/ip hotspot user profile”. For example, I use a group “managers”. If there is no “/ip hotspot user profile name=managers”, the login screen displays “configuration error”.

Try this

/ip hotspot user profile
add name=Test

The error will stop.

3

Thanks SurferTim :slight_smile:
Great ! It Worked.

But Two More Problems.

1- My 750G Acts as PPPOE Server too. And You See That I Am Moving To User Manager Instead Local User Definition.
But When I Enable Radius for PPP And Test a User Which is Created in User Manager, Connection Gets Error 738 And Fails (With Local User There is Not Any Problem)
This Link Was of No Use :
http://support.microsoft.com/kb/256213

I Thought There Maybe A Problem With Auth Methods. So Just For Testing, I Chose Only PAP in PPPOE Server Properties,
And Changed My Connection To Use PAP too (Besides Other Protocols)
Interestingly, Again Local User Can Connect But User Manager - Defined User Now Gets Error 720 !
I’m Confused :open_mouth:



2-Access to User Manager Web Interface is Not Available Unless I Myself Login To Mikrotik (For Example As A Hotspot User)
I Mean When I Try http://x.x.x.x:xx/userman, I Get NoWhere, But When I First Go to http://x.x.x.x And Login To Hotspot Page, Then The User Manager Can Be Reached And It is Not Good.
These Are True for Winbox Too. I Mean If i log off from My Hotspot Connection, Winbox Disconnects too. So, First I Should Login to Hot Spot And Then Winbox Can Connect To Router !
What Should I Do ?

4

You must either login to the hotspot, or bypass the mac address of the device you connect with, to access the router services on the hotspot interface, like Winbox, ssh, ftp, etc.

Have you enabled logging for radius?

/system logging
add topics=radius action=memory

Then try the login again and check the log in the router.

Is this the same device with the hotspot?

According to a Google search:
Error 720 is “connection could not be established”.
Error 738 is “the server did not assign an ip address”.

5

Ok ! Thanks Again Tim

I Solved 2nd Problem By Adding A Chain=input Rule And Let My PC Have Ping Also Winbox Access (Port 8291) to Router And Now It is Ok

And About The Radius Problem. That Googled Things Were Not Helpful
See ! This is The Log ! Can You Tell Me Where is The Problem
And By The Way, Router And User Manager Are On The Same Router (RB750G)

