- Freeradius-Users - lists.freeradius.org

Talking to Windows 2003 AD
by Iain Grant 17 Mar '10

17 Mar '10

Firstly I am new to FreeRadius and am configuring my first radius server to talk to our Windows 2003 AD. I have intalled and configured FreeRadius 2.1.8 to talk to the AD as documented in various tutorials on the internet. Initially I had configured the connection between the Freeradius server and our Windows 2003 Active directory using ntlm_auth. Using the command line ntlm_auth --request-nt-key --domain=<your domain> --username= <your username> comes back with NT_STATUS_OK : Success (0x0) Which is what i would expect as a valid username and password. Now when I go to the next step and enable this in /etc/raddb/modules/mschap ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username==%{%{Stripped-User-Name}:-%{User-Name:-None}} --domain=%{%{mschap:NT-Domain}:-OURDOMAIN} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" Our active directory server does comes back with an error. When I look at the server log on our AD it shows Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID: 680 Date: 17/03/2010 Time: 13:35:51 User: NT AUTHORITY\SYSTEM Computer: DCB Description: Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon account: =<radius_user> Source Workstation: \\<radius_server> Error Code: 0xC0000064 When I google the windows error code I get Error code: 0xC0000064 - This error code can occur if a server is configured to Require NTLMv2 Session Security and the client either is configured to not use it or is unable to negotiate it (e.g., Altiris DOS network boot stuff). I know our server is configured for NTLMv2 and not V1. Any ideas on how I can resolve this issue ? I cannot understand why running the command works and using the line in MSCHAP fails ? ______________________________________________________ SCRI, Invergowrie, Dundee, DD2 5DA. The Scottish Crop Research Institute is a charitable company limited by guarantee. Registered in Scotland No: SC 29367. Recognised by the Inland Revenue as a Scottish Charity No: SC 006662. DISCLAIMER: This email is from the Scottish Crop Research Institute, but the views expressed by the sender are not necessarily the views of SCRI and its subsidiaries. This email and any files transmitted with it are confidential to the intended recipient at the e-mail address to which it has been addressed. It may not be disclosed or used by any other than that addressee. If you are not the intended recipient you are requested to preserve this confidentiality and you must not use, disclose, copy, print or rely on this e-mail in any way. Please notify postmaster(a)scri.ac.uk quoting the name of the sender and delete the email from your system. Although SCRI has taken reasonable precautions to ensure no viruses are present in this email, neither the Institute nor the sender accepts any responsibility for any viruses, and it is your responsibility to scan the email and the attachments (if any). ______________________________________________________

2 1

"dict_addattr: attribute name too long" error when running raclient by cron
by Sergio Belkin 17 Mar '10

17 Mar '10

Hi, I have a simple script as follows: #! /bin/bash echo "Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 16" | radclient localhost:18120 status YellowSubmarine | tee /var/log/radius/status-"$(date -d "yesterday" +%Y%m%d)".log #echo "Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 1" | radclient localhost:18120 status YellowSubmarine | tee -a /var/log/radius/status-"$(date -d "yesterday" +%Y%m%d)".log When I run on the shell do it fine, but when it is launched by root it fails, resulting in: radclient: dict_init: /usr/local/share/freeradius/dictionary.freeradius[47]: dict_addattr: attribute name too long radclient: dict_init: /usr/local/share/freeradius/dictionary.freeradius[47]: dict_addattr: attribute name too long crontab line is as follows: 58 9 * * * root /scripts/getRadiusStatus > /tmp/whatsup 2>&1 Please could you help to solve it? Thanks in advance -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 3

Assigning different IPs for different DNS servers
by power159 17 Mar '10

17 Mar '10

Hi all, is it possible to assign different IP addresses for different NAS servers ? for example : NAS 1.1.1.1 = IP 5.5.5.5 NAS 2.2.2.2 = IP 6.6.6.6 NAS 3.3.3.3 = IP POOL X Thanks

