January 2010 - Freeradius-Users - lists.freeradius.org

Framed-IP user gets access-reject due to CHAP
by Tevfik Ceydeliler 14 Jan '10

14 Jan '10

Hi list, I have two types user. One of them get IP address from pool. Other one must use static IP address. There is no problem with users use IP pool. But users ,using static IP , get Access-Reject. I have two debug output. And I use my account name to test. First I put my account into pooli then I put my account with static Ip address. In each tests I comment other raw. Here is the users file : -For Ip pool test: tevfikceydeliler Service-Type == Framed-User,Packet-Type==Access-Request, Proxy-To-Realm := 10.1.1.51, Pool-Name := BirmasGPRS_pool #tevfikceydeliler Packet-Type==Access-Request, Proxy-To-Realm := 10.1.1.51, Framed-IP-Address := 172.30.65.90, Framed-IP-Netmask := 255.255.240, Fall-Through = Yes -For static IP test: #tevfikceydeliler Service-Type == Framed-User,Packet-Type==Access-Request, Proxy-To-Realm := 10.1.1.51, Pool-Name := BirmasGPRS_pool tevfikceydeliler Packet-Type==Access-Request, Proxy-To-Realm := 10.1.1.51, Framed-IP-Address := 172.30.65.90, Framed-IP-Netmask := 255.255.240, Fall-Through = Yes I also have debug output for these two test: -For Ip pool test: rad_recv: Access-Request packet from host 172.30.80.1 port 1048, id=181, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 119530800 CHAP-Challenge = 0x084c2d1eb2b0da2fa88e86be50190074 User-Name = "tevfikceydeliler" CHAP-Password = 0x01fe1f5c6c3340f451ba829a456b302ece Calling-Station-Id = "905308507313" Thu Jan 14 10:05:39 2010 : Info: +- entering group authorize {...} Thu Jan 14 10:05:39 2010 : Info: ++[preprocess] returns ok Thu Jan 14 10:05:39 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100114 Thu Jan 14 10:05:39 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100114 Thu Jan 14 10:05:39 2010 : Debug: expand: %t -> Thu Jan 14 10:05:39 2010 Thu Jan 14 10:05:39 2010 : Info: ++[auth_log] returns ok Thu Jan 14 10:05:39 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100114 Thu Jan 14 10:05:39 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100114 Thu Jan 14 10:05:39 2010 : Debug: expand: %t -> Thu Jan 14 10:05:39 2010 Thu Jan 14 10:05:39 2010 : Info: ++[detail] returns ok Thu Jan 14 10:05:39 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Thu Jan 14 10:05:39 2010 : Info: ++[chap] returns ok Thu Jan 14 10:05:39 2010 : Info: ++[mschap] returns noop Thu Jan 14 10:05:39 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Thu Jan 14 10:05:39 2010 : Info: [suffix] No such realm "NULL" Thu Jan 14 10:05:39 2010 : Info: ++[suffix] returns noop Thu Jan 14 10:05:39 2010 : Info: [eap] No EAP-Message, not doing EAP Thu Jan 14 10:05:39 2010 : Info: ++[eap] returns noop Thu Jan 14 10:05:39 2010 : Info: ++[unix] returns notfound Thu Jan 14 10:05:39 2010 : Info: [files] users: Matched entry tevfikceydeliler at line 114 Thu Jan 14 10:05:39 2010 : Debug: expand: Hello, %{User-Name} -> Hello, tevfikceydeliler Thu Jan 14 10:05:39 2010 : Info: ++[files] returns ok Thu Jan 14 10:05:39 2010 : Info: ++[expiration] returns noop Thu Jan 14 10:05:39 2010 : Info: ++[logintime] returns noop Thu Jan 14 10:05:39 2010 : Info: +- entering group pre-proxy {...} Thu Jan 14 10:05:39 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/pre-proxy-detail-20100114 Thu Jan 14 10:05:39 2010 : Info: [pre_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/pre-proxy-detail-20100114 Thu Jan 14 10:05:39 2010 : Debug: expand: %t -> Thu Jan 14 10:05:39 2010 Thu Jan 14 10:05:39 2010 : Info: ++[pre_proxy_log] returns ok Thu Jan 14 10:05:39 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100114 Thu Jan 14 10:05:39 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100114 Thu Jan 14 10:05:39 2010 : Debug: expand: %t -> Thu Jan 14 10:05:39 2010 Thu Jan 14 10:05:39 2010 : Info: ++[detail] returns ok Sending Access-Request of id 218 to 10.1.1.51 port 1812 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 119530800 CHAP-Challenge = 0x084c2d1eb2b0da2fa88e86be50190074 User-Name = "tevfikceydeliler" CHAP-Password = 0x01fe1f5c6c3340f451ba829a456b302ece Calling-Station-Id = "905308507313" Proxy-State = 0x313831 Thu Jan 14 10:05:39 2010 : Info: Proxying request 0 to home server 10.1.1.51 port 1812 Sending Access-Request of id 218 to 10.1.1.51 port 1812 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 119530800 CHAP-Challenge = 0x084c2d1eb2b0da2fa88e86be50190074 User-Name = "tevfikceydeliler" CHAP-Password = 0x01fe1f5c6c3340f451ba829a456b302ece Calling-Station-Id = "905308507313" Proxy-State = 0x313831 Thu Jan 14 10:05:39 2010 : Debug: Going to the next request Thu Jan 14 10:05:39 2010 : Debug: Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host 10.1.1.51 port 1812, id=218, length=25 Proxy-State = 0x313831 Thu Jan 14 10:05:39 2010 : Info: +- entering group post-proxy {...