Nov/19/2010 16:10:16 radius,debug new request 1b:f9 code=Access-Request service=ppp called-id=mypppoe
Nov/19/2010 16:10:16 radius,debug sending 1b:f9 to 127.0.0.1:1812
Nov/19/2010 16:10:16 radius,debug,packet sending Access-Request with id 112 to 127.0.0.1:1812
Nov/19/2010 16:10:16 radius,debug,packet Signature = 0x58503014f6a34120cf718925915a9a3a
Nov/19/2010 16:10:16 radius,debug,packet Service-Type = 2
Nov/19/2010 16:10:16 radius,debug,packet Framed-Protocol = 1
Nov/19/2010 16:10:16 radius,debug,packet NAS-Port = 55
Nov/19/2010 16:10:16 radius,debug,packet NAS-Port-Type = 15
Nov/19/2010 16:10:16 radius,debug,packet User-Name = “testuser”
Nov/19/2010 16:10:16 radius,debug,packet Calling-Station-Id = “04:4B:80:80:80:03”
Nov/19/2010 16:10:16 radius,debug,packet Called-Station-Id = “mypppoe”
Nov/19/2010 16:10:16 radius,debug,packet NAS-Port-Id = “bridge1”
Nov/19/2010 16:10:16 radius,debug,packet MS-CHAP-Challenge = 0x6041628a459bba21b194f0f2d949f890
Nov/19/2010 16:10:16 radius,debug,packet MS-CHAP2-Response = 0x01007970b43900e9b4806160cc3998d7
Nov/19/2010 16:10:16 radius,debug,packet ab13000000000000000059886d06e4b9
Nov/19/2010 16:10:16 radius,debug,packet fab713ff9300e7b3dbcd3bf1143116a1
Nov/19/2010 16:10:16 radius,debug,packet 6523
Nov/19/2010 16:10:16 radius,debug,packet NAS-Identifier = “MikroTik”
Nov/19/2010 16:10:16 radius,debug,packet NAS-IP-Address = 127.0.0.1
Nov/19/2010 16:10:16 radius,debug,packet received Access-Accept with id 112 from 127.0.0.1:1812
Nov/19/2010 16:10:16 radius,debug,packet Signature = 0x51fb9caa6773362f852b67fa3d57aef4
Nov/19/2010 16:10:16 radius,debug,packet MS-CHAP2-Success = 0x01533d37383732413946384139434134
Nov/19/2010 16:10:16 radius,debug,packet 39444246453734363138434541353737
Nov/19/2010 16:10:16 radius,debug,packet 4244373335344345413136
Nov/19/2010 16:10:16 radius,debug,packet MS-MPPE-Send-Key = 0x231b1c961e348288196da74d746343bc
Nov/19/2010 16:10:16 radius,debug,packet 8321230aec9e1b60083f63ec37d81588
Nov/19/2010 16:10:16 radius,debug,packet 972c
Nov/19/2010 16:10:16 radius,debug,packet MS-MPPE-Recv-Key = 0xe9e81a64607722902f61b299a2403512
Nov/19/2010 16:10:16 radius,debug,packet b43b20d0b5a3c6f9d31d11379d0c478f
Nov/19/2010 16:10:16 radius,debug,packet c950
Nov/19/2010 16:10:16 radius,debug,packet Acct-Interim-Interval = 600
Nov/19/2010 16:10:16 radius,debug received reply for 1b:f9
Nov/19/2010 16:10:16 radius,debug new request 1b:00 code=Accounting-Request service=ppp called-id=mypppoe
Nov/19/2010 16:10:16 radius,debug sending 1b:00 to 127.0.0.1:1813
Nov/19/2010 16:10:16 radius,debug,packet sending Accounting-Request with id 113 to 127.0.0.1:1813
Nov/19/2010 16:10:16 radius,debug,packet Signature = 0x3585c645ec4517d9333f93a177459648
Nov/19/2010 16:10:16 radius,debug,packet Service-Type = 2
Nov/19/2010 16:10:16 radius,debug,packet Framed-Protocol = 1
Nov/19/2010 16:10:16 radius,debug,packet NAS-Port = 55
Nov/19/2010 16:10:16 radius,debug,packet NAS-Port-Type = 15
Nov/19/2010 16:10:16 radius,debug,packet User-Name = “testuser”
Nov/19/2010 16:10:16 radius,debug,packet Calling-Station-Id = “04:4B:80:80:80:03”
Nov/19/2010 16:10:16 radius,debug,packet Called-Station-Id = “mypppoe”
