- Freeradius-Users - lists.freeradius.org

How to send the Vendor-Specific subattributes via radiusclient
by Rahul Panwar 13 Jan '10

13 Jan '10

Hi, I am using freeradius-client-1.1.6 on CentOS 5.4 with windows based freeradius server from freeradius.net. I want to send the Vendor-Specific attribute using radiusclient application. I include the dictionary.cisco file in radiusclient dictionary file as follows: $INCLUDE /usr/local/etc/radiusclient/dictionary.cisco I am giving the following command: radiusclient User-Name=testuser Password=testpw Vendor-Specific=9 h323-remote-address=192.168.2.1 When i am watching the tcpdump capture on radiusclient pc. The above command is accepted by server but the packet is showing as given below: Request Sent by client: Access Request (1), id: 0xba, Authenticator: 402018a985a02bceca216ab2474cd6a1 Username Attribute (1), length: 10, Value: testuser 0x0000: 7465 7374 7573 6572 Password Attribute (2), length: 18, Value: 0x0000: b37e 9117 41f3 6bf3 8d5c 438f 3796 5e1d Vendor Specific Attribute (26), length: 3, Value: [|radius] 0x0000: 39 Framed IPX Network Attribute (23), length: 13, Value: ERROR: length 11 != 4 0x0000: 31 [|radius] My Question is : Why "Framed IPX Network Attribute (23)" is sending by radiusclient if i declared the Vendor-Specific Attributes in dictionary? Response received by client: Access Accept (2), id: 0xba, Authenticator: 6ccb55adfc0d5af921fdab7c111acf18 Please give me the response what the wrong i am doing? I googled about this problem but not able to find anyhelp about radiusclient. Waiting for the response. Thanks, Rahul Panwar

2 2

Configuration test issue
by Guillaume Rousse 13 Jan '10

13 Jan '10

Hello list. I'm trying to automatize configuration testing at each change. However, I'm facing a situation where testing report failure, whereas running freeradius works OK. With this following configuration: DEFAULT Auth-Type := LDAP, Huntgroup-Name == AdminNet, ldap1-LDAP-Group == admins Errors reading /etc/raddb/users /etc/raddb/users[19]: Parse error (check) for entry DEFAULT: Invalid octet string "admins" for attribute name "ldap1-LDAP-Group" When quoting group name: DEFAULT Auth-Type := LDAP, Huntgroup-Name == AdminNet, ldap1-LDAP-Group == "admins" Errors reading /etc/raddb/users /etc/raddb/users[19]: Parse error (check) for entry DEFAULT: Unknown vendor name in attribute name "ldap1-LDAP-Group" Reading 'radiusd -XC' output, I guess the second one occurs because ldap modules initialisation is skipped, whereas this attribute is defined there: Module: Linked to module rlm_ldap Module: Skipping instantiation of ldap1 Module: Skipping instantiation of ldap2 So, can I do something here to fix the validation test :) ? -- BOFH excuse #145: Flat tire on station wagon with tapes. ("Never underestimate the bandwidth of a station wagon full of tapes hurling down the highway" Andrew S. Tannenbaum)

2 2

Configuring Hotspot with freeradius and AP
by Noro Hasina 13 Jan '10

13 Jan '10

Hi everybody! I want to set hotspot for the visitor of the society where I work. I have a cisco AP 1200 which support 802.1x and I've installed freeradius corectly. Here is my question : - what another module do I need to do the authentication? do I need to install radius client like chillispot or coova chilli? - What type of encryption do I need to? WAP,EAP? I really need your help, please I don't have enough time Thank you Hasina

1 0

Have a client with multiple secrets?
by freeradius＠corwyn.net 13 Jan '10

13 Jan '10

I have a firewall that i connect to over SSH to manage. It has a client entry with a secret in clients.conf, it's got a huntgroup entry, and the huntgroup has entries in the users file, and everything is working fine (I think I've got the order right there). The frewall also serves as teh VPN server, authenticating users through radius. But I'd like the VPN users to use a different secret and, more importantly, a different huntgroup (since the user group for authentication is different between those two groups). Is that possible? rick Rick Steeves http://www.sinister.net In reality nothing is more damaging to the adventurous spirit within a man than a secure future - Alexander Supertramp

