<div dir="ltr">Hi,<div><br></div><div>I can't really see any errors in the debug output below (Sorry if it's long, I just copy and pasted from debug)</div><div><br></div><div><br></div><div><br></div><div><div>Mon Sep 1 15:54:20 2014 : Info: radiusd: FreeRADIUS Version 2.2.1, for host i686-pc-linux-gnu, built on Aug 13 2014 at 13:27:52</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Server was built with:</div><div>Mon Sep 1 15:54:20 2014 : Debug: accounting</div><div>Mon Sep 1 15:54:20 2014 : Debug: authentication</div><div>Mon Sep 1 15:54:20 2014 : Debug: WITH_DHCP</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: WITH_VMPS</div><div>Mon Sep 1 15:54:20 2014 : Debug: Server core libs:</div><div>Mon Sep 1 15:54:20 2014 : Debug: ssl: OpenSSL 1.0.1e-fips 11 Feb 2013</div><div>Mon Sep 1 15:54:20 2014 : Info: Copyright (C) 1999-2013 The FreeRADIUS server project and contributors.</div>
<div>Mon Sep 1 15:54:20 2014 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A</div><div>Mon Sep 1 15:54:20 2014 : Info: PARTICULAR PURPOSE.</div><div>Mon Sep 1 15:54:20 2014 : Info: You may redistribute copies of FreeRADIUS under the terms of the</div>
<div>Mon Sep 1 15:54:20 2014 : Info: GNU General Public License.</div><div>Mon Sep 1 15:54:20 2014 : Info: For more information about these matters, see the file named COPYRIGHT.</div><div>Mon Sep 1 15:54:20 2014 : Info: Starting - reading configuration files ...</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: including configuration file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: including configuration file /etc/raddb/proxy.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: including configuration file /etc/raddb/clients.conf</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: including configuration file /etc/raddb/snmp.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: including configuration file /etc/raddb/eap.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: including configuration file /etc/raddb/sql.conf</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: main {</div><div>Mon Sep 1 15:54:20 2014 : Debug: allow_core_dumps = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div><div>Mon Sep 1 15:54:20 2014 : Debug: including dictionary file /etc/raddb/dictionary</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: main {</div><div>Mon Sep 1 15:54:20 2014 : Debug: name = "radiusd"</div><div>Mon Sep 1 15:54:20 2014 : Debug: prefix = "/usr"</div><div>Mon Sep 1 15:54:20 2014 : Debug: localstatedir = "/var"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: sbindir = "/usr/sbin"</div><div>Mon Sep 1 15:54:20 2014 : Debug: logdir = "/var/log/radius"</div><div>Mon Sep 1 15:54:20 2014 : Debug: run_dir = "/var/run/radiusd"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: libdir = "/usr/lib"</div><div>Mon Sep 1 15:54:20 2014 : Debug: radacctdir = "/var/log/radius/radacct"</div><div>Mon Sep 1 15:54:20 2014 : Debug: hostname_lookups = no</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: max_request_time = 30</div><div>Mon Sep 1 15:54:20 2014 : Debug: cleanup_delay = 5</div><div>Mon Sep 1 15:54:20 2014 : Debug: max_requests = 1024</div><div>Mon Sep 1 15:54:20 2014 : Debug: pidfile = "/var/run/radiusd/radiusd.pid"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: checkrad = "/usr/sbin/checkrad"</div><div>Mon Sep 1 15:54:20 2014 : Debug: debug_level = 0</div><div>Mon Sep 1 15:54:20 2014 : Debug: proxy_requests = yes</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: log_auth = yes</div><div>Mon Sep 1 15:54:20 2014 : Debug: log_auth_badpass = yes</div><div><div>Mon Sep 1 15:54:20 2014 : Debug: log_auth_goodpass = no</div><div>
Mon Sep 1 15:54:20 2014 : Debug: log_stripped_names = yes</div><div>Mon Sep 1 15:54:20 2014 : Debug: security {</div><div>Mon Sep 1 15:54:20 2014 : Debug: max_attributes = 200</div><div>Mon Sep 1 15:54:20 2014 : Debug: reject_delay = 1</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: status_server = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div><div>Mon Sep 1 15:54:20 2014 : Debug: radiusd: #### Loading Realms and Home Servers ####</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: proxy server {</div><div>Mon Sep 1 15:54:20 2014 : Debug: retry_delay = 5</div><div>Mon Sep 1 15:54:20 2014 : Debug: retry_count = 3</div><div>Mon Sep 1 15:54:20 2014 : Debug: default_fallback = yes</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: dead_time = 120</div><div>Mon Sep 1 15:54:20 2014 : Debug: wake_all_if_all_dead = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div><div>Mon Sep 1 15:54:20 2014 : Debug: home_server rad01 {</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: ipaddr = 192.168.25.126</div><div>Mon Sep 1 15:54:20 2014 : Debug: port = 1813</div><div>Mon Sep 1 15:54:20 2014 : Debug: type = "acct"</div><div>Mon Sep 1 15:54:20 2014 : Debug: secret = "testing123"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: response_window = 30</div><div>Mon Sep 1 15:54:20 2014 : Debug: max_outstanding = 65536</div><div>Mon Sep 1 15:54:20 2014 : Debug: require_message_authenticator = yes</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: zombie_period = 40</div><div>Mon Sep 1 15:54:20 2014 : Debug: status_check = "none"</div><div>Mon Sep 1 15:54:20 2014 : Debug: ping_interval = 30</div><div>
Mon Sep 1 15:54:20 2014 : Debug: check_interval = 30</div><div>Mon Sep 1 15:54:20 2014 : Debug: num_answers_to_alive = 3</div><div>Mon Sep 1 15:54:20 2014 : Debug: num_pings_to_alive = 3</div><div>Mon Sep 1 15:54:20 2014 : Debug: revive_interval = 300</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: status_check_timeout = 4</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div><div>Mon Sep 1 15:54:20 2014 : Debug: realm LOCAL {</div><div>Mon Sep 1 15:54:20 2014 : Debug: authhost = LOCAL</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: accthost = LOCAL</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div><div>Mon Sep 1 15:54:20 2014 : Debug: realm acc_realm {</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: home_server_pool acc1 {</div><div>Mon Sep 1 15:54:20 2014 : Debug: home_server = rad01</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div></div></div><div><div>Mon Sep 1 15:54:20 2014 : Debug: radiusd: #### Loading Clients ####</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: client 127.0.0.1 {</div><div>Mon Sep 1 15:54:20 2014 : Debug: require_message_authenticator = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: secret = "testING123"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: shortname = "localhost"</div><div>Mon Sep 1 15:54:20 2014 : Debug: nastype = "other"</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div></div><div><div>
Mon Sep 1 15:54:20 2014 : Debug: client 192.168.25.126 {</div><div>Mon Sep 1 15:54:20 2014 : Debug: require_message_authenticator = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: secret = "testing123"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: shortname = "backup"</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div></div><div><div>Mon Sep 1 15:54:20 2014 : Debug: radiusd: #### Instantiating modules ####</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: instantiate {</div><div>Mon Sep 1 15:54:20 2014 : Debug: (Loaded rlm_exec, checking if it's valid)</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to module rlm_exec</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating module "exec" from file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: exec {</div><div>Mon Sep 1 15:54:20 2014 : Debug: wait = yes</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: input_pairs = "request"</div><div>Mon Sep 1 15:54:20 2014 : Debug: shell_escape = yes</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div><div>Mon Sep 1 15:54:20 2014 : Debug: (Loaded rlm_expr, checking if it's valid)</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to module rlm_expr</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating module "expr" from file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: radiusd: #### Loading Virtual Servers ####</div><div>Mon Sep 1 15:54:20 2014 : Debug: server { # from file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: modules {</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Checking authenticate {...