From walter.xia@gmail.com Wed Apr  2 22:21:01 2008
From: xia sihua <walter.xia@gmail.com>
To: freeradius-users@lists.freeradius.org
Subject: radius server cannot handle external request
Date: Wed, 02 Apr 2008 15:20:53 -0500
Message-ID: <c5900bd20804021320n5fec39dekd427b7ced7a1d140@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1394494003028741622=="

--===============1394494003028741622==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

Hi,
   I have installed the latest freeradius server (version: 2.0.3) on my
Fedora Core 5 i386 PC.  Now it can work ok when I use "radtest test test
localhost 0 testing123" to test local user from local. And under debug mode
"radiusd -X" the server can print out relevant handle info. However,
Configure another machine as a RADIUS client and send out request, and the
server is silent, and stop "Ready to process requests.". That means the
server cannot handle external radius request.

The start info as follows:
[root@localhost raddb]# radiusd -X
FreeRADIUS Version 2.0.3, for host i686-redhat-linux-gnu, built on Mar 28
2008 at 18:56:20
Copyright (C) 1999-2008 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License.
Starting - reading configuration files ...
including configuration file /etc/raddb/radiusd.conf
including configuration file /etc/raddb/proxy.conf
including configuration file /etc/raddb/clients.conf
including configuration file /etc/raddb/snmp.conf
including configuration file /etc/raddb/eap.conf
including configuration file /etc/raddb/sql.conf
including configuration file /etc/raddb/sql/mysql/dialup.conf
including configuration file /etc/raddb/sql/mysql/counter.conf
including configuration file /etc/raddb/policy.conf
including files in directory /etc/raddb/sites-enabled/
including configuration file /etc/raddb/sites-enabled/default.old
including configuration file /etc/raddb/sites-enabled/default
including dictionary file /etc/raddb/dictionary
main {
        prefix = "/usr"
        localstatedir = "/var"
        logdir = "/var/log/radius"
        libdir = "/usr/lib"
        radacctdir = "/var/log/radius/radacct"
        hostname_lookups = no
        max_request_time = 30
        cleanup_delay = 5
        max_requests = 1024
        allow_core_dumps = no
        pidfile = "/var/run/radiusd/radiusd.pid"
        checkrad = "/usr/sbin/checkrad"
        debug_level = 0
        proxy_requests = yes
 security {
        max_attributes = 200
        reject_delay = 1
        status_server = yes
 }
}
 client localhost {
        ipaddr = 127.0.0.1
        require_message_authenticator = no
        secret = "testing123"
        shortname = "localhost"
        nastype = "other"
 }
 client 172.28.99.51 {
        require_message_authenticator = no
        secret = "test"
        shortname = "172.28.99.51"
 }
 client 172.28.137.233 {
        require_message_authenticator = no
        secret = "tellabs"
        shortname = "172.28.137.233"
 }
radiusd: #### Loading Realms and Home Servers ####
 proxy server {
        retry_delay = 5
        retry_count = 3
        default_fallback = no
        dead_time = 120
        wake_all_if_all_dead = no
 }
 home_server localhost {
        ipaddr = 127.0.0.1
        port = 1812
        type = "auth"
        secret = "testing123"
        response_window = 20
        max_outstanding = 65536
        zombie_period = 40
        status_check = "status-server"
        ping_check = "none"
        ping_interval = 30
        check_interval = 30
        num_answers_to_alive = 3
        num_pings_to_alive = 3
        revive_interval = 120
        status_check_timeout = 4
 }
 home_server_pool my_auth_failover {
        type = fail-over
        home_server = localhost
 }
 realm example.com {
        auth_pool = my_auth_failover
 }
 realm LOCAL {
 }
radiusd: #### Instantiating modules ####
 instantiate {
 Module: Linked to module rlm_exec
 Module: Instantiating exec
  exec {
        wait = yes
        input_pairs = "request"
        shell_escape = yes
  }
 Module: Linked to module rlm_expr
 Module: Instantiating expr
 Module: Linked to module rlm_expiration
 Module: Instantiating expiration
  expiration {
        reply-message = "Password Has Expired  "
  }
 Module: Linked to module rlm_logintime
 Module: Instantiating logintime
  logintime {
        reply-message = "You are calling outside your allowed timespan  "
        minimum-timeout = 60
  }
 }
radiusd: #### Loading Virtual Servers ####
server {
 modules {
 Module: Checking authenticate {...} for more modules to load
 Module: Linked to module rlm_pap
 Module: Instantiating pap
  pap {
        encryption_scheme = "auto"
        auto_header = no
  }
 Module: Linked to module rlm_chap
 Module: Instantiating chap