3 2

My Static IP Client conf. not work
by Tevfik Ceydeliler 13 Jan '10

13 Jan '10

Now I understand why I get accept message. Bec. of " DEFAULT Auth-Type := Accept". When I remove it I get reject. This error occurs for only users have Framed-IP-Address . My verison is : freeradius: FreeRADIUS Version 2.1.0, for host i486-pc-linux-gnu Here is the CORRECT log: ########################################################## rad_recv: Access-Request packet from host 172.30.80.1 port 4778, id=206, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 143607256 CHAP-Challenge = 0x2e302fefb09604035cfe4022945bfbd8 User-Name = "tevfikceydeliler" CHAP-Password = 0x01a1b18b5f3a772a9107bee3ee400ff60e Calling-Station-Id = "905308507313" Wed Jan 13 12:17:33 2010 : Info: +- entering group authorize {...} Wed Jan 13 12:17:33 2010 : Info: ++[preprocess] returns ok Wed Jan 13 12:17:33 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100113 Wed Jan 13 12:17:33 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100113 Wed Jan 13 12:17:33 2010 : Debug: expand: %t -> Wed Jan 13 12:17:33 2010 Wed Jan 13 12:17:33 2010 : Info: ++[auth_log] returns ok Wed Jan 13 12:17:33 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:33 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:33 2010 : Debug: expand: %t -> Wed Jan 13 12:17:33 2010 Wed Jan 13 12:17:33 2010 : Info: ++[detail] returns ok Wed Jan 13 12:17:33 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Wed Jan 13 12:17:33 2010 : Info: ++[chap] returns ok Wed Jan 13 12:17:33 2010 : Info: ++[mschap] returns noop Wed Jan 13 12:17:33 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Wed Jan 13 12:17:33 2010 : Info: [suffix] No such realm "NULL" Wed Jan 13 12:17:33 2010 : Info: ++[suffix] returns noop Wed Jan 13 12:17:33 2010 : Info: [eap] No EAP-Message, not doing EAP Wed Jan 13 12:17:33 2010 : Info: ++[eap] returns noop Wed Jan 13 12:17:33 2010 : Info: ++[unix] returns notfound Wed Jan 13 12:17:33 2010 : Info: ++[files] returns noop Wed Jan 13 12:17:33 2010 : Info: ++[expiration] returns noop Wed Jan 13 12:17:33 2010 : Info: ++[logintime] returns noop >>>>>>>Wed Jan 13 12:17:33 2010 : Info: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. >>>>>>>Wed Jan 13 12:17:33 2010 : Info: ++[pap] returns noop >>>>>>>Wed Jan 13 12:17:33 2010 : Info: Found Auth-Type = CHAP >>>>>>>Wed Jan 13 12:17:33 2010 : Info: +- entering group CHAP {...} >>>>>>>Wed Jan 13 12:17:33 2010 : Info: [chap] login attempt by "tevfikceydeliler" with CHAP password >>>>>>>Wed Jan 13 12:17:33 2010 : Info: [chap] Cleartext-Password is required for authentication >>>>>>>Wed Jan 13 12:17:33 2010 : Info: ++[chap] returns invalid >>>>>>>Wed Jan 13 12:17:33 2010 : Info: Failed to authenticate the user. >>>>>>>Wed Jan 13 12:17:33 2010 : Auth: Login incorrect (rlm_chap: Clear text password not available): [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 143607256 cli 905308507313) >>>>>>>Wed Jan 13 12:17:33 2010 : Info: Using Post-Auth-Type Reject Wed Jan 13 12:17:33 2010 : Info: +- entering group REJECT {...