} for more modules to load</div><div>Mon Sep 1 15:54:20 2014 : Debug: (Loaded rlm_pap, checking if it's valid)</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to module rlm_pap</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating module "pap" from file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: pap {</div><div>Mon Sep 1 15:54:20 2014 : Debug: encryption_scheme = "auto"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: auto_header = yes</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div><div>Mon Sep 1 15:54:20 2014 : Debug: (Loaded rlm_chap, checking if it's valid)</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to module rlm_chap</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating module "chap" from file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: (Loaded rlm_mschap, checking if it's valid)</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to module rlm_mschap</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating module "mschap" from file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: mschap {</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: use_mppe = yes</div><div>Mon Sep 1 15:54:20 2014 : Debug: require_encryption = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: require_strong = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: with_ntdomain_hack = no</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: allow_retry = yes</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div><div>Mon Sep 1 15:54:20 2014 : Debug: (Loaded rlm_unix, checking if it's valid)</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to module rlm_unix</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating module "unix" from file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: unix {</div><div>Mon Sep 1 15:54:20 2014 : Debug: radwtmp = "/var/log/radius/radwtmp"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: }</div></div><div><div>Mon Sep 1 15:54:20 2014 : Debug: (Loaded rlm_eap, checking if it's valid)</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to module rlm_eap</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating module "eap" from file /etc/raddb/eap.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: eap {</div><div>Mon Sep 1 15:54:20 2014 : Debug: default_eap_type = "md5"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: timer_expire = 60</div><div>Mon Sep 1 15:54:20 2014 : Debug: ignore_unknown_eap_types = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: cisco_accounting_username_bug = no</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: max_sessions = 2048</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to sub-module rlm_eap_md5</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating eap-md5</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to sub-module rlm_eap_leap</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating eap-leap</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to sub-module rlm_eap_gtc</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating eap-gtc</div><div>Mon Sep 1 15:54:20 2014 : Debug: gtc {</div><div>Mon Sep 1 15:54:20 2014 : Debug: challenge = "Password: "</div><div>Mon Sep 1 15:54:20 2014 : Debug: auth_type = "PAP"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: }</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to sub-module rlm_eap_mschapv2</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating eap-mschapv2</div><div>
Mon Sep 1 15:54:20 2014 : Debug: mschapv2 {</div><div>Mon Sep 1 15:54:20 2014 : Debug: with_ntdomain_hack = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: send_error = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Checking authorize {...} for more modules to load</div><div>Mon Sep 1 15:54:20 2014 : Debug: (Loaded rlm_preprocess, checking if it's valid)</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to module rlm_preprocess</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating module "preprocess" from file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: preprocess {</div><div>Mon Sep 1 15:54:20 2014 : Debug: huntgroups = "/etc/raddb/huntgroups"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: hints = "/etc/raddb/hints"</div><div>Mon Sep 1 15:54:20 2014 : Debug: with_ascend_hack = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: ascend_channels_per_line = 23</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: with_ntdomain_hack = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: with_specialix_jetstream_hack = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: with_cisco_vsa_hack = no</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: with_alvarion_vsa_hack = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div><div>Mon Sep 1 15:54:20 2014 : Debug: reading pairlist file /etc/raddb/huntgroups</div></div><div>