1 0

Mac Auth with MySQL
by Teguh Kurniawan 17 Mar '10

17 Mar '10

Hello, I'll try to make Mac Authentication with MySQL backend. But I always rejected. Mac Authentication only works if I add like the following lines into the /etc/raddb/users. 90:4 C: E5: 6C: 7E: B6 Auth-Type: = Accept I use OpenBSD 4.6, FreeRadius 2.1.3 and MySQL 5.0.83. What should I do, to make it work with MySQL ? mysql> use radius; Database changed mysql> select * from radcheck; +----+-------------------+-----------+----+---------+ | id | username | attribute | op | value | +----+-------------------+-----------+----+---------+ | 2 | 90:4C:E5:6C:7E:B6 | Password | == | testpwd | +----+-------------------+-----------+----+---------+ 1 row in set (0.00 sec) mysql> select * from radusergroup; +-------------------+-----------+----------+ | username | groupname | priority | +-------------------+-----------+----------+ | 90:4C:E5:6C:7E:B6 | xs4all | 1 | +-------------------+-----------+----------+ 1 row in set (0.00 sec) mysql> select * from radgroupreply; +----+-----------+-----------+----+--------+ | id | groupname | attribute | op | value | +----+-----------+-----------+----+--------+ | 3 | xs4all | Auth-Type | := | Accept | +----+-----------+-----------+----+--------+ 1 row in set (0.00 sec) radiusd -X -xx Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: (Loaded rlm_files, checking if it's valid) Tue Mar 16 00:38:10 2010 : Debug: Module: Linked to module rlm_files Tue Mar 16 00:38:10 2010 : Debug: Module: Instantiating files Tue Mar 16 00:38:10 2010 : Debug: files { Tue Mar 16 00:38:10 2010 : Debug: usersfile = "/etc/raddb/users" Tue Mar 16 00:38:10 2010 : Debug: acctusersfile = "/etc/raddb/acct_users" Tue Mar 16 00:38:10 2010 : Debug: preproxy_usersfile = "/etc/raddb/preproxy_users" Tue Mar 16 00:38:10 2010 : Debug: compat = "no" Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: (Loaded rlm_sql, checking if it's valid) Tue Mar 16 00:38:10 2010 : Debug: Module: Linked to module rlm_sql Tue Mar 16 00:38:10 2010 : Debug: Module: Instantiating sql Tue Mar 16 00:38:10 2010 : Debug: sql { Tue Mar 16 00:38:10 2010 : Debug: driver = "rlm_sql_mysql" Tue Mar 16 00:38:10 2010 : Debug: server = "localhost" Tue Mar 16 00:38:10 2010 : Debug: port = "" Tue Mar 16 00:38:10 2010 : Debug: login = "radius" Tue Mar 16 00:38:10 2010 : Debug: password = "passwordradius" Tue Mar 16 00:38:10 2010 : Debug: radius_db = "radius" Tue Mar 16 00:38:10 2010 : Debug: read_groups = yes Tue Mar 16 00:38:10 2010 : Debug: sqltrace = no Tue Mar 16 00:38:10 2010 : Debug: sqltracefile = "/var/log/radius/sqltrace.sql" Tue Mar 16 00:38:10 2010 : Debug: readclients = yes Tue Mar 16 00:38:10 2010 : Debug: deletestalesessions = yes Tue Mar 16 00:38:10 2010 : Debug: num_sql_socks = 5 Tue Mar 16 00:38:10 2010 : Debug: sql_user_name = "%{User-Name}" Tue Mar 16 00:38:10 2010 : Debug: default_user_profile = "" Tue Mar 16 00:38:10 2010 : Debug: nas_query = "SELECT id, nasname, shortname, type, secret FROM nas" Tue Mar 16 00:38:10 2010 : Debug: authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" Tue Mar 16 00:38:10 2010 : Debug: authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" Tue Mar 16 00:38:10 2010 : Debug: authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id" Tue Mar 16 00:38:10 2010 : Debug: authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id" Tue Mar 16 00:38:10 2010 : Debug: accounting_onoff_query = " UPDATE radacct SET acctstoptime = '%S', acctsessiontime = unix_timestamp('%S') - unix_timestamp(acctstarttime), acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = %{%{Acct-Delay-Time}:-0} WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= '%S'" Tue Mar 16 00:38:10 2010 : Debug: accounting_update_query = " UPDATE radacct SET framedipaddress = '%{Framed-IP-Address}', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" Tue Mar 16 00:38:10 2010 : Debug: accounting_update_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctsessiontime, acctauthentic, connectinfo_start, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, servicetype, framedprotocol, framedipaddress, acctstartdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Time}:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{X-Ascend-Session-Svr-Key}')" Tue