} Wed Jan 13 12:17:33 2010 : Debug: expand: %{User-Name} -> tevfikceydeliler Wed Jan 13 12:17:33 2010 : Debug: attr_filter: Matched entry DEFAULT at line 11 Wed Jan 13 12:17:33 2010 : Info: ++[attr_filter.access_reject] returns updated Wed Jan 13 12:17:33 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:33 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:33 2010 : Debug: expand: %t -> Wed Jan 13 12:17:33 2010 Wed Jan 13 12:17:33 2010 : Info: ++[detail] returns ok Wed Jan 13 12:17:33 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100113 Wed Jan 13 12:17:33 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100113 Wed Jan 13 12:17:33 2010 : Debug: expand: %t -> Wed Jan 13 12:17:33 2010 Wed Jan 13 12:17:33 2010 : Info: ++[reply_log] returns ok Wed Jan 13 12:17:33 2010 : Info: Delaying reject of request 0 for 3 seconds Wed Jan 13 12:17:33 2010 : Debug: Going to the next request Wed Jan 13 12:17:33 2010 : Debug: Waking up in 0.9 seconds. Wed Jan 13 12:17:34 2010 : Debug: Waking up in 1.9 seconds. Wed Jan 13 12:17:36 2010 : Info: Sending delayed reject for request 0 Sending Access-Reject of id 206 to 172.30.80.1 port 4778 Wed Jan 13 12:17:36 2010 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 172.30.80.1 port 1806, id=237, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 193325448 CHAP-Challenge = 0x2e302fefb09604035cfe4022945bfbd8 User-Name = "tevfikceydeliler" CHAP-Password = 0x01a1b18b5f3a772a9107bee3ee400ff60e Calling-Station-Id = "905308507313" Wed Jan 13 12:17:36 2010 : Info: +- entering group authorize {...} Wed Jan 13 12:17:36 2010 : Info: ++[preprocess] returns ok Wed Jan 13 12:17:36 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100113 Wed Jan 13 12:17:36 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100113 Wed Jan 13 12:17:36 2010 : Debug: expand: %t -> Wed Jan 13 12:17:36 2010 Wed Jan 13 12:17:36 2010 : Info: ++[auth_log] returns ok Wed Jan 13 12:17:36 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:36 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:36 2010 : Debug: expand: %t -> Wed Jan 13 12:17:36 2010 Wed Jan 13 12:17:36 2010 : Info: ++[detail] returns ok Wed Jan 13 12:17:36 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Wed Jan 13 12:17:36 2010 : Info: ++[chap] returns ok Wed Jan 13 12:17:36 2010 : Info: ++[mschap] returns noop Wed Jan 13 12:17:36 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Wed Jan 13 12:17:36 2010 : Info: [suffix] No such realm "NULL" Wed Jan 13 12:17:36 2010 : Info: ++[suffix] returns noop Wed Jan 13 12:17:36 2010 : Info: [eap] No EAP-Message, not doing EAP Wed Jan 13 12:17:36 2010 : Info: ++[eap] returns noop Wed Jan 13 12:17:36 2010 : Info: ++[unix] returns notfound Wed Jan 13 12:17:36 2010 : Info: ++[files] returns noop Wed Jan 13 12:17:36 2010 : Info: ++[expiration] returns noop Wed Jan 13 12:17:36 2010 : Info: ++[logintime] returns noop Wed Jan 13 12:17:36 2010 : Info: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. Wed Jan 13 12:17:36 2010 : Info: ++[pap] returns noop Wed Jan 13 12:17:36 2010 : Info: Found Auth-Type = CHAP Wed Jan 13 12:17:36 2010 : Info: +- entering group CHAP {...