} Thu Jan 14 10:05:39 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/post-proxy-detail-20100114 Thu Jan 14 10:05:39 2010 : Info: [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/post-proxy-detail-20100114 Thu Jan 14 10:05:39 2010 : Debug: expand: %t -> Thu Jan 14 10:05:39 2010 Thu Jan 14 10:05:39 2010 : Info: ++[post_proxy_log] returns ok Thu Jan 14 10:05:39 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100114 Thu Jan 14 10:05:39 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100114 Thu Jan 14 10:05:39 2010 : Debug: expand: %t -> Thu Jan 14 10:05:39 2010 Thu Jan 14 10:05:39 2010 : Info: ++[detail] returns ok Thu Jan 14 10:05:39 2010 : Info: [eap] No pre-existing handler found Thu Jan 14 10:05:39 2010 : Info: ++[eap] returns noop Thu Jan 14 10:05:39 2010 : Info: Found Auth-Type = CHAP Thu Jan 14 10:05:39 2010 : Info: Found Auth-Type = Accept Thu Jan 14 10:05:39 2010 : Error: Warning: Found 2 auth-types on request for user 'tevfikceydeliler' Thu Jan 14 10:05:39 2010 : Info: Auth-Type = Accept, accepting the user Thu Jan 14 10:05:39 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 119530800 cli 905308507313) Thu Jan 14 10:05:39 2010 : Info: +- entering group post-auth {...} Thu Jan 14 10:05:39 2010 : Info: ++[TCELL_pool] returns noop Thu Jan 14 10:05:39 2010 : Debug: expand: %{NAS-IP-Address} %{NAS-Port} -> 172.30.80.1 119530800 Thu Jan 14 10:05:39 2010 : Info: [BirmasGPRS_pool] MD5 on 'key' directive maps to: 860ffa91b70d5bb8b649d5ee042c87ea Thu Jan 14 10:05:39 2010 : Info: [BirmasGPRS_pool] Searching for an entry for key: '860ffa91b70d5bb8b649d5ee042c87ea' Thu Jan 14 10:05:39 2010 : Debug: rlm_ippool: Allocating ip to key: '860ffa91b70d5bb8b649d5ee042c87ea' Thu Jan 14 10:05:39 2010 : Info: [BirmasGPRS_pool] num: 1 Thu Jan 14 10:05:39 2010 : Info: [BirmasGPRS_pool] Allocated ip 172.30.64.80 to client key: 860ffa91b70d5bb8b649d5ee042c87ea Thu Jan 14 10:05:39 2010 : Info: ++[BirmasGPRS_pool] returns ok Thu Jan 14 10:05:39 2010 : Info: ++[PSUOtonom_pool] returns noop Thu Jan 14 10:05:39 2010 : Info: ++[YBPOtonom1_pool] returns noop Thu Jan 14 10:05:39 2010 : Info: ++[YBPOtonom2_pool] returns noop Thu Jan 14 10:05:39 2010 : Info: ++[YBPOtonom3_pool] returns noop Thu Jan 14 10:05:39 2010 : Info: ++[Turkcell3G_pool] returns noop Thu Jan 14 10:05:39 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Thu Jan 14 10:05:39 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100114 Thu Jan 14 10:05:39 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100114 Thu Jan 14 10:05:39 2010 : Debug: expand: %t -> Thu Jan 14 10:05:39 2010 Thu Jan 14 10:05:39 2010 : Info: ++[reply_log] returns ok Thu Jan 14 10:05:39 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100114 Thu Jan 14 10:05:39 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100114 Thu Jan 14 10:05:39 2010 : Debug: expand: %t -> Thu Jan 14 10:05:39 2010 Thu Jan 14 10:05:39 2010 : Info: ++[detail] returns ok Thu Jan 14 10:05:39 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 181 to 172.30.80.1 port 1048 Framed-IP-Address = 172.30.64.80 Framed-IP-Netmask = 255.255.240.0 Thu Jan 14 10:05:39 2010 : Info: Finished request 0. Thu Jan 14 10:05:39 2010 : Debug: Going to the next request Thu Jan 14 10:05:39 2010 : Debug: Waking up in 4.9 seconds. Thu Jan 14 10:05:44 2010 : Info: Cleaning up request 0 ID 181 with timestamp +45 Thu Jan 14 10:05:44 2010 : Debug: Ready to process requests. -For Static IP test: rad_recv: Access-Request packet from host 172.30.80.1 port 3820, id=232, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 32285232 CHAP-Challenge = 0xae0e7eb20e1df67194bcedd4c205f843 User-Name = "tevfikceydeliler" CHAP-Password = 0x01fb5a4bf58cd585c42cde13b49b6ae11b Calling-Station-Id = "905308507313" Thu Jan 14 10:07:46 2010 : Info: +- entering group authorize {...