Mar 16 00:38:10 2010 : Debug: accounting_start_query = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{%{Acct-Delay-Time}:-0}', '0', '%{X-Ascend-Session-Svr-Key}')" Tue Mar 16 00:38:10 2010 : Debug: accounting_start_query_alt = " UPDATE radacct SET acctstarttime = '%S', acctstartdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_start = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" Tue Mar 16 00:38:10 2010 : Debug: accounting_stop_query = " UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" Tue Mar 16 00:38:10 2010 : Debug: accounting_stop_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Time}:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{%{Acct-Delay-Time}:-0}')" Tue Mar 16 00:38:10 2010 : Debug: group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" Tue Mar 16 00:38:10 2010 : Debug: connect_failure_retry_delay = 60 Tue Mar 16 00:38:10 2010 : Debug: simul_count_query = "" Tue Mar 16 00:38:10 2010 : Debug: simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" Tue Mar 16 00:38:10 2010 : Debug: postauth_query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')" Tue Mar 16 00:38:10 2010 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Tue Mar 16 00:38:10 2010 : Info: rlm_sql (sql): Attempting to connect to radius@localhost:/radius Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): starting 0 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 Tue Mar 16 00:38:10 2010 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Connected new DB handle, #0 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): starting 1 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 Tue Mar 16 00:38:10 2010 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Connected new DB handle, #1 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): starting 2 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 Tue Mar 16 00:38:10 2010 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Connected new DB handle, #2 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): starting 3 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 Tue Mar 16 00:38:10 2010 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Connected new DB handle, #3 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): starting 4 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 Tue Mar 16 00:38:10 2010 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Connected new DB handle, #4 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Processing generate_sql_clients Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret FROM nas Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Reserving sql socket id: 4 Tue Mar 16 00:38:10 2010 : Debug: rlm_sql (sql): Released sql socket id: 4 Tue Mar 16 00:38:10 2010 : Debug: Module: Checking session {...} for more modules to load Tue Mar 16 00:38:10 2010 : Debug: (Loaded rlm_radutmp, checking if it's valid) Tue Mar 16 00:38:10 2010 : Debug: Module: Linked to module rlm_radutmp Tue Mar 16 00:38:10 2010 : Debug: Module: Instantiating radutmp Tue Mar 16 00:38:10 2010 : Debug: radutmp { Tue Mar 16 00:38:10 2010 : Debug: filename = "/var/log/radius/radutmp" Tue Mar 16 00:38:10 2010 : Debug: username = "%{User-Name}" Tue Mar 16 00:38:10 2010 : Debug: case_sensitive = yes Tue Mar 16 00:38:10 2010 : Debug: check_with_nas = yes Tue Mar 16 00:38:10 2010 : Debug: perm = 384 Tue Mar 16 00:38:10 2010 : Debug: callerid = yes Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: Module: Checking post-auth {...} for more modules to load Tue Mar 16 00:38:10 2010 : Debug: (Loaded rlm_attr_filter, checking if it's valid) Tue Mar 16 00:38:10 2010 : Debug: Module: Linked to module rlm_attr_filter Tue Mar 16 00:38:10 2010 : Debug: Module: Instantiating attr_filter.access_reject Tue Mar 16 00:38:10 2010 : Debug: attr_filter attr_filter.access_reject { Tue Mar 16 00:38:10 2010 : Debug: attrsfile = "/etc/raddb/attrs.access_reject" Tue Mar 16 00:38:10 2010 : Debug: key = "%{User-Name}" Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: modules { Tue Mar 16 00:38:10 2010 : Debug: Module: Checking authenticate {...