Nov/19/2010 16:10:16 radius,debug,packet NAS-Port-Id = “bridge1”
Nov/19/2010 16:10:16 radius,debug,packet Acct-Session-Id = “81300027”
Nov/19/2010 16:10:16 radius,debug,packet Framed-IP-Address = 0.0.0.0
Nov/19/2010 16:10:16 radius,debug,packet Acct-Authentic = 1
Nov/19/2010 16:10:16 radius,debug,packet Event-Timestamp = 1290170416
Nov/19/2010 16:10:16 radius,debug,packet Acct-Status-Type = 1
Nov/19/2010 16:10:16 radius,debug,packet NAS-Identifier = “MikroTik”
Nov/19/2010 16:10:16 radius,debug,packet NAS-IP-Address = 127.0.0.1
Nov/19/2010 16:10:16 radius,debug,packet Acct-Delay-Time = 0
Nov/19/2010 16:10:16 radius,debug,packet received Accounting-Response with id 113 from 127.0.0.1:1813
Nov/19/2010 16:10:16 radius,debug,packet Signature = 0x321a583892120689633cdbd6678d92ed
Nov/19/2010 16:10:16 radius,debug received reply for 1b:00
Nov/19/2010 16:10:16 radius,debug request 1b:00 processed
Nov/19/2010 16:10:16 radius,debug new request 1b:00 code=Accounting-Request service=ppp called-id=mypppoe
Nov/19/2010 16:10:16 radius,debug sending 1b:00 to 127.0.0.1:1813
Nov/19/2010 16:10:16 radius,debug,packet sending Accounting-Request with id 114 to 127.0.0.1:1813
Nov/19/2010 16:10:16 radius,debug,packet Signature = 0x241d04b0fb61b6883cff5c7c4403de9f
Nov/19/2010 16:10:16 radius,debug,packet Service-Type = 2
Nov/19/2010 16:10:16 radius,debug,packet Framed-Protocol = 1
Nov/19/2010 16:10:16 radius,debug,packet NAS-Port = 55
Nov/19/2010 16:10:16 radius,debug,packet NAS-Port-Type = 15
Nov/19/2010 16:10:16 radius,debug,packet User-Name = “testuser”
Nov/19/2010 16:10:16 radius,debug,packet Calling-Station-Id = “04:4B:80:80:80:03”
Nov/19/2010 16:10:16 radius,debug,packet Called-Station-Id = “mypppoe”
Nov/19/2010 16:10:16 radius,debug,packet NAS-Port-Id = “bridge1”
Nov/19/2010 16:10:16 radius,debug,packet Acct-Session-Id = “81300027”
Nov/19/2010 16:10:16 radius,debug,packet Framed-IP-Address = 0.0.0.0
Nov/19/2010 16:10:16 radius,debug,packet Acct-Authentic = 1
Nov/19/2010 16:10:16 radius,debug,packet Event-Timestamp = 1290170416
Nov/19/2010 16:10:16 radius,debug,packet Acct-Session-Time = 0
Nov/19/2010 16:10:16 radius,debug,packet Acct-Input-Octets = 90
Nov/19/2010 16:10:16 radius,debug,packet Acct-Input-Gigawords = 0
Nov/19/2010 16:10:16 radius,debug,packet Acct-Input-Packets = 6
Nov/19/2010 16:10:16 radius,debug,packet Acct-Output-Octets = 70
Nov/19/2010 16:10:16 radius,debug,packet Acct-Output-Gigawords = 0
Nov/19/2010 16:10:16 radius,debug,packet Acct-Output-Packets = 7
Nov/19/2010 16:10:16 radius,debug,packet Acct-Status-Type = 2
Nov/19/2010 16:10:16 radius,debug,packet Acct-Terminate-Cause = 1
Nov/19/2010 16:10:16 radius,debug,packet NAS-Identifier = “MikroTik”
Nov/19/2010 16:10:16 radius,debug,packet NAS-IP-Address = 127.0.0.1
Nov/19/2010 16:10:16 radius,debug,packet Acct-Delay-Time = 0
Nov/19/2010 16:10:16 radius,debug,packet received Accounting-Response with id 114 from 127.0.0.1:1813
Nov/19/2010 16:10:16 radius,debug,packet Signature = 0x62b93bfa8769f8b6cb2ce0de084b8533
Nov/19/2010 16:10:16 radius,debug received reply for 1b:00
Nov/19/2010 16:10:16 radius,debug request 1b:00 processed