} Thu Jan 14 10:07:46 2010 : Info: ++[preprocess] returns ok Thu Jan 14 10:07:46 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100114 Thu Jan 14 10:07:46 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100114 Thu Jan 14 10:07:46 2010 : Debug: expand: %t -> Thu Jan 14 10:07:46 2010 Thu Jan 14 10:07:46 2010 : Info: ++[auth_log] returns ok Thu Jan 14 10:07:46 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100114 Thu Jan 14 10:07:46 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100114 Thu Jan 14 10:07:46 2010 : Debug: expand: %t -> Thu Jan 14 10:07:46 2010 Thu Jan 14 10:07:46 2010 : Info: ++[detail] returns ok Thu Jan 14 10:07:46 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Thu Jan 14 10:07:46 2010 : Info: ++[chap] returns ok Thu Jan 14 10:07:46 2010 : Info: ++[mschap] returns noop Thu Jan 14 10:07:46 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Thu Jan 14 10:07:46 2010 : Info: [suffix] No such realm "NULL" Thu Jan 14 10:07:46 2010 : Info: ++[suffix] returns noop Thu Jan 14 10:07:46 2010 : Info: [eap] No EAP-Message, not doing EAP Thu Jan 14 10:07:46 2010 : Info: ++[eap] returns noop Thu Jan 14 10:07:46 2010 : Info: ++[unix] returns notfound Thu Jan 14 10:07:46 2010 : Info: ++[files] returns noop Thu Jan 14 10:07:46 2010 : Info: ++[expiration] returns noop Thu Jan 14 10:07:46 2010 : Info: ++[logintime] returns noop Thu Jan 14 10:07:46 2010 : Info: Found Auth-Type = CHAP Thu Jan 14 10:07:46 2010 : Info: +- entering group CHAP {...} Thu Jan 14 10:07:46 2010 : Info: [chap] login attempt by "tevfikceydeliler" with CHAP password Thu Jan 14 10:07:46 2010 : Info: [chap] Cleartext-Password is required for authentication Thu Jan 14 10:07:46 2010 : Info: ++[chap] returns invalid Thu Jan 14 10:07:46 2010 : Info: Failed to authenticate the user. Thu Jan 14 10:07:46 2010 : Auth: Login incorrect (rlm_chap: Clear text password not available): [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 32285232 cli 905308507313) Thu Jan 14 10:07:46 2010 : Info: Using Post-Auth-Type Reject Thu Jan 14 10:07:46 2010 : Info: +- entering group REJECT {...} Thu Jan 14 10:07:46 2010 : Debug: expand: %{User-Name} -> tevfikceydeliler Thu Jan 14 10:07:46 2010 : Debug: attr_filter: Matched entry DEFAULT at line 11 Thu Jan 14 10:07:46 2010 : Info: ++[attr_filter.access_reject] returns updated Thu Jan 14 10:07:46 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100114 Thu Jan 14 10:07:46 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100114 Thu Jan 14 10:07:46 2010 : Debug: expand: %t -> Thu Jan 14 10:07:46 2010 Thu Jan 14 10:07:46 2010 : Info: ++[detail] returns ok Thu Jan 14 10:07:46 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100114 Thu Jan 14 10:07:46 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100114 Thu Jan 14 10:07:46 2010 : Debug: expand: %t -> Thu Jan 14 10:07:46 2010 Thu Jan 14 10:07:46 2010 : Info: ++[reply_log] returns ok Thu Jan 14 10:07:46 2010 : Info: Delaying reject of request 0 for 3 seconds Thu Jan 14 10:07:46 2010 : Debug: Going to the next request Thu Jan 14 10:07:46 2010 : Debug: Waking up in 0.9 seconds. Thu Jan 14 10:07:47 2010 : Debug: Waking up in 1.9 seconds. Thu Jan 14 10:07:49 2010 : Info: Sending delayed reject for request 0 Sending Access-Reject of id 232 to 172.30.80.1 port 3820 Thu Jan 14 10:07:49 2010 : Debug: Waking up in 4.9 seconds. Thu Jan 14 10:07:54 2010 : Info: Cleaning up request 0 ID 232 with timestamp +52 Thu Jan 14 10:07:54 2010 : Debug: Ready to process requests. There is some raw differet ofcourse: The test for IP Pool, conenction request enter preproxy. But test for static IP conenction goes directly "Auth-Type := CHAP". So the problem begins after this , because I get following messages: Thu Jan 14 10:07:46 2010 : Info: [chap] login attempt by "tevfikceydeliler" with CHAP password Thu Jan 14 10:07:46 2010 : Info: [chap] Cleartext-Password is required for authentication Thu Jan 14 10:07:46 2010 : Info: ++[chap] returns invalid Thu Jan 14 10:07:46 2010 : Info: Failed to authenticate the user. Thu Jan 14 10:07:46 2010 : Auth: Login incorrect (rlm_chap: Clear text password not available): [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 32285232 cli 905308507313) I know that my IP pool names located in ../sites-enabled/default file under accounting and post-auth section. Question is where can I put my user ,using static IP, that freeraidus behave like my user is IP pool user? I lost my way. I read many list posts but I can get a appropriate answer. Regards. Tevfik Ceydeliler Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.

