<br><br><div><span class="gmail_quote">On 7/31/06, <b class="gmail_sendername">Phil Mayers</b> <<a href="mailto:p.mayers@imperial.ac.uk">p.mayers@imperial.ac.uk</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>The logs you have given are NOT debugging output.</blockquote><div><br>root@barbaculo:/usr/local/etc/raddb# radiusd -X -A &<br>[1] 16321<br>Starting - reading configuration files ...<br>.......<br>Ready to process requests.
<br>rad_recv: Access-Request packet from host <a href="http://127.0.0.1:1039">127.0.0.1:1039</a>, id=0, length=216<br> User-Name = "arccas"<br> CHAP-Challenge = 0xf606250a5f23241fb1b9d9109af1a082<br>
CHAP-Password = 0x00c66b772cfa0368bcf45f5e2945903846<br> NAS-IP-Address = <a href="http://0.0.0.0">0.0.0.0</a><br> Service-Type = Login-User<br> Framed-IP-Address = <a href="http://192.168.182.3">
192.168.182.3</a><br> Calling-Station-Id = "00-02-D7-BF-A0-98"<br> Called-Station-Id = "00-50-BF-E3-E8-2A"<br> NAS-Identifier = "nas01"<br> Acct-Session-Id = "44ce1d9300000001"
<br> NAS-Port-Type = Wireless-802.11<br> NAS-Port = 1<br> Message-Authenticator = 0x4e30008639aaaa133c8110c2088e9d90<br> WISPr-Logoff-URL = "<a href="http://192.168.182.1:3990/logoff">http://192.168.182.1:3990/logoff
</a>"<br> Processing the authorize section of radiusd.conf<br>modcall: entering group authorize for request 0<br> modcall[authorize]: module "preprocess" returns ok for request 0<br> rlm_chap: Setting 'Auth-Type := CHAP'
<br> modcall[authorize]: module "chap" returns ok for request 0<br>rlm_ldap: - authorize<br>rlm_ldap: performing user authorization for arccas<br>radius_xlat: '(uid=arccas)'<br>radius_xlat: 'ou=statistica,dc=xxx,dc=it'
<br>rlm_ldap: ldap_get_conn: Checking Id: 0<br>rlm_ldap: ldap_get_conn: Got Id: 0<br>rlm_ldap: attempting LDAP reconnection<br>rlm_ldap: (re)connect to localhost:389, authentication 0<br>rlm_ldap: bind as cn=Manager,dc=xxx,dc=it/PASSWORD to localhost:389
<br>rlm_ldap: waiting for bind result ...<br>rlm_ldap: Bind was successful<br>rlm_ldap: performing search in ou=statistica,dc=xxx,dc=it, with filter (uid=arccas)<br>rlm_ldap: checking if remote access for arccas is allowed by userPassword
<br>rlm_ldap: Added password a in check items<br>rlm_ldap: looking for check items in directory...<br>rlm_ldap: Adding radiusGroupName as Ldap-Group, value student & op=21<br>rlm_ldap: Adding radiusCallingStationId as Calling-Station-Id, value 00-02-D7-BF-A0-98 & op=21
<br>rlm_ldap: Adding userPassword as User-Password, value a & op=21<br>rlm_ldap: looking for reply items in directory...<br>rlm_ldap: user arccas authorized to use remote access<br>rlm_ldap: ldap_release_conn: Release Id: 0
<br> modcall[authorize]: module "ldap" returns ok for request 0<br>rlm_checkval: Item Name: Calling-Station-Id, Value: 00-02-D7-BF-A0-98<br>rlm_checkval: Value Name: Calling-Station-Id, Value: 00-02-D7-BF-A0-98<br>
modcall[authorize]: module "checkval" returns ok for request 0<br>modcall: leaving group authorize (returns ok) for request 0<br> rad_check_password: Found Auth-Type CHAP<br>auth: type "CHAP"<br> Processing the authenticate section of
radiusd.conf<br>modcall: entering group CHAP for request 0<br> rlm_chap: login attempt by "arccas" with CHAP password<br> rlm_chap: Using clear text password a for user arccas authentication.<br> rlm_chap: chap user arccas authenticated succesfully
<br> modcall[authenticate]: module "chap" returns ok for request 0<br>modcall: leaving group CHAP (returns ok) for request 0<br> Processing the post-auth section of radiusd.conf<br>modcall: entering group post-auth for request 0
<br>rlm_ippool: Could not find Pool-Name attribute.<br> modcall[post-auth]: module "studenti" returns noop for request 0<br>modcall: leaving group post-auth (returns noop) for request 0<br>Sending Access-Accept of id 0 to
<a href="http://127.0.0.1">127.0.0.1</a> port 1039<br>Finished request 0<br>Going to the next request<br>--- Walking the entire request list ---<br>Waking up in 6 seconds...<br>rad_recv: Accounting-Request packet from host