} Wed Jan 13 12:17:36 2010 : Info: [chap] login attempt by "tevfikceydeliler" with CHAP password Wed Jan 13 12:17:36 2010 : Info: [chap] Cleartext-Password is required for authentication Wed Jan 13 12:17:36 2010 : Info: ++[chap] returns invalid Wed Jan 13 12:17:36 2010 : Info: Failed to authenticate the user. Wed Jan 13 12:17:36 2010 : Auth: Login incorrect (rlm_chap: Clear text password not available): [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 193325448 cli 905308507313) Wed Jan 13 12:17:36 2010 : Info: Using Post-Auth-Type Reject Wed Jan 13 12:17:36 2010 : Info: +- entering group REJECT {...} Wed Jan 13 12:17:36 2010 : Debug: expand: %{User-Name} -> tevfikceydeliler Wed Jan 13 12:17:36 2010 : Debug: attr_filter: Matched entry DEFAULT at line 11 Wed Jan 13 12:17:36 2010 : Info: ++[attr_filter.access_reject] returns updated Wed Jan 13 12:17:36 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:36 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100113 Wed Jan 13 12:17:36 2010 : Debug: expand: %t -> Wed Jan 13 12:17:36 2010 Wed Jan 13 12:17:36 2010 : Info: ++[detail] returns ok Wed Jan 13 12:17:36 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100113 Wed Jan 13 12:17:36 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100113 Wed Jan 13 12:17:36 2010 : Debug: expand: %t -> Wed Jan 13 12:17:36 2010 Wed Jan 13 12:17:36 2010 : Info: ++[reply_log] returns ok Wed Jan 13 12:17:36 2010 : Info: Delaying reject of request 1 for 3 seconds Wed Jan 13 12:17:36 2010 : Debug: Going to the next request Wed Jan 13 12:17:36 2010 : Debug: Waking up in 0.9 seconds. Wed Jan 13 12:17:37 2010 : Debug: Waking up in 1.9 seconds. Wed Jan 13 12:17:39 2010 : Info: Sending delayed reject for request 1 Sending Access-Reject of id 237 to 172.30.80.1 port 1806 Wed Jan 13 12:17:39 2010 : Debug: Waking up in 1.9 seconds. Wed Jan 13 12:17:41 2010 : Info: Cleaning up request 0 ID 206 with timestamp +165 Wed Jan 13 12:17:41 2010 : Debug: Waking up in 3.0 seconds. Wed Jan 13 12:17:44 2010 : Info: Cleaning up request 1 ID 237 with timestamp +168 Wed Jan 13 12:17:44 2010 : Debug: Ready to process requests. ########################################################################## Tevfik Ceydeliler Hello Tevfik, Run radius in debug mode (radius -X) and then try to authenticate the user. You should have enough information in the debug to figure out the problem. If you still can't figure it out paste your debug output here. You may also want to mention what version of freeradius you're using. Adrian -----Original Message----- From: freeradius-users-bounces+adrian=dsl4u.ca(a)lists.freeradius.org [mailto:freeradius-users-bounces+adrian=dsl4u.ca@lists.freeradius.org] On Behalf Of Tevfik Ceydeliler Sent: Tuesday, January 12, 2010 2:15 AM To: freeradius-users(a)lists.freeradius.org Subject: My Static IP Client conf. not work Hi Adrian, I change the operator for Framed IP Address and Netmask. But nothing changed. Client get Access-Accept but no IP address assigned. I check it with "ipconfig" Regards... Tevfik Ceydeliler Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system. ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 57, Issue 38 ************************************************ Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.