<div>Mon Sep 1 15:54:20 2014 : Debug: reading pairlist file /etc/raddb/hints</div><div>Mon Sep 1 15:54:20 2014 : Debug: (Loaded rlm_realm, checking if it's valid)</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to module rlm_realm</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating module "suffix" from file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:20 2014 : Debug: realm suffix {</div><div>Mon Sep 1 15:54:20 2014 : Debug: format = "suffix"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: delimiter = "@"</div><div>Mon Sep 1 15:54:20 2014 : Debug: ignore_default = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: ignore_null = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: (Loaded rlm_files, checking if it's valid)</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to module rlm_files</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating module "files" from file /etc/raddb/radiusd.conf</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: files {</div><div>Mon Sep 1 15:54:20 2014 : Debug: usersfile = "/etc/raddb/users"</div><div>Mon Sep 1 15:54:20 2014 : Debug: acctusersfile = "/etc/raddb/acct_users"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: preproxy_usersfile = "/etc/raddb/preproxy_users"</div><div>Mon Sep 1 15:54:20 2014 : Debug: compat = "no"</div><div>Mon Sep 1 15:54:20 2014 : Debug: }</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: reading pairlist file /etc/raddb/users</div><div>Mon Sep 1 15:54:20 2014 : Debug: reading pairlist file /etc/raddb/acct_users</div><div>Mon Sep 1 15:54:20 2014 : Debug: reading pairlist file /etc/raddb/preproxy_users</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: (Loaded rlm_sql, checking if it's valid)</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Linked to module rlm_sql</div><div>Mon Sep 1 15:54:20 2014 : Debug: Module: Instantiating module "sql" from file /etc/raddb/sql.conf</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: sql {</div><div>Mon Sep 1 15:54:20 2014 : Debug: driver = "rlm_sql_mysql"</div><div>Mon Sep 1 15:54:20 2014 : Debug: server = "localhost"</div><div>
Mon Sep 1 15:54:20 2014 : Debug: port = ""</div><div>Mon Sep 1 15:54:20 2014 : Debug: login = "radius"</div><div>Mon Sep 1 15:54:20 2014 : Debug: password = "XXXX"</div><div>
Mon Sep 1 15:54:20 2014 : Debug: radius_db = "radius"</div><div>Mon Sep 1 15:54:20 2014 : Debug: read_groups = yes</div><div>Mon Sep 1 15:54:20 2014 : Debug: sqltrace = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: sqltracefile = "/var/log/radius/sqltrace.sql"</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: readclients = no</div><div>Mon Sep 1 15:54:20 2014 : Debug: deletestalesessions = yes</div><div>Mon Sep 1 15:54:20 2014 : Debug: num_sql_socks = 25</div><div>Mon Sep 1 15:54:20 2014 : Debug: lifetime = 0</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: max_queries = 0</div><div>Mon Sep 1 15:54:20 2014 : Debug: sql_user_name = "%{User-Name}"</div><div>Mon Sep 1 15:54:20 2014 : Debug: default_user_profile = ""</div>
<div>Mon Sep 1 15:54:20 2014 : Debug: nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" ...</div><div>...</div><div><div>Mon Sep 1 15:54:21 2014 : Debug: rlm_sql (sql): starting 24</div><div>
Mon Sep 1 15:54:21 2014 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #24</div><div>Mon Sep 1 15:54:21 2014 : Info: rlm_sql_mysql: Starting connect to MySQL server for #24</div><div>Mon Sep 1 15:54:21 2014 : Info: rlm_sql (sql): Connected new DB handle, #24</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: Module: Checking preacct {...} for more modules to load</div><div>Mon Sep 1 15:54:21 2014 : Debug: (Loaded rlm_acct_unique, checking if it's valid)</div><div>Mon Sep 1 15:54:21 2014 : Debug: Module: Linked to module rlm_acct_unique</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: Module: Instantiating module "acct_unique" from file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:21 2014 : Debug: acct_unique {</div><div>Mon Sep 1 15:54:21 2014 : Debug: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: }</div><div>Mon Sep 1 15:54:21 2014 : Debug: Module: Checking accounting {...