2 1

Authentification using MS-CHAP with Active Directory
by Noro Hasina 14 Jan '10

14 Jan '10

Hi everybody, My project have changed, and I should use Active Directory instead of mysql for authentication because we use AD for user's domain administration. My server can join the domain but my problem is that ms-chap does'nt do anything during radtest. here is the result when i run radiusd -X the module is linked *module mschap* Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = yes require_strong = yes with_ntdomain_hack = yes ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name:-None} --domain=%{%{mschap:NT-Domain}:-CELTELMG} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" } After the Ready to process requests, I run # radtest testuser testuser localhost 0 pass and here but mschap isn't used : rad_recv: Access-Request packet from host 127.0.0.1 port 45703, id=64, length=60 User-Name = "testuser" User-Password = "testuser" NAS-IP-Address = xxxxxxxx NAS-Port = 0 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop Anyone could help me please!

2 2

Re: OpenDirectory on Mac OS X 10.6 authenticating Cisco ASA
by mail＠wetzelandson.com 13 Jan '10

13 Jan '10

Alan, Thanks. Missed that in some of the sites I have been searching. Using radiusd -X debugging mode I found an addition I had made to /etc/raddb/users trying to tell it to use Open Directory (this was required in 10.5 to make this work) was the source of all my problems. Seems to work now. Apple actually made this easier for us in their implementation and the only change required now is to add the client to /etc/raddb/clients.conf and the Open Directory user is processed correctly. No changes in /etc/raddb/users at all. Thanks for pointing out the obvious to me. -Erich > mail(a)wetzelandson.com wrote: >> Is there something further I can give to you that would help you >> understand what is happening or what I am looking to do? The issue >> appears to be the selection of Auth-Type = opendirectory does not seem >> to >> work in 10.6. > > Run the server in debugging mode. > > Alan DeKok. > >

1 0

NT/LM password from LDAP (PAP works, MSCHAP doesn't).
by Lech Karol Pawłaszek 13 Jan '10

13 Jan '10

Hello. I've working FreeRADIUS installation for 802.1x authentication and authorization using EAP-TLS with passwords - NT/LM hashes - stored in LDAP. And it works nice. Right now I'm deploying (yes. at this particular moment!) IPsec/L2TP VPN which will be utilizing RADIUS via ppp connection. And for PAP it works nice. However MSCHAP doesn't want to work. I'm kinda lost because EAP connection uses MSCHAP(v2) as well and this one works flawlessly. ;-) Am I missing something? I believe it should work. Or it cannot? I've attached FreeRADIUS' logfile. Any pointers/hints much appreciated. Kind regards, -- Lech Karol Pawłaszek <ike> "You will never see me fall from grace" [KoRn]

2 2

How to send the Vendor-Specific subattributes via radiusclient
by Rahul Panwar 13 Jan '10

13 Jan '10

Hi, I am using freeradius-client-1.1.6 on CentOS 5.4 with windows based freeradius server from freeradius.net. I want to send the Vendor-Specific attribute using radiusclient application. I include the dictionary.cisco file in radiusclient dictionary file as follows: $INCLUDE /usr/local/etc/radiusclient/dictionary.cisco I am giving the following command: radiusclient User-Name=testuser Password=testpw Vendor-Specific=9 h323-remote-address=192.168.2.1 When i am watching the tcpdump capture on radiusclient pc. The above command is accepted by server but the packet is showing as given below: Request Sent by client: Access Request (1), id: 0xba, Authenticator: 402018a985a02bceca216ab2474cd6a1 Username Attribute (1), length: 10, Value: testuser 0x0000: 7465 7374 7573 6572 Password Attribute (2), length: 18, Value: 0x0000: b37e 9117 41f3 6bf3 8d5c 438f 3796 5e1d Vendor Specific Attribute (26), length: 3, Value: [|radius] 0x0000: 39 Framed IPX Network Attribute (23), length: 13, Value: ERROR: length 11 != 4 0x0000: 31 [|radius] My Question is : Why "Framed IPX Network Attribute (23)" is sending by radiusclient if i declared the Vendor-Specific Attributes in dictionary? Response received by client: Access Accept (2), id: 0xba, Authenticator: 6ccb55adfc0d5af921fdab7c111acf18 Please give me the response what the wrong i am doing? I googled about this problem but not able to find anyhelp about radiusclient. Waiting for the response. Thanks, Rahul Panwar

2 2

Configuration test issue
by Guillaume Rousse 13 Jan '10

13 Jan '10

Hello list. I'm trying to automatize configuration testing at each change. However, I'm facing a situation where testing report failure, whereas running freeradius works OK. With this following configuration: DEFAULT Auth-Type := LDAP, Huntgroup-Name == AdminNet, ldap1-LDAP-Group == admins Errors reading /etc/raddb/users /etc/raddb/users[19]: Parse error (check) for entry DEFAULT: Invalid octet string "admins" for attribute name "ldap1-LDAP-Group" When quoting group name: DEFAULT Auth-Type := LDAP, Huntgroup-Name == AdminNet, ldap1-LDAP-Group == "admins" Errors reading /etc/raddb/users /etc/raddb/users[19]: Parse error (check) for entry DEFAULT: Unknown vendor name in attribute name "ldap1-LDAP-Group" Reading 'radiusd -XC' output, I guess the second one occurs because ldap modules initialisation is skipped, whereas this attribute is defined there: Module: Linked to module rlm_ldap Module: Skipping instantiation of ldap1 Module: Skipping instantiation of ldap2 So, can I do something here to fix the validation test :) ? -- BOFH excuse #145: Flat tire on station wagon with tapes. ("Never underestimate the bandwidth of a station wagon full of tapes hurling down the highway" Andrew S. Tannenbaum)

2 2

Configuring Hotspot with freeradius and AP
by Noro Hasina 13 Jan '10

13 Jan '10

Hi everybody! I want to set hotspot for the visitor of the society where I work. I have a cisco AP 1200 which support 802.1x and I've installed freeradius corectly. Here is my question : - what another module do I need to do the authentication? do I need to install radius client like chillispot or coova chilli? - What type of encryption do I need to? WAP,EAP? I really need your help, please I don't have enough time Thank you Hasina