<a href="http://127.0.0.1:1037">127.0.0.1:1037</a>, id=0, length=131<br> Acct-Status-Type = Start<br> User-Name = "arccas"<br> Calling-Station-Id = "00-02-D7-BF-A0-98"<br> Called-Station-Id = "00-50-BF-E3-E8-2A"
<br> NAS-Port-Type = Wireless-802.11<br> NAS-Port = 1<br> NAS-Port-Id = "00000001"<br> NAS-IP-Address = <a href="http://0.0.0.0">0.0.0.0</a><br> NAS-Identifier = "nas01"
<br> Framed-IP-Address = <a href="http://192.168.182.3">192.168.182.3</a><br> Acct-Session-Id = "44ce1d9300000001"<br> Processing the preacct section of radiusd.conf<br>modcall: entering group preacct for request 1
<br> modcall[preacct]: module "preprocess" returns noop for request 1<br>rlm_acct_unique: Hashing 'NAS-Port = 1,Client-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a>,NAS-IP-Address = <a href="http://0.0.0.0">
0.0.0.0</a>,Acct-Session-Id = "44ce1d9300000001",User-Name = "arccas"'<br>rlm_acct_unique: Acct-Unique-Session-ID = "6b0287a8c4334b7b".<br> modcall[preacct]: module "acct_unique" returns ok for request 1
<br> rlm_realm: No '@' in User-Name = "arccas", looking up realm NULL<br> rlm_realm: No such realm "NULL"<br> modcall[preacct]: module "suffix" returns noop for request 1<br>modcall: leaving group preacct (returns ok) for request 1
<br> Processing the accounting section of radiusd.conf<br>modcall: entering group accounting for request 1<br>rlm_ippool: This is not an Accounting-Stop. Return NOOP.<br> modcall[accounting]: module "studenti" returns noop for request 1
<br>radius_xlat: '/usr/local/var/log/radius/radacct/127.0.0.1/detail-20060731'<br>rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/127.0.0.1/detail-20060731
<br> modcall[accounting]: module "detail" returns ok for request 1<br> modcall[accounting]: module "unix" returns ok for request 1<br>radius_xlat: '/usr/local/var/log/radius/radutmp'<br>radius_xlat: 'arccas'
<br>modcall[accounting]: module "radutmp" returns ok for request 1<br>modcall: leaving group accounting (returns ok) for request 1<br>Sending Accounting-Response of id 0 to <a href="http://127.0.0.1">127.0.0.1</a>
port 1037<br>Finished request 1<br><br><br> </div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">What does your radiusd.conf look like?
</blockquote><div><br>radius.conf<br><br> ippool studenti {<br> range-start = <a href="http://192.168.182.129">192.168.182.129</a><br> range-stop = <a href="http://192.168.182.254">192.168.182.254
</a><br> netmask = <a href="http://255.255.255.0">255.255.255.0</a><br> cache-size = 800 <br> session-db = ${raddbdir}/db.ippool<br> ip-index = ${raddbdir}/db.ipindex
<br> override = yes<br> maximum-timeout = 0<br> }<br><br><br>accounting {<br> <br> studenti<br>......<br>post-auth {<br> <br> studenti<br>......<br>-------------
<br>users<br><br>DEFAULT Auth-Type = LDAP<br> Fall-Through = 1<br>DEFAULT Huntgroup-Name == "studenti", Ldap-Group == "student", Pool-Name:="studenti"<br>DEFAULT Service-Type == Framed-User
<br> Framed-IP-Address = <a href="http://255.255.255.254">255.255.255.254</a>,<br> Framed-MTU = 576,<br> Service-Type = Framed-User,<br> Fall-Through = Yes,<br> WISPr-Bandwidth-Max-Up = 128000,
<br> WISPr-Bandwidth-Max-Down = 512000<br>DEFAULT Framed-Protocol == PPP<br> Framed-Protocol = PPP,<br> Framed-Compression = Van-Jacobson-TCP-IP<br>DEFAULT Hint == "CSLIP"<br> Framed-Protocol = SLIP,
<br> Framed-Compression = Van-Jacobson-TCP-IP<br>DEFAULT Hint == "SLIP"<br> Framed-Protocol = SLIP<br><br>-------<br>Huntgroups<br><br>studenti NAS-IP-Address == <a href="http://192.168.182.1">
192.168.182.1</a><br>-------- <br></div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">I'll repeat myself - you are NOT setting the Pool-Name attribute. Set
<br>it, and it will work.</blockquote><div><br>How i can set it? I really didn't understand this. Where I must set the Pool-Name attribute? In radius.conf.<br><br>Really, thanks a lot for your patience.<br><br>Giusy<br> </div>
</div><br>