} for more modules to load</div><div>Mon Sep 1 15:54:21 2014 : Debug: (Loaded rlm_detail, checking if it's valid)</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: Module: Linked to module rlm_detail</div><div>Mon Sep 1 15:54:21 2014 : Debug: Module: Instantiating module "detail" from file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:21 2014 : Debug: detail {</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"</div><div>Mon Sep 1 15:54:21 2014 : Debug: header = "%t"</div><div>Mon Sep 1 15:54:21 2014 : Debug: detailperm = 384</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: dirperm = 493</div><div>Mon Sep 1 15:54:21 2014 : Debug: locking = no</div><div>Mon Sep 1 15:54:21 2014 : Debug: log_packet_header = no</div><div>Mon Sep 1 15:54:21 2014 : Debug: }</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: (Loaded rlm_radutmp, checking if it's valid)</div><div>Mon Sep 1 15:54:21 2014 : Debug: Module: Linked to module rlm_radutmp</div><div>Mon Sep 1 15:54:21 2014 : Debug: Module: Instantiating module "radutmp" from file /etc/raddb/radiusd.conf</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: radutmp {</div><div>Mon Sep 1 15:54:21 2014 : Debug: filename = "/var/log/radius/radutmp"</div><div>Mon Sep 1 15:54:21 2014 : Debug: username = "%{User-Name}"</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: case_sensitive = yes</div><div>Mon Sep 1 15:54:21 2014 : Debug: check_with_nas = yes</div><div>Mon Sep 1 15:54:21 2014 : Debug: perm = 384</div><div>Mon Sep 1 15:54:21 2014 : Debug: callerid = yes</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: }</div><div>Mon Sep 1 15:54:21 2014 : Debug: Module: Checking session {...} for more modules to load</div><div>Mon Sep 1 15:54:21 2014 : Debug: Module: Checking post-proxy {...} for more modules to load</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: } # modules</div><div>Mon Sep 1 15:54:21 2014 : Debug: } # server</div><div>Mon Sep 1 15:54:21 2014 : Debug: radiusd: #### Opening IP addresses and Ports ####</div><div>Mon Sep 1 15:54:21 2014 : Debug: bind_address = *</div>
<div>Mon Sep 1 15:54:21 2014 : Info: WARNING: The directive 'bind_address' is deprecated, and will be removed in future versions of FreeRADIUS. Please edit the configuration files to use the directive 'listen'.</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: ... adding new socket proxy address * port 36384</div><div>Mon Sep 1 15:54:21 2014 : Debug: Listening on authentication address * port 1812</div></div><div><div>Mon Sep 1 15:54:21 2014 : Debug: Listening on accounting address * port 1813</div>
<div>Mon Sep 1 15:54:21 2014 : Debug: Listening on proxy address * port 1814</div><div>Mon Sep 1 15:54:21 2014 : Info: Ready to process requests.</div><div>rad_recv: Accounting-Request packet from host 192.168.25.157 port 57086, id=161, length=258</div>
<div> Service-Type = Framed-User</div><div> Framed-Protocol = PPP</div><div> NAS-Port = 8388670</div><div> NAS-Port-Type = Ethernet</div><div> User-Name = "<a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a>"</div>
<div> Calling-Station-Id = "60:A4:4C:01:EF:73"</div><div> NAS-Port-Id = "ether2"</div><div> MS-CHAP-Domain = "<a href="http://ewireless.co.za">ewireless.co.za</a>"</div><div>
Acct-Session-Id = "8100003e"</div><div> Framed-IP-Address = 41.222.51.72</div><div> Acct-Authentic = RADIUS</div><div> Event-Timestamp = "Sep 1 2014 15:54:32 SAST"</div><div>
Acct-Session-Time = 707</div><div> Acct-Input-Octets = 251662</div><div> Acct-Input-Gigawords = 0</div><div> Acct-Input-Packets = 3094</div><div> Acct-Output-Octets = 114</div><div> Acct-Output-Gigawords = 0</div>
<div> Acct-Output-Packets = 9</div><div> Acct-Status-Type = Stop</div><div> Acct-Terminate-Cause = User-Request</div><div> NAS-Identifier = "Btester-Client"</div><div> Acct-Delay-Time = 0</div>
<div> Mikrotik-Realm = "<a href="http://ewireless.co.za">ewireless.co.za</a>"</div><div> NAS-IP-Address = 192.168.25.157</div><div>Mon Sep 1 15:54:32 2014 : Info: # Executing section preacct from file /etc/raddb/radiusd.conf</div>
<div>Mon Sep 1 15:54:32 2014 : Info: +group preacct {</div><div>Mon Sep 1 15:54:32 2014 : Info: ++[preprocess] = ok</div><div>Mon Sep 1 15:54:32 2014 : Info: [acct_unique] Hashing 'NAS-Port = 8388670,Client-IP-Address = 192.168.25.157,NAS-IP-Address = 192.168.25.157,Acct-Session-Id = "8100003e",User-Name = "<a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a>"'</div>
<div>Mon Sep 1 15:54:32 2014 : Info: [acct_unique] Acct-Unique-Session-ID = "bda8cde3047e1119".</div><div>Mon Sep 1 15:54:32 2014 : Info: ++[acct_unique] = ok</div><div>Mon Sep 1 15:54:32 2014 : Info: [suffix] Looking up realm "<a href="http://ewireless.co.za">ewireless.co.za</a>" for User-Name = "<a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a>"</div>