1 0

My Static IP Client conf. not work
by Tevfik Ceydeliler 13 Jan '10

13 Jan '10

Hi, Sorry i forgot to add version of freeradius. My version is : freeradius: FreeRADIUS Version 2.1.0, for host i486-pc-linux-gnu Here is the log: ###################################### rad_recv: Access-Request packet from host 172.30.80.1 port 1048, id=163, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 138236696 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 : Info: +- entering group authorize {...} Mon Jan 11 11:01:38 2010 : Info: ++[preprocess] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[auth_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Mon Jan 11 11:01:38 2010 : Info: ++[chap] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[mschap] returns noop Mon Jan 11 11:01:38 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Mon Jan 11 11:01:38 2010 : Info: [suffix] No such realm "NULL" Mon Jan 11 11:01:38 2010 : Info: ++[suffix] returns noop Mon Jan 11 11:01:38 2010 : Info: [eap] No EAP-Message, not doing EAP Mon Jan 11 11:01:38 2010 : Info: ++[eap] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[unix] returns notfound Mon Jan 11 11:01:38 2010 : Info: [files] users: Matched entry DEFAULT at line 229 Mon Jan 11 11:01:38 2010 : Info: ++[files] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[expiration] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[logintime] returns noop Mon Jan 11 11:01:38 2010 : Info: [pap] Found existing Auth-Type, not changing it. Mon Jan 11 11:01:38 2010 : Info: ++[pap] returns noop Mon Jan 11 11:01:38 2010 : Info: Found Auth-Type = Accept Mon Jan 11 11:01:38 2010 : Info: Auth-Type = Accept, accepting the user Mon Jan 11 11:01:38 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 138236696 cli 905308507313) Mon Jan 11 11:01:38 2010 : Info: +- entering group post-auth {...} Mon Jan 11 11:01:38 2010 : Info: [TCELL_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[TCELL_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [BirmasGPRS_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[BirmasGPRS_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PSUOtonom_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PSUOtonom_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom1_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom1_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom2_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom2_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom3_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom3_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [Turkcell3G_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[Turkcell3G_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PsuYBP2Ortak_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[reply_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 163 to 172.30.80.1 port 1048 Mon Jan 11 11:01:38 2010 : Info: Finished request 0. Mon Jan 11 11:01:38 2010 : Debug: Going to the next request Mon Jan 11 11:01:38 2010 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 172.30.80.1 port 1638, id=72, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 95552352 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 : Info: +- entering group authorize {...} Mon Jan 11 11:01:38 2010 : Info: ++[preprocess] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[auth_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Mon Jan 11 11:01:38 2010 : Info: ++[chap] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[mschap] returns noop Mon Jan 11 11:01:38 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Mon Jan 11 11:01:38 2010 : Info: [suffix] No such realm "NULL" Mon Jan 11 11:01:38 2010 : Info: ++[suffix] returns noop Mon Jan 11 11:01:38 2010 : Info: [eap] No EAP-Message, not doing EAP Mon Jan 11 11:01:38 2010 : Info: ++[eap] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[unix] returns notfound Mon Jan 11 11:01:38 2010 : Info: [files] users: Matched entry DEFAULT at line 229 Mon Jan 11 11:01:38 2010 : Info: ++[files] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[expiration] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[logintime] returns noop Mon Jan 11 11:01:38 2010 : Info: [pap] Found existing Auth-Type, not changing it. Mon Jan 11 11:01:38 2010 : Info: ++[pap] returns noop Mon Jan 11 11:01:38 2010 : Info: Found Auth-Type = Accept Mon Jan 11 11:01:38 2010 : Info: Auth-Type = Accept, accepting the user Mon Jan 11 11:01:38 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 95552352 cli 905308507313) Mon Jan 11 11:01:38 2010 : Info: +- entering group post-auth {...} Mon Jan 11 11:01:38 2010 : Info: [TCELL_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[TCELL_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [BirmasGPRS_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[BirmasGPRS_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PSUOtonom_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PSUOtonom_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom1_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom1_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom2_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom2_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom3_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom3_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [Turkcell3G_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[Turkcell3G_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PsuYBP2Ortak_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[reply_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 72 to 172.30.80.1 port 1638 Mon Jan 11 11:01:38 2010 : Info: Finished request 1. Mon Jan 11 11:01:38 2010 : Debug: Going to the next request Mon Jan 11 11:01:38 2010 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 172.30.80.1 port 1048, id=255, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 153336608 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 : Info: +- entering group authorize {...} Mon Jan 11 11:01:38 2010 : Info: ++[preprocess] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[auth_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Mon Jan 11 11:01:38 2010 : Info: ++[chap] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[mschap] returns noop Mon Jan 11 11:01:38 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Mon Jan 11 11:01:38 2010 : Info: [suffix] No such realm "NULL" Mon Jan 11 11:01:38 2010 : Info: ++[suffix] returns noop Mon Jan 11 11:01:38 2010 : Info: [eap] No EAP-Message, not doing EAP Mon Jan 11 11:01:38 2010 : Info: ++[eap] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[unix] returns notfound Mon Jan 11 11:01:38 2010 : Info: [files] users: Matched entry DEFAULT at line 229 Mon Jan 11 11:01:38 2010 : Info: ++[files] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[expiration] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[logintime] returns noop Mon Jan 11 11:01:38 2010 : Info: [pap] Found existing Auth-Type, not changing it. Mon Jan 11 11:01:38 2010 : Info: ++[pap] returns noop Mon Jan 11 11:01:38 2010 : Info: Found Auth-Type = Accept Mon Jan 11 11:01:38 2010 : Info: Auth-Type = Accept, accepting the user Mon Jan 11 11:01:38 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 153336608 cli 905308507313) Mon Jan 11 11:01:38 2010 : Info: +- entering group post-auth {...