} for more modules to load Tue Mar 16 00:38:10 2010 : Debug: (Loaded rlm_always, checking if it's valid) Tue Mar 16 00:38:10 2010 : Debug: Module: Linked to module rlm_always Tue Mar 16 00:38:10 2010 : Debug: Module: Instantiating ok Tue Mar 16 00:38:10 2010 : Debug: always ok { Tue Mar 16 00:38:10 2010 : Debug: rcode = "ok" Tue Mar 16 00:38:10 2010 : Debug: simulcount = 0 Tue Mar 16 00:38:10 2010 : Debug: mpp = no Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: Module: Checking authorize {...} for more modules to load Tue Mar 16 00:38:10 2010 : Debug: (Loaded rlm_preprocess, checking if it's valid) Tue Mar 16 00:38:10 2010 : Debug: Module: Linked to module rlm_preprocess Tue Mar 16 00:38:10 2010 : Debug: Module: Instantiating preprocess Tue Mar 16 00:38:10 2010 : Debug: preprocess { Tue Mar 16 00:38:10 2010 : Debug: huntgroups = "/etc/raddb/huntgroups" Tue Mar 16 00:38:10 2010 : Debug: hints = "/etc/raddb/hints" Tue Mar 16 00:38:10 2010 : Debug: with_ascend_hack = no Tue Mar 16 00:38:10 2010 : Debug: ascend_channels_per_line = 23 Tue Mar 16 00:38:10 2010 : Debug: with_ntdomain_hack = no Tue Mar 16 00:38:10 2010 : Debug: with_specialix_jetstream_hack = no Tue Mar 16 00:38:10 2010 : Debug: with_cisco_vsa_hack = no Tue Mar 16 00:38:10 2010 : Debug: with_alvarion_vsa_hack = no Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: Module: Checking preacct {...} for more modules to load Tue Mar 16 00:38:10 2010 : Debug: (Loaded rlm_acct_unique, checking if it's valid) Tue Mar 16 00:38:10 2010 : Debug: Module: Linked to module rlm_acct_unique Tue Mar 16 00:38:10 2010 : Debug: Module: Instantiating acct_unique Tue Mar 16 00:38:10 2010 : Debug: acct_unique { Tue Mar 16 00:38:10 2010 : Debug: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: Module: Checking accounting {...} for more modules to load Tue Mar 16 00:38:10 2010 : Debug: (Loaded rlm_detail, checking if it's valid) Tue Mar 16 00:38:10 2010 : Debug: Module: Linked to module rlm_detail Tue Mar 16 00:38:10 2010 : Debug: Module: Instantiating detail Tue Mar 16 00:38:10 2010 : Debug: detail { Tue Mar 16 00:38:10 2010 : Debug: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" Tue Mar 16 00:38:10 2010 : Debug: header = "%t" Tue Mar 16 00:38:10 2010 : Debug: detailperm = 384 Tue Mar 16 00:38:10 2010 : Debug: dirperm = 493 Tue Mar 16 00:38:10 2010 : Debug: locking = no Tue Mar 16 00:38:10 2010 : Debug: log_packet_header = no Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: Module: Instantiating attr_filter.accounting_response Tue Mar 16 00:38:10 2010 : Debug: attr_filter attr_filter.accounting_response { Tue Mar 16 00:38:10 2010 : Debug: attrsfile = "/etc/raddb/attrs.accounting_response" Tue Mar 16 00:38:10 2010 : Debug: key = "%{User-Name}" Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: Module: Checking session {...} for more modules to load Tue Mar 16 00:38:10 2010 : Debug: Module: Checking post-auth {...} for more modules to load Tue Mar 16 00:38:10 2010 : Debug: Module: Instantiating authorized_macs Tue Mar 16 00:38:10 2010 : Debug: files authorized_macs { Tue Mar 16 00:38:10 2010 : Debug: usersfile = "/etc/raddb/authorized_macs" Tue Mar 16 00:38:10 2010 : Debug: compat = "no" Tue Mar 16 00:38:10 2010 : Debug: key = "%{Calling-Station-ID}" Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: Module: Instantiating reject Tue Mar 16 00:38:10 2010 : Debug: always reject { Tue Mar 16 00:38:10 2010 : Debug: rcode = "reject" Tue Mar 16 00:38:10 2010 : Debug: simulcount = 0 Tue Mar 16 00:38:10 2010 : Debug: mpp = no Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: radiusd: #### Opening IP addresses and Ports #### Tue Mar 16 00:38:10 2010 : Debug: listen { Tue Mar 16 00:38:10 2010 : Debug: type = "auth" Tue Mar 16 00:38:10 2010 : Debug: ipaddr = * Tue Mar 16 00:38:10 2010 : Debug: port = 0 Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: listen { Tue Mar 16 00:38:10 2010 : Debug: type = "acct" Tue Mar 16 00:38:10 2010 : Debug: ipaddr = * Tue Mar 16 00:38:10 2010 : Debug: port = 0 Tue Mar 16 00:38:10 2010 : Debug: } Tue Mar 16 00:38:10 2010 : Debug: Listening on authentication address * port 1812 Tue Mar 16 00:38:10 2010 : Debug: Listening on accounting address * port 1813 Tue Mar 16 00:38:10 2010 : Debug: Ready to process requests. rad_recv: Access-Request packet from host 192.168.0.1 port 47168, id=20, length=136 Service-Type = Framed-User NAS-Port-Id = "wireless" User-Name = "90:4C:E5:6C:7E:B6" Calling-Station-Id = "90-4C-E5-6C-7E-B6" Called-Station-Id = "00-0C-42-61-4A-99:wireless" User-Password = "" NAS-Identifier = "wireless" NAS-IP-Address = 192.168.0.1 Tue Mar 16 00:40:41 2010 : Info: +- entering group authorize {...