<div>Mon Sep 1 15:54:32 2014 : Info: [suffix] No such realm "<a href="http://ewireless.co.za">ewireless.co.za</a>"</div><div>Mon Sep 1 15:54:32 2014 : Info: ++[suffix] = noop</div><div>Mon Sep 1 15:54:32 2014 : Info: ++[files] = noop</div>
<div>Mon Sep 1 15:54:32 2014 : Info: +} # group preacct = noop</div><div>Mon Sep 1 15:54:32 2014 : Info: # Executing section accounting from file /etc/raddb/radiusd.conf</div></div><div><div>Mon Sep 1 15:54:32 2014 : Info: +group preacct {</div>
<div>Mon Sep 1 15:54:32 2014 : Info: ++[preprocess] = ok</div><div>Mon Sep 1 15:54:32 2014 : Info: [acct_unique] Hashing 'NAS-Port = 8388670,Client-IP-Address = 192.168.25.157,NAS-IP-Address = 192.168.25.157,Acct-Session-Id = "8100003e",User-Name = "<a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a>"'</div>
<div>Mon Sep 1 15:54:32 2014 : Info: [acct_unique] Acct-Unique-Session-ID = "bda8cde3047e1119".</div><div>Mon Sep 1 15:54:32 2014 : Info: ++[acct_unique] = ok</div><div>Mon Sep 1 15:54:32 2014 : Info: [suffix] Looking up realm "<a href="http://ewireless.co.za">ewireless.co.za</a>" for User-Name = "<a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a>"</div>
<div>Mon Sep 1 15:54:32 2014 : Info: [suffix] No such realm "<a href="http://ewireless.co.za">ewireless.co.za</a>"</div><div>Mon Sep 1 15:54:32 2014 : Info: ++[suffix] = noop</div><div>Mon Sep 1 15:54:32 2014 : Info: ++[files] = noop</div>
<div>Mon Sep 1 15:54:32 2014 : Info: +} # group preacct = noop</div><div>Mon Sep 1 15:54:32 2014 : Info: # Executing section accounting from file /etc/raddb/radiusd.conf</div><div>Mon Sep 1 15:54:32 2014 : Info: +group accounting {</div>
<div>Mon Sep 1 15:54:32 2014 : Info: [detail] expand: /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/radius/radacct/<a href="http://192.168.25.157/detail-20140901">192.168.25.157/detail-20140901</a></div>
<div>Mon Sep 1 15:54:32 2014 : Info: [detail] /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radius/radacct/<a href="http://192.168.25.157/detail-20140901">192.168.25.157/detail-20140901</a></div>
<div>Mon Sep 1 15:54:32 2014 : Info: [detail] expand: %t -> Mon Sep 1 15:54:32 2014</div><div>Mon Sep 1 15:54:32 2014 : Info: ++[detail] = ok</div><div>Mon Sep 1 15:54:32 2014 : Info: ++[unix] = ok</div><div>
Mon Sep 1 15:54:32 2014 : Info: [radutmp] expand: /var/log/radius/radutmp -> /var/log/radius/radutmp</div><div>Mon Sep 1 15:54:32 2014 : Info: [radutmp] expand: %{User-Name} -> <a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a></div>
<div>Mon Sep 1 15:54:32 2014 : Info: ++[radutmp] = ok</div><div>Mon Sep 1 15:54:32 2014 : Info: [sql] expand: %{User-Name} -> <a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a></div><div>
Mon Sep 1 15:54:32 2014 : Info: [sql] sql_set_user escaped user --> '<a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a>'</div><div>Mon Sep 1 15:54:32 2014 : Info: [sql] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details</div>
<div>Mon Sep 1 15:54:32 2014 : Info: [sql] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details</div><div>Mon Sep 1 15:54:32 2014 : Info: [sql] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details</div>
<div>Mon Sep 1 15:54:32 2014 : Info: [sql] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details</div><div>Mon Sep 1 15:54:32 2014 : Info: [sql] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details</div>
<div>Mon Sep 1 15:54:32 2014 : Info: [sql] expand: UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', AcctOutputOctets = '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time:-0}', ConnectInfo_stop = '%{Connect-Info}', _AcctTime = NOW() WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}' -> UPDATE radacct SET AcctStopTime = '2014-09-01 15:54:32', AcctSessionTime = '707', AcctInputOctets = '0' << 32 | '251662', AcctO</div>
<div>Mon Sep 1 15:54:32 2014 : Debug: rlm_sql (sql): Reserving sql socket id: 24</div><div>Mon Sep 1 15:54:34 2014 : Debug: rlm_sql (sql): Released sql socket id: 24</div><div>Mon Sep 1 15:54:34 2014 : Info: ++[sql] = ok</div>
<div>Mon Sep 1 15:54:34 2014 : Info: +} # group accounting = ok</div><div>Sending Accounting-Response of id 161 to 192.168.25.157 port 57086</div><div>Mon Sep 1 15:54:34 2014 : Info: Finished request 0.</div><div>Mon Sep 1 15:54:34 2014 : Info: Cleaning up request 0 ID 161 with timestamp +11</div>