} Mon Jan 11 11:01:38 2010 : Info: [TCELL_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[TCELL_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [BirmasGPRS_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[BirmasGPRS_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PSUOtonom_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PSUOtonom_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom1_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom1_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom2_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom2_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom3_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom3_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [Turkcell3G_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[Turkcell3G_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PsuYBP2Ortak_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[reply_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 255 to 172.30.80.1 port 1048 Mon Jan 11 11:01:38 2010 : Info: Finished request 2. Mon Jan 11 11:01:38 2010 : Debug: Going to the next request Mon Jan 11 11:01:38 2010 : Debug: Waking up in 4.8 seconds. rad_recv: Access-Request packet from host 172.30.80.1 port 1638, id=232, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 159151144 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 : Info: +- entering group authorize {...} Mon Jan 11 11:01:38 2010 : Info: ++[preprocess] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[auth_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Mon Jan 11 11:01:38 2010 : Info: ++[chap] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[mschap] returns noop Mon Jan 11 11:01:38 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Mon Jan 11 11:01:38 2010 : Info: [suffix] No such realm "NULL" Mon Jan 11 11:01:38 2010 : Info: ++[suffix] returns noop Mon Jan 11 11:01:38 2010 : Info: [eap] No EAP-Message, not doing EAP Mon Jan 11 11:01:38 2010 : Info: ++[eap] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[unix] returns notfound Mon Jan 11 11:01:38 2010 : Info: [files] users: Matched entry DEFAULT at line 229 Mon Jan 11 11:01:38 2010 : Info: ++[files] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[expiration] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[logintime] returns noop Mon Jan 11 11:01:38 2010 : Info: [pap] Found existing Auth-Type, not changing it. Mon Jan 11 11:01:38 2010 : Info: ++[pap] returns noop Mon Jan 11 11:01:38 2010 : Info: Found Auth-Type = Accept Mon Jan 11 11:01:38 2010 : Info: Auth-Type = Accept, accepting the user Mon Jan 11 11:01:38 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 159151144 cli 905308507313) Mon Jan 11 11:01:38 2010 : Info: +- entering group post-auth {...} Mon Jan 11 11:01:38 2010 : Info: [TCELL_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[TCELL_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [BirmasGPRS_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[BirmasGPRS_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PSUOtonom_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PSUOtonom_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom1_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom1_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom2_pool] Could not f ind Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom2_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom3_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom3_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [Turkcell3G_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[Turkcell3G_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PsuYBP2Ortak_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[reply_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 232 to 172.30.80.1 port 1638 Mon Jan 11 11:01:38 2010 : Info: Finished request 3. Mon Jan 11 11:01:38 2010 : Debug: Going to the next request Mon Jan 11 11:01:38 2010 : Debug: Waking up in 4.8 seconds. Mon Jan 11 11:01:43 2010 : Info: Cleaning up request 0 ID 163 with timestamp +37 Mon Jan 11 11:01:43 2010 : Info: Cleaning up request 1 ID 72 with timestamp +37 Mon Jan 11 11:01:43 2010 : Info: Cleaning up request 2 ID 255 with timestamp +37 Mon Jan 11 11:01:43 2010 : Info: Cleaning up request 3 ID 232 with timestamp +37 Mon Jan 11 11:01:43 2010 : Debug: Ready to process requests. ############################################################## And here is the detail log: ############################################################## Mon Jan 11 11:01:38 2010 Packet-Type = Access-Request NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 138236696 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 Packet-Type = Access-Accept Mon Jan 11 11:01:38 2010 Packet-Type = Access-Request NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 95552352 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 Packet-Type = Access-Accept Mon Jan 11 11:01:38 2010 Packet-Type = Access-Request NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 153336608 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 Packet-Type = Access-Accept Mon Jan 11 11:01:38 2010 Packet-Type = Access-Request NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 159151144 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 Packet-Type = Access-Accept ############################################################## Tevfik Ceydeliler?? ------------------------------------------------------------------------------------------------ Hello Tevfik, Run radius in debug mode (radius -X) and then try to authenticate the user. You should have enough information in the debug to figure out the problem. If you still can't figure it out paste your debug output here. You may also want to mention what version of freeradius you're using. Adrian -----Original Message----- From: freeradius-users-bounces+adrian=dsl4u.ca(a)lists.freeradius.org [mailto:freeradius-users-bounces+adrian=dsl4u.ca@lists.freeradius.org] On Behalf Of Tevfik Ceydeliler Sent: Tuesday, January 12, 2010 2:15 AM To: freeradius-users(a)lists.freeradius.org Subject: My Static IP Client conf. not work Hi Adrian, I change the operator for Framed IP Address and Netmask. But nothing changed. Client get Access-Accept but no IP address assigned. I check it with "ipconfig" Regards... Tevfik Ceydeliler Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.