} Tue Mar 16 00:40:41 2010 : Info: ++[preprocess] returns ok Tue Mar 16 00:40:41 2010 : Info: ++? if ((Service-Type == 'Call-Check') || (User-Name =~ /^%{Calling-Station-ID}$/i)) Tue Mar 16 00:40:41 2010 : Info: ?? Evaluating (Service-Type == 'Call-Check') -> FALSE Tue Mar 16 00:40:41 2010 : Info: expand: ^%{Calling-Station-ID}$ -> ^90-4C-E5-6C-7E-B6$ Tue Mar 16 00:40:41 2010 : Info: ?? Evaluating (User-Name =~ /^%{Calling-Station-ID}$/i) -> FALSE Tue Mar 16 00:40:41 2010 : Info: ++? if ((Service-Type == 'Call-Check') || (User-Name =~ /^%{Calling-Station-ID}$/i)) -> FALSE Tue Mar 16 00:40:41 2010 : Info: ++[chap] returns noop Tue Mar 16 00:40:41 2010 : Info: ++[mschap] returns noop Tue Mar 16 00:40:41 2010 : Info: [suffix] No '@' in User-Name = "90:4C:E5:6C:7E:B6", looking up realm NULL Tue Mar 16 00:40:41 2010 : Info: [suffix] No such realm "NULL" Tue Mar 16 00:40:41 2010 : Info: ++[suffix] returns noop Tue Mar 16 00:40:41 2010 : Info: ++[unix] returns notfound Tue Mar 16 00:40:41 2010 : Info: ++[files] returns noop Tue Mar 16 00:40:41 2010 : Info: [sql] expand: %{User-Name} -> 90:4C:E5:6C:7E:B6 Tue Mar 16 00:40:41 2010 : Info: [sql] sql_set_user escaped user --> '90:4C:E5:6C:7E:B6' Tue Mar 16 00:40:41 2010 : Debug: rlm_sql (sql): Reserving sql socket id: 3 Tue Mar 16 00:40:41 2010 : Info: [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = '90:4C:E5:6C:7E:B6' ORDER BY id Tue Mar 16 00:40:41 2010 : Debug: WARNING: Found User-Password == "...". Tue Mar 16 00:40:41 2010 : Debug: WARNING: Are you sure you don't mean Cleartext-Password? Tue Mar 16 00:40:41 2010 : Debug: WARNING: See "man rlm_pap" for more information. Tue Mar 16 00:40:41 2010 : Info: [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = '90:4C:E5:6C:7E:B6' ORDER BY priority Tue Mar 16 00:40:41 2010 : Info: [sql] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'xs4all' ORDER BY id Tue Mar 16 00:40:41 2010 : Info: [sql] User found in group xs4all Tue Mar 16 00:40:41 2010 : Info: [sql] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'xs4all' ORDER BY id Tue Mar 16 00:40:41 2010 : Debug: rlm_sql (sql): Released sql socket id: 3 Tue Mar 16 00:40:41 2010 : Info: ++[sql] returns ok Tue Mar 16 00:40:41 2010 : Info: ++[expiration] returns noop Tue Mar 16 00:40:41 2010 : Info: ++[logintime] returns noop Tue Mar 16 00:40:41 2010 : Info: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Tue Mar 16 00:40:41 2010 : Info: Failed to authenticate the user. Tue Mar 16 00:40:41 2010 : Info: Using Post-Auth-Type Reject Tue Mar 16 00:40:41 2010 : Info: +- entering group REJECT {...} Tue Mar 16 00:40:41 2010 : Info: [attr_filter.access_reject] expand: %{User-Name} -> 90:4C:E5:6C:7E:B6 Tue Mar 16 00:40:41 2010 : Debug: attr_filter: Matched entry DEFAULT at line 11 Tue Mar 16 00:40:41 2010 : Info: ++[attr_filter.access_reject] returns updated Tue Mar 16 00:40:41 2010 : Info: Delaying reject of request 0 for 1 seconds Tue Mar 16 00:40:41 2010 : Debug: Going to the next request Tue Mar 16 00:40:41 2010 : Debug: Waking up in 0.9 seconds. rad_recv: Access-Request packet from host 192.168.0.1 port 47168, id=20, length=136 Tue Mar 16 00:40:42 2010 : Info: Waiting to send Access-Reject to client 0.0.0.0/0 port 47168 - ID: 20 Tue Mar 16 00:40:42 2010 : Debug: Waking up in 0.7 seconds. rad_recv: Access-Request packet from host 192.168.0.1 port 47168, id=20, length=136 Tue Mar 16 00:40:42 2010 : Info: Waiting to send Access-Reject to client 0.0.0.0/0 port 47168 - ID: 20 Tue Mar 16 00:40:42 2010 : Debug: Waking up in 0.3 seconds. Tue Mar 16 00:40:42 2010 : Info: Sending delayed reject for request 0 Sending Access-Reject of id 20 to 192.168.0.1 port 47168 Tue Mar 16 00:40:42 2010 : Debug: Waking up in 4.9 seconds. Tue Mar 16 00:40:47 2010 : Info: Cleaning up request 0 ID 20 with timestamp +151 Tue Mar 16 00:40:47 2010 : Debug: Ready to process requests.