1 0

Have a client with multiple secrets?
by freeradius＠corwyn.net 13 Jan '10

13 Jan '10

I have a firewall that i connect to over SSH to manage. It has a client entry with a secret in clients.conf, it's got a huntgroup entry, and the huntgroup has entries in the users file, and everything is working fine (I think I've got the order right there). The frewall also serves as teh VPN server, authenticating users through radius. But I'd like the VPN users to use a different secret and, more importantly, a different huntgroup (since the user group for authentication is different between those two groups). Is that possible? rick Rick Steeves http://www.sinister.net In reality nothing is more damaging to the adventurous spirit within a man than a secure future - Alexander Supertramp

3 2

My Static IP Client conf. not work
by Tevfik Ceydeliler 13 Jan '10

13 Jan '10

Now I understand why I get accept message. Bec. of " DEFAULT Auth-Type := Accept". When I remove it I get reject. This error occurs for only users have Framed-IP-Address . My verison is : freeradius: FreeRADIUS Version 2.1.0, for host i486-pc-linux-gnu Here is the CORRECT log: ########################################################## rad_recv: Access-Request packet from host 172.30.80.1 port 4778, id=206, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 143607256 CHAP-Challenge = 0x2e302fefb09604035cfe4022945bfbd8 User-Name = "tevfikceydeliler" CHAP-Password = 0x01a1b18b5f3a772a9107bee3ee400ff60e Calling-Station-Id = "905308507313" Wed Jan 13 12:17:33 2010 : Info: +- entering group authorize {...} Wed Jan 13 12:17:33 2010 : Info: ++[preprocess] returns ok Wed Jan 13 12:17:33 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100113 Wed Jan 13 12:17:33 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100113 Wed Jan 13 12:17:33 2010 : Debug: expand: %t -> Wed Jan 13 12:17:33 2010 Wed Jan 13 12:17:33 2010 : Info: ++[auth_log] returns ok Wed Jan 13 12:17:33 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:33 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:33 2010 : Debug: expand: %t -> Wed Jan 13 12:17:33 2010 Wed Jan 13 12:17:33 2010 : Info: ++[detail] returns ok Wed Jan 13 12:17:33 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Wed Jan 13 12:17:33 2010 : Info: ++[chap] returns ok Wed Jan 13 12:17:33 2010 : Info: ++[mschap] returns noop Wed Jan 13 12:17:33 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Wed Jan 13 12:17:33 2010 : Info: [suffix] No such realm "NULL" Wed Jan 13 12:17:33 2010 : Info: ++[suffix] returns noop Wed Jan 13 12:17:33 2010 : Info: [eap] No EAP-Message, not doing EAP Wed Jan 13 12:17:33 2010 : Info: ++[eap] returns noop Wed Jan 13 12:17:33 2010 : Info: ++[unix] returns notfound Wed Jan 13 12:17:33 2010 : Info: ++[files] returns noop Wed Jan 13 12:17:33 2010 : Info: ++[expiration] returns noop Wed Jan 13 12:17:33 2010 : Info: ++[logintime] returns noop >>>>>>>Wed Jan 13 12:17:33 2010 : Info: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. >>>>>>>Wed Jan 13 12:17:33 2010 : Info: ++[pap] returns noop >>>>>>>Wed Jan 13 12:17:33 2010 : Info: Found Auth-Type = CHAP >>>>>>>Wed Jan 13 12:17:33 2010 : Info: +- entering group CHAP {...} >>>>>>>Wed Jan 13 12:17:33 2010 : Info: [chap] login attempt by "tevfikceydeliler" with CHAP password >>>>>>>Wed Jan 13 12:17:33 2010 : Info: [chap] Cleartext-Password is required for authentication >>>>>>>Wed Jan 13 12:17:33 2010 : Info: ++[chap] returns invalid >>>>>>>Wed Jan 13 12:17:33 2010 : Info: Failed to authenticate the user. >>>>>>>Wed Jan 13 12:17:33 2010 : Auth: Login incorrect (rlm_chap: Clear text password not available): [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 143607256 cli 905308507313) >>>>>>>Wed Jan 13 12:17:33 2010 : Info: Using Post-Auth-Type Reject Wed Jan 13 12:17:33 2010 : Info: +- entering group REJECT {...} Wed Jan 13 12:17:33 2010 : Debug: expand: %{User-Name} -> tevfikceydeliler Wed Jan 13 12:17:33 2010 : Debug: attr_filter: Matched entry DEFAULT at line 11 Wed Jan 13 12:17:33 2010 : Info: ++[attr_filter.access_reject] returns updated Wed Jan 13 12:17:33 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:33 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:33 2010 : Debug: expand: %t -> Wed Jan 13 12:17:33 2010 Wed Jan 13 12:17:33 2010 : Info: ++[detail] returns ok Wed Jan 13 12:17:33 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100113 Wed Jan 13 12:17:33 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100113 Wed Jan 13 12:17:33 2010 : Debug: expand: %t -> Wed Jan 13 12:17:33 2010 Wed Jan 13 12:17:33 2010 : Info: ++[reply_log] returns ok Wed Jan 13 12:17:33 2010 : Info: Delaying reject of request 0 for 3 seconds Wed Jan 13 12:17:33 2010 : Debug: Going to the next request Wed Jan 13 12:17:33 2010 : Debug: Waking up in 0.9 seconds. Wed Jan 13 12:17:34 2010 : Debug: Waking up in 1.9 seconds. Wed Jan 13 12:17:36 2010 : Info: Sending delayed reject for request 0 Sending Access-Reject of id 206 to 172.30.80.1 port 4778 Wed Jan 13 12:17:36 2010 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 172.30.80.1 port 1806, id=237, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 193325448 CHAP-Challenge = 0x2e302fefb09604035cfe4022945bfbd8 User-Name = "tevfikceydeliler" CHAP-Password = 0x01a1b18b5f3a772a9107bee3ee400ff60e Calling-Station-Id = "905308507313" Wed Jan 13 12:17:36 2010 : Info: +- entering group authorize {...