6

If that means you are still having problems, which it looks by this that you are, then check the user record. Insure you don’t have “IP Address” set to 0.0.0.0

Nov/19/2010 16:10:16 radius,debug,packet Framed-IP-Address = 0.0.0.0

I can see where that might generate an Error 738.

ADD: How do your clients get ip addresses?

7

Tim I Really Appreciate Your Time For Helping Me Here
I Should Solve This And With Your Help, It is not out of reach

First of all is should say no. i did not set user ip address to 0.0.0.0 in user manager. just username and password

there is a pool in pppoe profile (10.1.1.1/24) which is set for remote addresses in there.
(As i told, local users have no problem, they connect and get an ip in the mentioned range)
and local address is set to 192.168.0.1 (Router Address)

Here is The Log of A Local User who has successfully logged in :

Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <magic 0x2ae043d2>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: sent LCP ConfAck id=0x0
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <mru 1466>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <magic 0x2d220517>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <callback 0x06>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: rcvd LCP ConfAck id=0x1
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <mru 1480>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <magic 0x2ae043d2>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet
Nov/19/2010 17:54:09 pppoe,ppp,debug <0037>: LCP opened
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: rcvd LCP Ident id=0x1
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <magic 0x2d220517>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet MSRASV5.10
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: rcvd LCP Ident id=0x2
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <magic 0x2d220517>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet MSRAS-0-MR
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: rcvd PAP AuthReq id=0xd
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: sent PAP AuthAck id=0x0
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet Login ok
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: sent CBCP CallbackReq id=0x0
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet 01 02
Nov/19/2010 17:54:09 pppoe,ppp,info : authenticated
Nov/19/2010 17:54:09 pppoe,ppp,debug <0037>: IPCP lowerup
Nov/19/2010 17:54:09 pppoe,ppp,debug <0037>: IPCP open
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: sent IPCP ConfReq id=0x1
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <addr 192.168.0.1>
Nov/19/2010 17:54:09 pppoe,ppp,debug <0037>: BCP open
Nov/19/2010 17:54:09 pppoe,ppp,debug <0037>: CCP lowerup
Nov/19/2010 17:54:09 pppoe,ppp,debug <0037>: CCP open
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: rcvd CBCP CallbackResp id=0x0
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet 01 02
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: sent CBCP CallbackAck id=0x1
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet 01 02
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: rcvd IPCP ConfReq id=0x3
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <addr 0.0.0.0>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-dns 0.0.0.0>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-dns 0.0.0.0>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-wins 0.0.0.0>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-wins 0.0.0.0>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: sent IPCP ConfRej id=0x3
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-wins 0.0.0.0>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-wins 0.0.0.0>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: rcvd IPCP ConfReq id=0x4
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <addr 0.0.0.0>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-dns 0.0.0.0>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-dns 0.0.0.0>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: sent IPCP ConfNak id=0x4
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <addr 10.1.1.1>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-dns 4.2.2.4>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-dns 192.168.0.1>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: rcvd IPCP ConfReq id=0x5
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <addr 10.1.1.1>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-dns 4.2.2.4>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-dns 192.168.0.1>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <0037>: sent IPCP ConfAck id=0x5
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <addr 10.1.1.1>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-dns 4.2.2.4>
Nov/19/2010 17:54:09 pppoe,ppp,debug,packet <ms-dns 192.168.0.1>
Nov/19/2010 17:54:10 pppoe,ppp,debug <0037>: IPCP timer
Nov/19/2010 17:54:10 pppoe,ppp,debug,packet <0037>: sent IPCP ConfReq id=0x2
Nov/19/2010 17:54:10 pppoe,ppp,debug,packet <addr 192.168.0.1>
Nov/19/2010 17:54:10 pppoe,ppp,debug,packet <0037>: rcvd IPCP ConfAck id=0x2
Nov/19/2010 17:54:10 pppoe,ppp,debug,packet <addr 192.168.0.1>
Nov/19/2010 17:54:10 pppoe,ppp,debug <0037>: IPCP opened
Nov/19/2010 17:54:10 pppoe,ppp,info : connected
Nov/19/2010 17:54:10 pppoe,ppp,info,account ppp1 logged in, 10.1.1.1

And Let ME Tell You S.th That May Help
I Opened user manager and for this test user, i entered the name of my pool in the pool address
(although i believe this should not be the way to give ip addresses and the ppp pool configured in mikrotik should handle that)
and see what happened
the authentication passed registering … but :frowning: error again
this time 629
the sessions log says user have logged in for 1s and ip 10.1.1.2 has been assigned but ..

Thanks Again Tim. Waiting For Your Kind Help

8

Hey Tim Where are You :frowning:
And Other guys who can help :slight_smile:

9

I wish I could help, but I am not a PPPoE guy. I use hotspots. Hopefully a good PPP person will show up to help you.

ADD: But I am a RADIUS guy. The RADIUS sever said ok on the one you said failed.

Nov/19/2010 16:10:16 radius,debug,packet received > Access-Accept > with id 112 from 127.0.0.1:1812
Nov/19/2010 16:10:16 radius,debug,packet Signature = 0x51fb9caa6773362f852b67fa3d57aef4
Nov/19/2010 16:10:16 radius,debug,packet MS-CHAP2-Success = 0x01533d37383732413946384139434134
Nov/19/2010 16:10:16 radius,debug,packet 39444246453734363138434541353737
Nov/19/2010 16:10:16 radius,debug,packet 4244373335344345413136
Nov/19/2010 16:10:16 radius,debug,packet MS-MPPE-Send-Key = 0x231b1c961e348288196da74d746343bc
Nov/19/2010 16:10:16 radius,debug,packet 8321230aec9e1b60083f63ec37d81588
Nov/19/2010 16:10:16 radius,debug,packet 972c
Nov/19/2010 16:10:16 radius,debug,packet MS-MPPE-Recv-Key = 0xe9e81a64607722902f61b299a2403512
Nov/19/2010 16:10:16 radius,debug,packet b43b20d0b5a3c6f9d31d11379d0c478f
Nov/19/2010 16:10:16 radius,debug,packet c950
Nov/19/2010 16:10:16 radius,debug,packet Acct-Interim-Interval = 600

10

Just a hint: You might want to start another post in “General” category with PPPoE in the subject. Put a link to this post in it. That way you won’t need to post all the RADIUS stuff again. It is working (Access-Accept), but I am not certain if all that User Manager is returning does not have a PPP error in it.