3 3

Re: FreeRadius and Copy accounting
by Eric Bellière 17 Mar '10

17 Mar '10

OK I found the problem. I forgot to put in radiusd.conf listen { ipaddr = 192.168.156.9 type = proxy interface = eth0 } Now It is working :-) Eric Bellière wrote: > > Hello, > > Is someone can explain me how is working this fonctionnality? the > copy-acct-to-home-server? > I am newbie in FreeRadius (I have to migrate from NavisRadius ) and after > reading and reading message on forum and on internet, I understand that I > have to use copy-acct-to-home-server but I really don't understand how it > is working. > > I tried to configured my radius but nothing to do to make it working. > > I have a realm xxx.be and when I am testing with NTradPing I see > accounting request coming to the radius and I can see in the log that the > radius is trying to proying (this is what I want) this request but > omething strange is that I can not see ANY packet going out the radius (if > TCPDUMP) and nothing received on the other radius. > > Many Thanks In advance. > > Eric Bellière > -- View this message in context: http://old.nabble.com/FreeRadius-and-Copy-accounting-tp27874103p27933232.ht… Sent from the FreeRadius - User mailing list archive at Nabble.com.

1 0

Re: FreeRadius and Copy accounting
by Eric Bellière 17 Mar '10

17 Mar '10

Eric Bellière wrote: > > Hello, > > Is someone can explain me how is working this fonctionnality? the > copy-acct-to-home-server? > I am newbie in FreeRadius (I have to migrate from NavisRadius ) and after > reading and reading message on forum and on internet, I understand that I > have to use copy-acct-to-home-server but I really don't understand how it > is working. > > I tried to configured my radius but nothing to do to make it working. > > I have a realm xxx.be and when I am testing with NTradPing I see > accounting request coming to the radius and I can see in the log that the > radius is trying to proying (this is what I want) this request but > omething strange is that I can not see ANY packet going out the radius (if > TCPDUMP) and nothing received on the other radius. > > Many Thanks In advance. > > Eric Bellière > I read many discussion about this and I finaly find the way to configure the copy-acct-to... When a request enter the radius I can see the detail files created (a normal and a file.work) My problem now is that I can see in the log the the accounting is sent to the remote proxy radius but I can not see any packet going out of my radius. When I try a local authentication I can receive a response. I have made some connectetivity test and everything ok. When I am using proxying then nothing is going out on the ethernet interface (accouting or authentication) Can someone help me please? Eric Bellière -- View this message in context: http://old.nabble.com/FreeRadius-and-Copy-accounting-tp27874103p27928078.ht… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1