} Wed Jan 13 12:17:36 2010 : Info: ++[preprocess] returns ok Wed Jan 13 12:17:36 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100113 Wed Jan 13 12:17:36 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100113 Wed Jan 13 12:17:36 2010 : Debug: expand: %t -> Wed Jan 13 12:17:36 2010 Wed Jan 13 12:17:36 2010 : Info: ++[auth_log] returns ok Wed Jan 13 12:17:36 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:36 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:36 2010 : Debug: expand: %t -> Wed Jan 13 12:17:36 2010 Wed Jan 13 12:17:36 2010 : Info: ++[detail] returns ok Wed Jan 13 12:17:36 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Wed Jan 13 12:17:36 2010 : Info: ++[chap] returns ok Wed Jan 13 12:17:36 2010 : Info: ++[mschap] returns noop Wed Jan 13 12:17:36 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Wed Jan 13 12:17:36 2010 : Info: [suffix] No such realm "NULL" Wed Jan 13 12:17:36 2010 : Info: ++[suffix] returns noop Wed Jan 13 12:17:36 2010 : Info: [eap] No EAP-Message, not doing EAP Wed Jan 13 12:17:36 2010 : Info: ++[eap] returns noop Wed Jan 13 12:17:36 2010 : Info: ++[unix] returns notfound Wed Jan 13 12:17:36 2010 : Info: ++[files] returns noop Wed Jan 13 12:17:36 2010 : Info: ++[expiration] returns noop Wed Jan 13 12:17:36 2010 : Info: ++[logintime] returns noop Wed Jan 13 12:17:36 2010 : Info: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. Wed Jan 13 12:17:36 2010 : Info: ++[pap] returns noop Wed Jan 13 12:17:36 2010 : Info: Found Auth-Type = CHAP Wed Jan 13 12:17:36 2010 : Info: +- entering group CHAP {...} Wed Jan 13 12:17:36 2010 : Info: [chap] login attempt by "tevfikceydeliler" with CHAP password Wed Jan 13 12:17:36 2010 : Info: [chap] Cleartext-Password is required for authentication Wed Jan 13 12:17:36 2010 : Info: ++[chap] returns invalid Wed Jan 13 12:17:36 2010 : Info: Failed to authenticate the user. Wed Jan 13 12:17:36 2010 : Auth: Login incorrect (rlm_chap: Clear text password not available): [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 193325448 cli 905308507313) Wed Jan 13 12:17:36 2010 : Info: Using Post-Auth-Type Reject Wed Jan 13 12:17:36 2010 : Info: +- entering group REJECT {...} Wed Jan 13 12:17:36 2010 : Debug: expand: %{User-Name} -> tevfikceydeliler Wed Jan 13 12:17:36 2010 : Debug: attr_filter: Matched entry DEFAULT at line 11 Wed Jan 13 12:17:36 2010 : Info: ++[attr_filter.access_reject] returns updated Wed Jan 13 12:17:36 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:36 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:36 2010 : Debug: expand: %t -> Wed Jan 13 12:17:36 2010 Wed Jan 13 12:17:36 2010 : Info: ++[detail] returns ok Wed Jan 13 12:17:36 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100113 Wed Jan 13 12:17:36 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100113 Wed Jan 13 12:17:36 2010 : Debug: expand: %t -> Wed Jan 13 12:17:36 2010 Wed Jan 13 12:17:36 2010 : Info: ++[reply_log] returns ok Wed Jan 13 12:17:36 2010 : Info: Delaying reject of request 1 for 3 seconds Wed Jan 13 12:17:36 2010 : Debug: Going to the next request Wed Jan 13 12:17:36 2010 : Debug: Waking up in 0.9 seconds. Wed Jan 13 12:17:37 2010 : Debug: Waking up in 1.9 seconds. Wed Jan 13 12:17:39 2010 : Info: Sending delayed reject for request 1 Sending Access-Reject of id 237 to 172.30.80.1 port 1806 Wed Jan 13 12:17:39 2010 : Debug: Waking up in 1.9 seconds. Wed Jan 13 12:17:41 2010 : Info: Cleaning up request 0 ID 206 with timestamp +165 Wed Jan 13 12:17:41 2010 : Debug: Waking up in 3.0 seconds. Wed Jan 13 12:17:44 2010 : Info: Cleaning up request 1 ID 237 with timestamp +168 Wed Jan 13 12:17:44 2010 : Debug: Ready to process requests. ########################################################################## Tevfik Ceydeliler Hello Tevfik, Run radius in debug mode (radius -X) and then try to authenticate the user. You should have enough information in the debug to figure out the problem. If you still can't figure it out paste your debug output here. You may also want to mention what version of freeradius you're using. Adrian -----Original Message----- From: freeradius-users-bounces+adrian=dsl4u.ca(a)lists.freeradius.org [mailto:freeradius-users-bounces+adrian=dsl4u.ca@lists.freeradius.org] On Behalf Of Tevfik Ceydeliler Sent: Tuesday, January 12, 2010 2:15 AM To: freeradius-users(a)lists.freeradius.org Subject: My Static IP Client conf. not work Hi Adrian, I change the operator for Framed IP Address and Netmask. But nothing changed. Client get Access-Accept but no IP address assigned. I check it with "ipconfig" Regards... Tevfik Ceydeliler Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system. ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 57, Issue 38 ************************************************ Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.