 Module: Linked to module rlm_mschap
 Module: Instantiating mschap
  mschap {
        use_mppe = yes
        require_encryption = no
        require_strong = no
        with_ntdomain_hack = no
  }
 Module: Linked to module rlm_unix
 Module: Instantiating unix
  unix {
        radwtmp = "/var/log/radius/radwtmp"
  }
 Module: Linked to module rlm_eap
 Module: Instantiating eap
  eap {
        default_eap_type = "tls"
        timer_expire = 60
        ignore_unknown_eap_types = no
        cisco_accounting_username_bug = no
  }
 Module: Linked to sub-module rlm_eap_md5
 Module: Instantiating eap-md5
 Module: Linked to sub-module rlm_eap_leap
 Module: Instantiating eap-leap
 Module: Linked to sub-module rlm_eap_gtc
 Module: Instantiating eap-gtc
   gtc {
        challenge = "Password: "
        auth_type = "PAP"
   }
 Module: Linked to sub-module rlm_eap_tls
 Module: Instantiating eap-tls
   tls {
        rsa_key_exchange = no
        dh_key_exchange = yes
        rsa_key_length = 512
        dh_key_length = 512
        verify_depth = 0
        pem_file_type = yes
        private_key_file = "/etc/raddb/certs/FreeradiusRsaPrivkey.pem"
        certificate_file = "/etc/raddb/certs/FreeradiusSignedCert.pem"
        CA_file = "/etc/raddb/certs/SpirentSignedCert.pem"
        private_key_password = "radius"
        dh_file = "/etc/raddb/certs/dh"
        random_file = "/etc/raddb/certs/random.txt"
        fragment_size = 1024
        include_length = yes
        check_crl = no
        cipher_list = "DEFAULT"
   }
 Module: Linked to sub-module rlm_eap_ttls
 Module: Instantiating eap-ttls
   ttls {
        default_eap_type = "md5"
        copy_request_to_tunnel = no
        use_tunneled_reply = no
        virtual_server = "inner-tunnel"
   }
 Module: Linked to sub-module rlm_eap_peap
 Module: Instantiating eap-peap
   peap {
        default_eap_type = "mschapv2"
        copy_request_to_tunnel = no
        use_tunneled_reply = no
        proxy_tunneled_request_as_eap = yes
        virtual_server = "inner-tunnel"
   }
 Module: Linked to sub-module rlm_eap_mschapv2
 Module: Instantiating eap-mschapv2
   mschapv2 {
        with_ntdomain_hack = no
   }
 Module: Checking authorize {...} for more modules to load
 Module: Linked to module rlm_preprocess
 Module: Instantiating preprocess
  preprocess {
        huntgroups = "/etc/raddb/huntgroups"
        hints = "/etc/raddb/hints"
        with_ascend_hack = no
        ascend_channels_per_line = 23
        with_ntdomain_hack = no
        with_specialix_jetstream_hack = no
        with_cisco_vsa_hack = no
        with_alvarion_vsa_hack = no
  }
 Module: Linked to module rlm_realm
 Module: Instantiating suffix
  realm suffix {
        format = "suffix"
        delimiter = "@"
        ignore_default = no
        ignore_null = no
  }
 Module: Linked to module rlm_files
 Module: Instantiating files
  files {
        usersfile = "/etc/raddb/users"
        acctusersfile = "/etc/raddb/acct_users"
        preproxy_usersfile = "/etc/raddb/preproxy_users"
        compat = "no"
  }
 Module: Checking preacct {...} for more modules to load
 Module: Linked to module rlm_acct_unique
 Module: Instantiating acct_unique
  acct_unique {
        key = "User-Name, Acct-Session-Id, NAS-IP-Address,
Client-IP-Address, NAS-Port"
  }
 Module: Checking accounting {...} for more modules to load
 Module: Linked to module rlm_detail
 Module: Instantiating detail
  detail {
        detailfile =
"/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"
        header = "%t"
        detailperm = 384
        dirperm = 493
        locking = no
        log_packet_header = no
  }
 Module: Linked to module rlm_radutmp
 Module: Instantiating radutmp
  radutmp {
        filename = "/var/log/radius/radutmp"
        username = "%{User-Name}"
        case_sensitive = yes
        check_with_nas = yes
        perm = 384
        callerid = yes
  }
 Module: Linked to module rlm_attr_filter
 Module: Instantiating attr_filter.accounting_response
  attr_filter attr_filter.accounting_response {
        attrsfile = "/etc/raddb/attrs.accounting_response"
        key = "%{User-Name}"
  }
 Module: Checking session {...} for more modules to load
 Module: Checking post-proxy {...} for more modules to load
 Module: Checking post-auth {...} for more modules to load
 Module: Instantiating attr_filter.access_reject
  attr_filter attr_filter.access_reject {
        attrsfile = "/etc/raddb/attrs.access_reject"
        key = "%{User-Name}"
  }
 }
}
radiusd: #### Opening IP addresses and Ports ####
listen {
        type = "auth"
        ipaddr = *
        port = 0
}
Listening on authentication address * port 1812
Listening on proxy address * port 1814
Ready to process requests.