1 0

Radius and LDAP
by Jason Frisvold 13 Jan '10

13 Jan '10

Hi all, I have a quick LDAP question. I'm running freeradius 1.1.3, the latest version available for RHEL 5.4. So, on to the question. If the LDAP server goes away, it looks like radius returns an access-reject. We have, however, redundant ldap and radius servers. Is it possible to have radius stop responding if the local ldap server stops responding rather than having it return a reject? The idea here it so have the access device fail over to the other radius server in the event of a failure instead of rejecting all access requests in case of a single failure. Thanks, -- --------------------------- Jason Frisvold xenophage0(a)gmail.com --------------------------- "I love deadlines. I like the whooshing sound they make as they fly by." - Douglas Adams

2 1

OpenDirectory on Mac OS X 10.6 authenticating Cisco ASA
by mail＠wetzelandson.com 13 Jan '10

13 Jan '10

Thank you for any consideration of this issue in advance. Essentially I, and several others on Apple's Server forum, are looking to get a Cisco ASA to authenticate VPN users against a Mac 10.6 Server (free)RADIUS. Can anyone offer setup suggestion to a modestly skilled user on a standard Apple installation? We tested the following setup procedure on a test 10.6.x server, the "radtest" did not work. The set up we use currently was done as follows to give an idea of what we have figured out in the past : OSX Server 10.5.4 Cisco ASA 5510 In Server Admin > Radius: I did not use the setup helper. Select a certificate to use for radius manually. Start Radius Edit etc/raddb/users change DEFAULT Auth-Type = System to DEFAULT = opendirectory Restart Radius Test to see if it is working by issuing on the server sudo radtest usernameinOD userpasswordinOD localhost 0 testing123 If this is working you will get back some type of "accepted" message Edit etc/raddb/clients.conf Add Cisco ASA as client, read the comments in the file they are very clear and helpful. Take one of the sample clients, copy the sample and add appropriate settings for your ASA and uncomment the lines so that they are executed : IP address shared secret/key short/common name. File says that there are some optional items. I did not set any of them. On the ASA Go to the AAA settings. As appropriate, set up an authentication server using radius, at your RADIUS server IP using the shared key as expected and the shortname from the RADIUS setup as the common key in the ASA. Our ASA gave the option to test, put in a user who is in the OD RADIUS authorized group and as long as the test came back positive that server could now be used to authenticate the numerous things it can be assigned to. Thanks again for your consideration. -Erich Wetzel