</div><div><div>Mon Sep 1 15:54:34 2014 : Debug: Going to the next request</div><div>Mon Sep 1 15:54:34 2014 : Info: Ready to process requests.</div><div>rad_recv: Access-Request packet from host 192.168.25.157 port 50309, id=162, length=252</div>
<div> Service-Type = Framed-User</div><div> Framed-Protocol = PPP</div><div> NAS-Port = 8388671</div><div> NAS-Port-Type = Ethernet</div><div> User-Name = "<a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a>"</div>
<div> Calling-Station-Id = "60:A4:4C:01:EF:73"</div><div> NAS-Port-Id = "ether2"</div><div> MS-CHAP-Domain = "<a href="http://ewireless.co.za">ewireless.co.za</a>"</div><div>
MS-CHAP-Challenge = 0x94ae72c572678c29987d8043f608ca91</div><div> MS-CHAP2-Response = 0x0100f6f2494700414227dbb3b5337fc4612b00000000000000001bbd6a3bdee078c819b2116b2bc2fa8da2985ab43bc6b55e</div><div> NAS-Identifier = "Btester-Client"</div>
<div> Mikrotik-Realm = "<a href="http://ewireless.co.za">ewireless.co.za</a>"</div><div> NAS-IP-Address = 192.168.25.157</div><div>Mon Sep 1 15:54:34 2014 : Info: # Executing section authorize from file /etc/raddb/radiusd.conf</div>
<div>Mon Sep 1 15:54:34 2014 : Info: +group authorize {</div><div>Mon Sep 1 15:54:34 2014 : Info: ++[preprocess] = ok</div><div>Mon Sep 1 15:54:34 2014 : Info: ++[chap] = noop</div><div>Mon Sep 1 15:54:34 2014 : Info: [mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap'</div>
<div>Mon Sep 1 15:54:34 2014 : Info: ++[mschap] = ok</div><div>Mon Sep 1 15:54:34 2014 : Info: [suffix] Looking up realm "<a href="http://ewireless.co.za">ewireless.co.za</a>" for User-Name = "<a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a>"</div>
<div>Mon Sep 1 15:54:34 2014 : Info: [suffix] No such realm "<a href="http://ewireless.co.za">ewireless.co.za</a>"</div><div>Mon Sep 1 15:54:34 2014 : Info: ++[suffix] = noop</div><div>Mon Sep 1 15:54:34 2014 : Info: [eap] No EAP-Message, not doing EAP</div>
<div>Mon Sep 1 15:54:34 2014 : Info: ++[eap] = noop</div><div>Mon Sep 1 15:54:34 2014 : Info: [files] users: Matched entry DEFAULT at line 172</div><div>Mon Sep 1 15:54:34 2014 : Info: [files] users: Matched entry DEFAULT at line 184</div>
<div>Mon Sep 1 15:54:34 2014 : Info: ++[files] = ok</div><div>Mon Sep 1 15:54:34 2014 : Info: [sql] expand: %{User-Name} -> <a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a></div><div>
Mon Sep 1 15:54:34 2014 : Info: [sql] sql_set_user escaped user --> '<a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a>'</div><div>Mon Sep 1 15:54:34 2014 : Debug: rlm_sql (sql): Reserving sql socket id: 23</div>
<div>Mon Sep 1 15:54:34 2014 : Info: [sql] expand: SELECT Auth.id, Auth.UserName, Auth.Attribute, Auth.Value, Auth.op FROM radcheck Auth LEFT JOIN rt_users Users ON Users.username = Auth.UserName WHERE Auth.Username = '%{SQL-User-Name}' AND ( Users.lock_number IS NULL OR LENGTH(Users.lock_number) = 0 OR Users.lock_number = '%{Calling-Station-Id}' ) ORDER BY Auth.id -> SELECT Auth.id, Auth.UserName, Auth.Attribute, Auth.Value, Auth.op FROM radcheck Auth LEFT JOIN rt_users Users ON Users.username = Auth.UserName WHERE Auth.Username = '<a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a>' AND ( Users.lock_number IS NULL OR LENGTH(Users.lock_number) = 0 OR Users.lock_number = '60:A4:4C:01:EF:73' ) ORDER BY Auth.id</div>
<div>Mon Sep 1 15:54:34 2014 : Info: [sql] User found in radcheck table</div><div>Mon Sep 1 15:54:34 2014 : Info: [sql] expand: SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '<a href="mailto:wireless-test@ewireless.co.za">wireless-test@ewireless.co.za</a>' ORDER BY id</div>
<div>Mon Sep 1 15:54:34 2014 : Info: [sql] expand: SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}' -> SELECT GroupName FROM usergroup WHERE UserName='wireless-test@ewireless.c</div></div>
<div><br></div><div><br></div></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Sep 1, 2014 at 3:43 PM, Fajar A. Nugraha <span dir="ltr"><<a href="mailto:work@fajar.net" target="_blank">work@fajar.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">what does the debug mide say?<div class="HOEnZb"><div class="h5"><br><br>On Monday, September 1, 2014, Daren Hendricks <<a href="mailto:daren.hendricks@gmail.com" target="_blank">daren.hendricks@gmail.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Any other ideas? or what I'm missing?</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Sep 1, 2014 at 2:34 PM, Daren Hendricks <span dir="ltr"><<a>daren.hendricks@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>Yes I have called 'replicate' in accounting section and it is after the 'Replicate-To-Realm:= <span style="color:rgb(80,0,80);font-family:arial,sans-serif;font-size:13px">acc_realm' section.</span></div>