OT: send email when traffic-limit exceeded
by Alexander 17 Mar '10

17 Mar '10

Hello all, I use FR 2.x with MySQL. I would like to get informed via email when a user hits the traffic-limit. Has anyone done this before and can provide some sample script? Cheers, Alexander

1 0

Accounting Start From Client
by Teguh Kurniawan 17 Mar '10

17 Mar '10

Hello, I was succed sending "Accounting Start" from NTRadping to FR 2.1.3. My question is Mikrotik RouterOS and UBNT Nanostation could send "Accounting Start" automatically to FR ? Thank's Teguh Kurniawan

2 1

accounting Framed-IP-Address
by omega bk 17 Mar '10

17 Mar '10

HI, i can do accounting with mysql, it's working so fine. but i noticed that i don't have the real ip address of a workstation connected. i got this +-----------------+---------------------+---------------------+-------------------+-----------------+ | FramedIPAddress | AcctStartTime | AcctStopTime | CallingStationId | FramedIPAddress | +-----------------+---------------------+---------------------+-------------------+-----------------+ | bernard | 2010-03-16 13:07:29 | 2010-03-16 13:10:35 | 00-18-8B-B5-26-B7 | 3.118.236.192 | what is FramedIPAddress stand for? => cause i don't know this ip address how can retrie the real ip address ? (wired) thanks