1 0

My Static IP Client conf. not work
by Tevfik Ceydeliler 13 Jan '10

13 Jan '10

Hi, Sorry i forgot to add version of freeradius. My version is : freeradius: FreeRADIUS Version 2.1.0, for host i486-pc-linux-gnu Here is the log: ###################################### rad_recv: Access-Request packet from host 172.30.80.1 port 1048, id=163, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 138236696 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 : Info: +- entering group authorize {...} Mon Jan 11 11:01:38 2010 : Info: ++[preprocess] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[auth_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Mon Jan 11 11:01:38 2010 : Info: ++[chap] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[mschap] returns noop Mon Jan 11 11:01:38 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Mon Jan 11 11:01:38 2010 : Info: [suffix] No such realm "NULL" Mon Jan 11 11:01:38 2010 : Info: ++[suffix] returns noop Mon Jan 11 11:01:38 2010 : Info: [eap] No EAP-Message, not doing EAP Mon Jan 11 11:01:38 2010 : Info: ++[eap] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[unix] returns notfound Mon Jan 11 11:01:38 2010 : Info: [files] users: Matched entry DEFAULT at line 229 Mon Jan 11 11:01:38 2010 : Info: ++[files] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[expiration] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[logintime] returns noop Mon Jan 11 11:01:38 2010 : Info: [pap] Found existing Auth-Type, not changing it. Mon Jan 11 11:01:38 2010 : Info: ++[pap] returns noop Mon Jan 11 11:01:38 2010 : Info: Found Auth-Type = Accept Mon Jan 11 11:01:38 2010 : Info: Auth-Type = Accept, accepting the user Mon Jan 11 11:01:38 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 138236696 cli 905308507313) Mon Jan 11 11:01:38 2010 : Info: +- entering group post-auth {...} Mon Jan 11 11:01:38 2010 : Info: [TCELL_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[TCELL_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [BirmasGPRS_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[BirmasGPRS_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PSUOtonom_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PSUOtonom_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom1_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom1_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom2_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom2_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom3_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom3_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [Turkcell3G_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[Turkcell3G_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PsuYBP2Ortak_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[reply_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 163 to 172.30.80.1 port 1048 Mon Jan 11 11:01:38 2010 : Info: Finished request 0. Mon Jan 11 11:01:38 2010 : Debug: Going to the next request Mon Jan 11 11:01:38 2010 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 172.30.80.1 port 1638, id=72, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 95552352 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 : Info: +- entering group authorize {...} Mon Jan 11 11:01:38 2010 : Info: ++[preprocess] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[auth_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Mon Jan 11 11:01:38 2010 : Info: ++[chap] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[mschap] returns noop Mon Jan 11 11:01:38 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Mon Jan 11 11:01:38 2010 : Info: [suffix] No such realm "NULL" Mon Jan 11 11:01:38 2010 : Info: ++[suffix] returns noop Mon Jan 11 11:01:38 2010 : Info: [eap] No EAP-Message, not doing EAP Mon Jan 11 11:01:38 2010 : Info: ++[eap] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[unix] returns notfound Mon Jan 11 11:01:38 2010 : Info: [files] users: Matched entry DEFAULT at line 229 Mon Jan 11 11:01:38 2010 : Info: ++[files] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[expiration] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[logintime] returns noop Mon Jan 11 11:01:38 2010 : Info: [pap] Found existing Auth-Type, not changing it. Mon Jan 11 11:01:38 2010 : Info: ++[pap] returns noop Mon Jan 11 11:01:38 2010 : Info: Found Auth-Type = Accept Mon Jan 11 11:01:38 2010 : Info: Auth-Type = Accept, accepting the user Mon Jan 11 11:01:38 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 95552352 cli 905308507313) Mon Jan 11 11:01:38 2010 : Info: +- entering group post-auth {...} Mon Jan 11 11:01:38 2010 : Info: [TCELL_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[TCELL_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [BirmasGPRS_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[BirmasGPRS_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PSUOtonom_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PSUOtonom_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom1_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom1_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom2_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom2_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom3_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom3_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [Turkcell3G_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[Turkcell3G_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PsuYBP2Ortak_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[reply_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 72 to 172.30.80.1 port 1638 Mon Jan 11 11:01:38 2010 : Info: Finished request 1. Mon Jan 11 11:01:38 2010 : Debug: Going to the next request Mon Jan 11 11:01:38 2010 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 172.30.80.1 port 1048, id=255, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 153336608 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 : Info: +- entering group authorize {...} Mon Jan 11 11:01:38 2010 : Info: ++[preprocess] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[auth_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Mon Jan 11 11:01:38 2010 : Info: ++[chap] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[mschap] returns noop Mon Jan 11 11:01:38 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Mon Jan 11 11:01:38 2010 : Info: [suffix] No such realm "NULL" Mon Jan 11 11:01:38 2010 : Info: ++[suffix] returns noop Mon Jan 11 11:01:38 2010 : Info: [eap] No EAP-Message, not doing EAP Mon Jan 11 11:01:38 2010 : Info: ++[eap] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[unix] returns notfound Mon Jan 11 11:01:38 2010 : Info: [files] users: Matched entry DEFAULT at line 229 Mon Jan 11 11:01:38 2010 : Info: ++[files] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[expiration] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[logintime] returns noop Mon Jan 11 11:01:38 2010 : Info: [pap] Found existing Auth-Type, not changing it. Mon Jan 11 11:01:38 2010 : Info: ++[pap] returns noop Mon Jan 11 11:01:38 2010 : Info: Found Auth-Type = Accept Mon Jan 11 11:01:38 2010 : Info: Auth-Type = Accept, accepting the user Mon Jan 11 11:01:38 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 153336608 cli 905308507313) Mon Jan 11 11:01:38 2010 : Info: +- entering group post-auth {...