<div><span style="color:rgb(80,0,80);font-family:arial,sans-serif;font-size:13px"><br></span></div><div><span style="color:rgb(80,0,80);font-family:arial,sans-serif;font-size:13px">Regards,</span></div></div><div>
<div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Mon, Sep 1, 2014 at 12:11 PM, Fajar A. Nugraha <span dir="ltr"><<a>list@fajar.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><div>On Mon, Sep 1, 2014 at 4:22 PM, Daren Hendricks <span dir="ltr"><<a>daren.hendricks@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>Thank you,I have looked into using <span style="font-family:arial,sans-serif;font-size:13px">rlm_replicate but I do not seem to be coming right. Below is what's in proxy.conf</span></div>
<div><br></div><div><br></div><div><div>home_server rad01 {</div><div> type = acct</div><div> ipaddr = 192.168.25.126</div><div> port = 1813</div><div> secret = testing123</div><div>}</div><div>
<br></div><div>home_server_pool otp0 {</div><div> home_server = otp1</div><div> home_server = rad01</div><div>}</div><div>home_server_pool acc1 {</div><div> home_server = rad01</div><div> </div>
<div>}</div><div>realm acc_realm {</div><div> act_pool = acc1</div><div>}</div><div><br></div></div></div><div class="gmail_extra"><br></div></blockquote><div><br></div><div><br></div></div><div>... and did you call "replicate" on your accounting section?</div>
<div>Did you set Replicate-To-Realm before calling "replicate"?</div><div><br></div><div>See <a href="https://github.com/FreeRADIUS/freeradius-server/blob/v2.x.x/raddb/modules/replicate" target="_blank">https://github.com/FreeRADIUS/freeradius-server/blob/v2.x.x/raddb/modules/replicate</a></div>
<span><font color="#888888">
<div><br></div><div>-- <br></div><div>Fajar</div></font></span><div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div class="gmail_extra"><br><div class="gmail_quote"><div><div>On Tue, Aug 26, 2014 at 11:53 AM, Fajar A. Nugraha <span dir="ltr"><<a>list@fajar.net</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><div><div dir="ltr"><div class="gmail_extra">
<div class="gmail_quote"><div>On Tue, Aug 26, 2014 at 3:28 PM, Daren Hendricks <span dir="ltr"><<a>daren.hendricks@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">Hi Everyone,<div><br></div><div>We have 2 radius servers (v2.2.1) a primary and secondary. Currently both use same mysql database that lives on the primary server. For HA sake we would like to have the following setup. The primary server will read/write to it's radius DB and that will be replicated using mysql replication to the secondary server. The secondary server will then read/write to the replicated db and forward/proxy it's accounting data to the primary server. </div>
<div>Does this sound like a feasible solution? </div></div></blockquote><div><br></div></div><div>No.</div><div><br></div><div>You should either:</div><div>- replicate the packets at radius level, and have each radius write (both packets that it received directly and the forward packets) to its own db. OR</div>
<div>- use active-active db replication (e.g. galera)</div><div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr"><div>Also, what can we use to forward the accounting data to the primary server, would robust-proxy-accounting be something worth looking into?</div><div><br></div></div></blockquote><div><br></div></div><div>
Depends on your need. robust-proxy-accounting should work, but on some setup it might end up filling the disk (e.g. when bad home server rejects some packets).</div>
<div><br></div><div>Personally I prefer rlm_replicate, which is very fast but might lose some accounting packets due to it's send-and-forget menchanism (I'm fine with that).</div><span><font color="#888888"><div>
<br></div><div>-- </div><div>
Fajar</div></font></span></div></div></div>
<br></div></div>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br></div>
<br>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div></div><br></div></div>
<br>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</blockquote>
</div></div><br>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br></div>