<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>Am 08.06.2010 um 09:59 schrieb Spacelee:</div><br class="Apple-interchange-newline"><blockquote type="cite">i use radius -X to see the log, it looks like:<div><br></div><div><div>Ignoring request to authentication address * port 1812 from unknown client 123.116.121.228 port 56627</div><div>Ready to process requests.</div><div>Ignoring request to authentication address * port 1812 from unknown client 123.116.121.228 port 56627</div> <div>Ready to process requests.</div></div></blockquote><div><br></div><div>As far as I understand, such an error message means that the "unknown client" is not defined in client.conf and therefore freeradius discards the request (for security reasons).</div><div><br></div><div>Have a nice day!</div><br><blockquote type="cite"><div><div><br></div><br><div class="gmail_quote">2010/6/8 Spacelee <span dir="ltr"><<a href="mailto:fjctlzy@gmail.com">fjctlzy@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> what should i write in client.conf<div><br></div><div>mine is like this:</div><div>client <a href="http://fremont.iqwer.com" target="_blank">fremont.iqwer.com</a> {</div><div> ipaddr = 173.233.234.52</div><div> shortname = fremont</div> <div> secret = 19861230</div><div> nastype = other</div><div><div><div></div><div class="h5">}<br><br><div class="gmail_quote">2010/6/8 Spacelee <span dir="ltr"><<a href="mailto:fjctlzy@gmail.com" target="_blank">fjctlzy@gmail.com</a>></span><br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> on the radius server, i type the two command , and get those results, the iptables has been shutdown<div><br></div><div><br><div><div>radtest test test localhost 1812 19861230</div><div><div>Sending Access-Request of id 124 to 127.0.0.1 port 1812</div> <div><span style="white-space:pre"> </span>User-Name = "test"</div><div><span style="white-space:pre"> </span>User-Password = "test"</div><div><span style="white-space:pre"> </span>NAS-IP-Address = 127.0.0.1</div> <div><span style="white-space:pre"> </span>NAS-Port = 1812</div><div>rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=124, length=20</div></div><div><br></div><div><br></div><div><div> radtest test test 173.224.212.50 1812 19861230</div><div>Sending Access-Request of id 236 to 173.234.232.50 port 1812</div><div><span style="white-space:pre"> </span>User-Name = "test"</div> <div><span style="white-space:pre"> </span>User-Password = "test"</div><div><span style="white-space:pre"> </span>NAS-IP-Address = 127.0.0.1</div><div><span style="white-space:pre"> </span>NAS-Port = 1812</div> <div>Sending Access-Request of id 236 to 173.224.212.50 port 1812</div><div><span style="white-space:pre"> </span>User-Name = "test"</div><div><span style="white-space:pre"> </span>User-Password = "test"</div> <div><span style="white-space:pre"> </span>NAS-IP-Address = 127.0.0.1</div><div><span style="white-space:pre"> </span>NAS-Port = 1812</div><div>Sending Access-Request of id 236 to 173.224.212.50 port 1812</div> <div><span style="white-space:pre"> </span>User-Name = "test"</div><div><span style="white-space:pre"> </span>User-Password = "test"</div><div><span style="white-space:pre"> </span>NAS-IP-Address = 127.0.0.1</div> <div><span style="white-space:pre"> </span>NAS-Port = 1812</div><div>radclient: no response from server for ID 236 socket 3</div></div><div><div></div><div><div><br></div><br><div class="gmail_quote">2010/6/8 Spacelee <span dir="ltr"><<a href="mailto:fjctlzy@gmail.com" target="_blank">fjctlzy@gmail.com</a>></span><br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">this is the file users' content<div><div><div>test Auth-Type:=MS-CHAP, User-Password:="test", Simultaneous-Use:=100</div> <div> Service-Type = Framed-User,</div><div> Framed-Protocol = PPP,</div> <div> Framed-IP-Address = 255.255.255.254,</div><div> Framed-IP-Netmask = 255.255.255.0</div><div><br></div><div><br></div><br><div class="gmail_quote">2010/6/8 Spacelee <span dir="ltr"><<a href="mailto:fjctlzy@gmail.com" target="_blank">fjctlzy@gmail.com</a>></span><div> <div></div><div><br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">i use netstat and found there is radius listen on 1812, 1813 and 1814 using udp<div>i shut down all the iptables both on the server of pptp and the server radius</div> <div><br></div><div>but the pptp can't be authenticated , the log is</div> <div><br></div><div><div>RADIUS plugin initialized.</div><div>Jun 8 15:26:29 mountainview pppd[4604]: Plugin /usr/lib64/pppd/2.4.4/radattr.so loaded.</div><div>Jun 8 15:26:29 mountainview pppd[4604]: RADATTR plugin initialized.</div> <div>Jun 8 15:26:29 mountainview pppd[4604]: Plugin /usr/lib64/pptpd/pptpd-logwtmp.so loaded.</div><div>Jun 8 15:26:29 mountainview pppd[4604]: pptpd-logwtmp: $Version$</div><div>Jun 8 15:26:29 mountainview pppd[4604]: pppd 2.4.4 started by root, uid 0</div> <div>Jun 8 15:26:29 mountainview pppd[4604]: Using interface ppp0</div><div>Jun 8 15:26:29 mountainview pppd[4604]: Connect: ppp0 <--> /dev/pts/1</div><div>Jun 8 15:27:03 mountainview pppd[4604]: rc_send_server: no reply from RADIUS server puppet:1812</div> <div>Jun 8 15:27:03 mountainview pppd[4604]: Peer test failed CHAP authentication</div><div>Jun 8 15:27:03 mountainview pppd[4604]: Connection terminated.</div><div>Jun 8 15:27:03 mountainview pppd[4604]: Exit.</div><div> <br></div><div><br></div><div>it says there is not reply</div><br><div class="gmail_quote">2010/6/8 Alan Buxey <span dir="ltr"><<a href="mailto:A.L.M.Buxey@lboro.ac.uk" target="_blank">A.L.M.Buxey@lboro.ac.uk</a>></span><div> <div></div><div><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Hi,<br> <div>> i can start freeradius ok, but my pptp can't remote access radius server, I telnet 1812 or 1813 , but both are connection refused, i don't know what to do with this situation<br> <br> </div>firewall eg iptables , on the server you put freeradius on?<br> <br> alan<br> -<br> List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br> </blockquote></div></div></div><br><br clear="all"><br>-- <br>Spacelee<br> </div> </blockquote></div></div></div><br><br clear="all"><br>-- <br>Spacelee<br> </div></div> </blockquote></div><br><br clear="all"><br></div></div>-- <br>Spacelee<br> </div></div> </blockquote></div><br><br clear="all"><br></div></div>-- <br>Spacelee<br> </div> </blockquote></div><br><br clear="all"><br>-- <br>Spacelee<br> </div> -<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></blockquote></div><br><div> <span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; -webkit-text-decorations-in-effect: none; text-indent: 0px; -webkit-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Nicolas Goutte</div><div><br class="khtml-block-placeholder"></div><div> </div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">extragroup GmbH - Karlsruhe</div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Waldstr. 49</div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">76133 Karlsruhe</div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Germany</div><div> </div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Geschäftsführer: Lars Busch<br>Registergericht: Amtsgericht Münster / HRB: 5624<br>Steuer Nr.: 337/5903/0421 / UstID: DE 204607841<br></div></div><br class="Apple-interchange-newline"></span></div></span><br class="Apple-interchange-newline"> </div><br></body></html>