ippool error

Giuseppina Venezia giusy.venezia at gmail.com
Mon Jul 31 17:44:50 CEST 2006


On 7/31/06, Phil Mayers <p.mayers at imperial.ac.uk> wrote:
>
>
> The logs you have given are NOT debugging output.


root at barbaculo:/usr/local/etc/raddb# radiusd -X -A &
[1] 16321
Starting - reading configuration files ...
.......
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1:1039, id=0, length=216
        User-Name = "arccas"
        CHAP-Challenge = 0xf606250a5f23241fb1b9d9109af1a082
        CHAP-Password = 0x00c66b772cfa0368bcf45f5e2945903846
        NAS-IP-Address = 0.0.0.0
        Service-Type = Login-User
        Framed-IP-Address = 192.168.182.3
        Calling-Station-Id = "00-02-D7-BF-A0-98"
        Called-Station-Id = "00-50-BF-E3-E8-2A"
        NAS-Identifier = "nas01"
        Acct-Session-Id = "44ce1d9300000001"
        NAS-Port-Type = Wireless-802.11
        NAS-Port = 1
        Message-Authenticator = 0x4e30008639aaaa133c8110c2088e9d90
        WISPr-Logoff-URL = "http://192.168.182.1:3990/logoff"
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok for request 0
  rlm_chap: Setting 'Auth-Type := CHAP'
  modcall[authorize]: module "chap" returns ok for request 0
rlm_ldap: - authorize
rlm_ldap: performing user authorization for arccas
radius_xlat:  '(uid=arccas)'
radius_xlat:  'ou=statistica,dc=xxx,dc=it'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: attempting LDAP reconnection
rlm_ldap: (re)connect to localhost:389, authentication 0
rlm_ldap: bind as cn=Manager,dc=xxx,dc=it/PASSWORD to localhost:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: performing search in ou=statistica,dc=xxx,dc=it, with filter
(uid=arccas)
rlm_ldap: checking if remote access for arccas is allowed by userPassword
rlm_ldap: Added password a in check items
rlm_ldap: looking for check items in directory...
rlm_ldap: Adding radiusGroupName as Ldap-Group, value student & op=21
rlm_ldap: Adding radiusCallingStationId as Calling-Station-Id, value
00-02-D7-BF-A0-98 & op=21
rlm_ldap: Adding userPassword as User-Password, value a & op=21
rlm_ldap: looking for reply items in directory...
rlm_ldap: user arccas authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
 modcall[authorize]: module "ldap" returns ok for request 0
rlm_checkval: Item Name: Calling-Station-Id, Value: 00-02-D7-BF-A0-98
rlm_checkval: Value Name: Calling-Station-Id, Value: 00-02-D7-BF-A0-98
  modcall[authorize]: module "checkval" returns ok for request 0
modcall: leaving group authorize (returns ok) for request 0
  rad_check_password:  Found Auth-Type CHAP
auth: type "CHAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group CHAP for request 0
  rlm_chap: login attempt by "arccas" with CHAP password
  rlm_chap: Using clear text password a for user arccas authentication.
  rlm_chap: chap user arccas authenticated succesfully
  modcall[authenticate]: module "chap" returns ok for request 0
modcall: leaving group CHAP (returns ok) for request 0
  Processing the post-auth section of radiusd.conf
modcall: entering group post-auth for request 0
rlm_ippool: Could not find Pool-Name attribute.
  modcall[post-auth]: module "studenti" returns noop for request 0
modcall: leaving group post-auth (returns noop) for request 0
Sending Access-Accept of id 0 to 127.0.0.1 port 1039
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 6 seconds...
rad_recv: Accounting-Request packet from host 127.0.0.1:1037, id=0,
length=131
        Acct-Status-Type = Start
        User-Name = "arccas"
        Calling-Station-Id = "00-02-D7-BF-A0-98"
        Called-Station-Id = "00-50-BF-E3-E8-2A"
        NAS-Port-Type = Wireless-802.11
        NAS-Port = 1
        NAS-Port-Id = "00000001"
        NAS-IP-Address = 0.0.0.0
        NAS-Identifier = "nas01"
        Framed-IP-Address = 192.168.182.3
        Acct-Session-Id = "44ce1d9300000001"
  Processing the preacct section of radiusd.conf
modcall: entering group preacct for request 1
  modcall[preacct]: module "preprocess" returns noop for request 1
rlm_acct_unique: Hashing 'NAS-Port = 1,Client-IP-Address =
127.0.0.1,NAS-IP-Address
= 0.0.0.0,Acct-Session-Id = "44ce1d9300000001",User-Name = "arccas"'
rlm_acct_unique: Acct-Unique-Session-ID = "6b0287a8c4334b7b".
  modcall[preacct]: module "acct_unique" returns ok for request 1
    rlm_realm: No '@' in User-Name = "arccas", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[preacct]: module "suffix" returns noop for request 1
modcall: leaving group preacct (returns ok) for request 1
  Processing the accounting section of radiusd.conf
modcall: entering group accounting for request 1
rlm_ippool: This is not an Accounting-Stop. Return NOOP.
  modcall[accounting]: module "studenti" returns noop for request 1
radius_xlat:  '/usr/local/var/log/radius/radacct/127.0.0.1/detail-20060731'
rlm_detail:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands
to /usr/local/var/log/radius/radacct/127.0.0.1/detail-20060731
  modcall[accounting]: module "detail" returns ok for request 1
  modcall[accounting]: module "unix" returns ok for request 1
radius_xlat:  '/usr/local/var/log/radius/radutmp'
radius_xlat:  'arccas'
modcall[accounting]: module "radutmp" returns ok for request 1
modcall: leaving group accounting (returns ok) for request 1
Sending Accounting-Response of id 0 to 127.0.0.1 port 1037
Finished request 1




What does your radiusd.conf look like?


radius.conf

 ippool studenti {
                 range-start = 192.168.182.129
                 range-stop = 192.168.182.254
                 netmask = 255.255.255.0
                 cache-size = 800
                 session-db = ${raddbdir}/db.ippool
                 ip-index = ${raddbdir}/db.ipindex
                 override = yes
                 maximum-timeout = 0
      }


accounting {

        studenti
......
post-auth {

        studenti
......
-------------
users

DEFAULT Auth-Type = LDAP
        Fall-Through = 1
DEFAULT         Huntgroup-Name == "studenti", Ldap-Group == "student",
Pool-Name:="studenti"
DEFAULT Service-Type == Framed-User
        Framed-IP-Address = 255.255.255.254,
        Framed-MTU = 576,
        Service-Type = Framed-User,
        Fall-Through = Yes,
        WISPr-Bandwidth-Max-Up = 128000,
        WISPr-Bandwidth-Max-Down = 512000
DEFAULT Framed-Protocol == PPP
        Framed-Protocol = PPP,
        Framed-Compression = Van-Jacobson-TCP-IP
DEFAULT Hint == "CSLIP"
        Framed-Protocol = SLIP,
        Framed-Compression = Van-Jacobson-TCP-IP
DEFAULT Hint == "SLIP"
        Framed-Protocol = SLIP

-------
Huntgroups

studenti        NAS-IP-Address == 192.168.182.1
--------

I'll repeat myself - you are NOT setting the Pool-Name attribute. Set
> it, and it will work.


How i can set it? I really didn't understand this. Where I must set the
Pool-Name attribute? In radius.conf.

Really, thanks a lot for your patience.

Giusy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20060731/61999d9a/attachment.html>


More information about the Freeradius-Users mailing list