I have added the user lametest into users file. clients.conf also add client
machine IP address (172.28.99.51) and secret. BTW, I send out request radisu
packets using default UDP destination port 1812 (same as server
authentication listen port).
I use Wireshark and can capture the radius request packet. And it is right
request, but server cannot handle it and print anything on termination. I'm
confused. Could you give me some suggestion.

-- 
Best regards！
walter
***************************************
Nothing is impossible!
***************************************



--===============1394494003028741622==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0
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--===============1394494003028741622==--


From tnt@kalik.net Wed Apr  2 22:33:05 2008
From: Ivan Kalik <tnt@kalik.net>
To: freeradius-users@lists.freeradius.org
Subject: Re: radius server cannot handle external request
Date: Wed, 02 Apr 2008 21:32:56 +0100
Message-ID: <xiLkKXZS.1207168376.4431400.tnt@kalik.co.yu>
In-Reply-To: <c5900bd20804021320n5fec39dekd427b7ced7a1d140@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3425597160964186627=="

--===============3425597160964186627==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

>server is silent, and stop "Ready to process requests.". That means the
>server cannot handle external radius request.
>
>I use Wireshark and can capture the radius request packet. And it is right
>request, but server cannot handle it and print anything on termination. I'm
>confused. Could you give me some suggestion.
>

No. That means that request made it to the firewall but not through it.

Ivan Kalik
Kalik Informatika ISP


--===============3425597160964186627==--


From a.l.m.buxey@lboro.ac.uk Thu Apr  3 08:01:18 2008
From: "A.L.M.Buxey@lboro.ac.uk" <a.l.m.buxey@lboro.ac.uk>
To: freeradius-users@lists.freeradius.org
Subject: Re: radius server cannot handle external request
Date: Thu, 03 Apr 2008 07:01:08 +0100
Message-ID: <20080403060108.GA5322@lboro.ac.uk>
In-Reply-To: <c5900bd20804021320n5fec39dekd427b7ced7a1d140@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============8448085855060354722=="

--===============8448085855060354722==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

Hi,

>    I have installed the latest freeradius server (version: 2.0.3) on my
> Fedora Core 5 i386 PC.  Now it can work ok when I use "radtest test test
> localhost 0 testing123" to test local user from local. And under debug mode
> "radiusd -X" the server can print out relevant handle info. However,
> Configure another machine as a RADIUS client and send out request, and the
> server is silent, and stop "Ready to process requests.". That means the
> server cannot handle external radius request.

default FC5 install?  edit /etc/sysconfig/iptables then
'service iptables restart'  you'll need to allow UDP 1812 and 1813
from the client address. not a freeradius problem. 

alan

--===============8448085855060354722==--