} Mon Jan 11 11:01:38 2010 : Info: [TCELL_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[TCELL_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [BirmasGPRS_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[BirmasGPRS_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PSUOtonom_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PSUOtonom_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom1_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom1_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom2_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom2_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom3_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom3_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [Turkcell3G_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[Turkcell3G_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PsuYBP2Ortak_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[reply_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 255 to 172.30.80.1 port 1048 Mon Jan 11 11:01:38 2010 : Info: Finished request 2. Mon Jan 11 11:01:38 2010 : Debug: Going to the next request Mon Jan 11 11:01:38 2010 : Debug: Waking up in 4.8 seconds. rad_recv: Access-Request packet from host 172.30.80.1 port 1638, id=232, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 159151144 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 : Info: +- entering group authorize {...} Mon Jan 11 11:01:38 2010 : Info: ++[preprocess] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[auth_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Mon Jan 11 11:01:38 2010 : Info: ++[chap] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[mschap] returns noop Mon Jan 11 11:01:38 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Mon Jan 11 11:01:38 2010 : Info: [suffix] No such realm "NULL" Mon Jan 11 11:01:38 2010 : Info: ++[suffix] returns noop Mon Jan 11 11:01:38 2010 : Info: [eap] No EAP-Message, not doing EAP Mon Jan 11 11:01:38 2010 : Info: ++[eap] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[unix] returns notfound Mon Jan 11 11:01:38 2010 : Info: [files] users: Matched entry DEFAULT at line 229 Mon Jan 11 11:01:38 2010 : Info: ++[files] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[expiration] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[logintime] returns noop Mon Jan 11 11:01:38 2010 : Info: [pap] Found existing Auth-Type, not changing it. Mon Jan 11 11:01:38 2010 : Info: ++[pap] returns noop Mon Jan 11 11:01:38 2010 : Info: Found Auth-Type = Accept Mon Jan 11 11:01:38 2010 : Info: Auth-Type = Accept, accepting the user Mon Jan 11 11:01:38 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 159151144 cli 905308507313) Mon Jan 11 11:01:38 2010 : Info: +- entering group post-auth {...} Mon Jan 11 11:01:38 2010 : Info: [TCELL_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[TCELL_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [BirmasGPRS_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[BirmasGPRS_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PSUOtonom_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PSUOtonom_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom1_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom1_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom2_pool] Could not f ind Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom2_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom3_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom3_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [Turkcell3G_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[Turkcell3G_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PsuYBP2Ortak_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[reply_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 232 to 172.30.80.1 port 1638 Mon Jan 11 11:01:38 2010 : Info: Finished request 3. Mon Jan 11 11:01:38 2010 : Debug: Going to the next request Mon Jan 11 11:01:38 2010 : Debug: Waking up in 4.8 seconds. Mon Jan 11 11:01:43 2010 : Info: Cleaning up request 0 ID 163 with timestamp +37 Mon Jan 11 11:01:43 2010 : Info: Cleaning up request 1 ID 72 with timestamp +37 Mon Jan 11 11:01:43 2010 : Info: Cleaning up request 2 ID 255 with timestamp +37 Mon Jan 11 11:01:43 2010 : Info: Cleaning up request 3 ID 232 with timestamp +37 Mon Jan 11 11:01:43 2010 : Debug: Ready to process requests. ############################################################## And here is the detail log: ############################################################## Mon Jan 11 11:01:38 2010 Packet-Type = Access-Request NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 138236696 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 Packet-Type = Access-Accept Mon Jan 11 11:01:38 2010 Packet-Type = Access-Request NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 95552352 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 Packet-Type = Access-Accept Mon Jan 11 11:01:38 2010 Packet-Type = Access-Request NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 153336608 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 Packet-Type = Access-Accept Mon Jan 11 11:01:38 2010 Packet-Type = Access-Request NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 159151144 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 Packet-Type = Access-Accept ############################################################## Tevfik Ceydeliler?? ------------------------------------------------------------------------------------------------ Hello Tevfik, Run radius in debug mode (radius -X) and then try to authenticate the user. You should have enough information in the debug to figure out the problem. If you still can't figure it out paste your debug output here. You may also want to mention what version of freeradius you're using. Adrian -----Original Message----- From: freeradius-users-bounces+adrian=dsl4u.ca(a)lists.freeradius.org [mailto:freeradius-users-bounces+adrian=dsl4u.ca@lists.freeradius.org] On Behalf Of Tevfik Ceydeliler Sent: Tuesday, January 12, 2010 2:15 AM To: freeradius-users(a)lists.freeradius.org Subject: My Static IP Client conf. not work Hi Adrian, I change the operator for Framed IP Address and Netmask. But nothing changed. Client get Access-Accept but no IP address assigned. I check it with "ipconfig" Regards... Tevfik Ceydeliler Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.

1 0