3 6

Configuring freeradius for a new authentication module
by Abu Marcose 17 Mar '10

17 Mar '10

OK.. so first time I am working with free radius (or any kind of radius server) .. so please bear with me. I have a ubuntu based system on which I have installed freeradius 2.1.8 I have created my own new module called grid which is intended to only provide an authentication function I have the code compiled and the .so installed to the lib directory I have modified the radiusd.conf file to include the new module I have updated the sites-available/default file to include the new authentication type. In fact since all i am interested in is authentication, i have removed entries from all the other sections. So my default file looks like ========================= authorize {} authenticate { Auth-Type GRID { grid } } preacct {} accounting {} session {} post-auth {} pre-proxy {} post-proxy {} =========================== I start up radius in debug mode and send in the following test request 'radtest abc 123 127.0.0.1 10 testing123' and I get the No Auth -Type specified error.. Attached below is the output from radius. Could somebody please tell me what I am doing wrong ? FreeRADIUS Version 2.1.8, for host i686-pc-linux-gnu, built on Mar 16 2010 at 20:29:16 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /usr/local/etc/raddb/radiusd.conf including configuration file /usr/local/etc/raddb/proxy.conf including configuration file /usr/local/etc/raddb/clients.conf including files in directory /usr/local/etc/raddb/modules/ including configuration file /usr/local/etc/raddb/modules/files including configuration file /usr/local/etc/raddb/modules/detail.log including configuration file /usr/local/etc/raddb/modules/mschap including configuration file /usr/local/etc/raddb/modules/ippool including configuration file /usr/local/etc/raddb/modules/preprocess including configuration file /usr/local/etc/raddb/modules/unix including configuration file /usr/local/etc/raddb/modules/sql_log including configuration file /usr/local/etc/raddb/modules/sradutmp including configuration file /usr/local/etc/raddb/modules/mac2vlan including configuration file /usr/local/etc/raddb/modules/mac2ip including configuration file /usr/local/etc/raddb/modules/inner-eap including configuration file /usr/local/etc/raddb/modules/attr_filter including configuration file /usr/local/etc/raddb/modules/counter including configuration file /usr/local/etc/raddb/modules/radutmp including configuration file /usr/local/etc/raddb/modules/attr_rewrite including configuration file /usr/local/etc/raddb/modules/wimax including configuration file /usr/local/etc/raddb/modules/echo including configuration file /usr/local/etc/raddb/modules/krb5 including configuration file /usr/local/etc/raddb/modules/always including configuration file /usr/local/etc/raddb/modules/etc_group including configuration file /usr/local/etc/raddb/modules/ntlm_auth including configuration file /usr/local/etc/raddb/modules/cui including configuration file /usr/local/etc/raddb/modules/perl including configuration file /usr/local/etc/raddb/modules/checkval including configuration file /usr/local/etc/raddb/modules/logintime including configuration file /usr/local/etc/raddb/modules/policy including configuration file /usr/local/etc/raddb/modules/detail including configuration file /usr/local/etc/raddb/modules/expr including configuration file /usr/local/etc/raddb/modules/smsotp including configuration file /usr/local/etc/raddb/modules/exec including configuration file /usr/local/etc/raddb/modules/pam including configuration file /usr/local/etc/raddb/modules/expiration including configuration file /usr/local/etc/raddb/modules/grid including configuration file /usr/local/etc/raddb/modules/digest including configuration file /usr/local/etc/raddb/modules/passwd including configuration file /usr/local/etc/raddb/modules/chap including configuration file /usr/local/etc/raddb/modules/acct_unique including configuration file /usr/local/etc/raddb/modules/pap including configuration file /usr/local/etc/raddb/modules/realm including configuration file /usr/local/etc/raddb/modules/smbpasswd including configuration file /usr/local/etc/raddb/modules/ldap including configuration file /usr/local/etc/raddb/modules/otp including configuration file /usr/local/etc/raddb/modules/linelog including configuration file /usr/local/etc/raddb/modules/ detail.example.com including configuration file /usr/local/etc/raddb/modules/ sqlcounter_expire_on_login including configuration file /usr/local/etc/raddb/eap.conf including configuration file /usr/local/etc/raddb/policy.conf including files in directory /usr/local/etc/raddb/sites-enabled/ including configuration file /usr/local/etc/raddb/sites-enabled/inner- tunnel including configuration file /usr/local/etc/raddb/sites-enabled/ default including configuration file /usr/local/etc/raddb/sites-enabled/ control-socket main { allow_core_dumps = no } including dictionary file /usr/local/etc/raddb/dictionary main { prefix = "/usr/local" localstatedir = "/usr/local/var" logdir = "/usr/local/var/log/radius" libdir = "/usr/local/lib" radacctdir = "/usr/local/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 pidfile = "/usr/local/var/run/radiusd/radiusd.pid" checkrad = "/usr/local/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 require_message_authenticator = no zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 irt = 2 mrt = 16 mrc = 5 mrd = 30 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/usr/local/var/log/radius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 4096 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/usr/local/etc/raddb/certs/server.pem" certificate_file = "/usr/local/etc/raddb/certs/server.pem" CA_file = "/usr/local/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/usr/local/etc/raddb/certs/dh" random_file = "/usr/local/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" make_cert_command = "/usr/local/etc/raddb/certs/bootstrap" cache { enable = no lifetime = 24 max_entries = 255 } } Module: Linked to sub-module rlm_eap_ttls Module: Instantiating eap-ttls ttls { default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" include_length = yes } Module: Linked to sub-module rlm_eap_peap Module: Instantiating eap-peap peap { default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/usr/local/etc/raddb/users" acctusersfile = "/usr/local/etc/raddb/acct_users" preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" compat = "no" } Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/usr/local/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/usr/local/etc/raddb/attrs.access_reject" key = "%{User-Name}" } } # modules } # server server { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_grid Module: Instantiating grid grid { grid_auth_url = "http://localhost/pam_grid/process.php<http://www.google.com/url?sa=D&q=http://localhost/pam_grid/process.php&usg=…> " grid_app_id = "some app id" } } # modules } # server radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } listen { type = "control" listen { socket = "/usr/local/var/run/radiusd/radiusd.sock" } } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /usr/local/var/run/radiusd/radiusd.sock Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 58303, id=88, length=55 User-Name = "abc" User-Password = "123" NAS-IP-Address = 127.0.1.1 NAS-Port = 10 WARNING: Empty section. Using default return values. No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Using Post-Auth-Type Reject WARNING: Unknown value specified for Post-Auth-Type. Cannot perform requested action. Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 88 to 127.0.0.1 port 58303 Waking up in 4.9 seconds. Radius server boots up ok with no problems.

2 3