3 3

My Static IP Client conf. not work
by Tevfik Ceydeliler 13 Jan '10

13 Jan '10

Hi, Here is the log: ###################################### rad_recv: Access-Request packet from host 172.30.80.1 port 1048, id=163, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 138236696 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 : Info: +- entering group authorize {...} Mon Jan 11 11:01:38 2010 : Info: ++[preprocess] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[auth_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Mon Jan 11 11:01:38 2010 : Info: ++[chap] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[mschap] returns noop Mon Jan 11 11:01:38 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Mon Jan 11 11:01:38 2010 : Info: [suffix] No such realm "NULL" Mon Jan 11 11:01:38 2010 : Info: ++[suffix] returns noop Mon Jan 11 11:01:38 2010 : Info: [eap] No EAP-Message, not doing EAP Mon Jan 11 11:01:38 2010 : Info: ++[eap] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[unix] returns notfound Mon Jan 11 11:01:38 2010 : Info: [files] users: Matched entry DEFAULT at line 229 Mon Jan 11 11:01:38 2010 : Info: ++[files] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[expiration] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[logintime] returns noop Mon Jan 11 11:01:38 2010 : Info: [pap] Found existing Auth-Type, not changing it. Mon Jan 11 11:01:38 2010 : Info: ++[pap] returns noop Mon Jan 11 11:01:38 2010 : Info: Found Auth-Type = Accept Mon Jan 11 11:01:38 2010 : Info: Auth-Type = Accept, accepting the user Mon Jan 11 11:01:38 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 138236696 cli 905308507313) Mon Jan 11 11:01:38 2010 : Info: +- entering group post-auth {...} Mon Jan 11 11:01:38 2010 : Info: [TCELL_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[TCELL_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [BirmasGPRS_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[BirmasGPRS_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PSUOtonom_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PSUOtonom_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom1_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom1_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom2_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom2_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom3_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom3_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [Turkcell3G_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[Turkcell3G_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PsuYBP2Ortak_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[reply_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 163 to 172.30.80.1 port 1048 Mon Jan 11 11:01:38 2010 : Info: Finished request 0. Mon Jan 11 11:01:38 2010 : Debug: Going to the next request Mon Jan 11 11:01:38 2010 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 172.30.80.1 port 1638, id=72, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 95552352 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 : Info: +- entering group authorize {...} Mon Jan 11 11:01:38 2010 : Info: ++[preprocess] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[auth_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Mon Jan 11 11:01:38 2010 : Info: ++[chap] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[mschap] returns noop Mon Jan 11 11:01:38 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Mon Jan 11 11:01:38 2010 : Info: [suffix] No such realm "NULL" Mon Jan 11 11:01:38 2010 : Info: ++[suffix] returns noop Mon Jan 11 11:01:38 2010 : Info: [eap] No EAP-Message, not doing EAP Mon Jan 11 11:01:38 2010 : Info: ++[eap] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[unix] returns notfound Mon Jan 11 11:01:38 2010 : Info: [files] users: Matched entry DEFAULT at line 229 Mon Jan 11 11:01:38 2010 : Info: ++[files] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[expiration] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[logintime] returns noop Mon Jan 11 11:01:38 2010 : Info: [pap] Found existing Auth-Type, not changing it. Mon Jan 11 11:01:38 2010 : Info: ++[pap] returns noop Mon Jan 11 11:01:38 2010 : Info: Found Auth-Type = Accept Mon Jan 11 11:01:38 2010 : Info: Auth-Type = Accept, accepting the user Mon Jan 11 11:01:38 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 95552352 cli 905308507313) Mon Jan 11 11:01:38 2010 : Info: +- entering group post-auth {...} Mon Jan 11 11:01:38 2010 : Info: [TCELL_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[TCELL_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [BirmasGPRS_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[BirmasGPRS_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PSUOtonom_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PSUOtonom_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom1_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom1_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom2_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom2_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom3_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom3_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [Turkcell3G_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[Turkcell3G_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PsuYBP2Ortak_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[reply_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 72 to 172.30.80.1 port 1638 Mon Jan 11 11:01:38 2010 : Info: Finished request 1. Mon Jan 11 11:01:38 2010 : Debug: Going to the next request Mon Jan 11 11:01:38 2010 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 172.30.80.1 port 1048, id=255, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 153336608 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 : Info: +- entering group authorize {...} Mon Jan 11 11:01:38 2010 : Info: ++[preprocess] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[auth_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Mon Jan 11 11:01:38 2010 : Info: ++[chap] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[mschap] returns noop Mon Jan 11 11:01:38 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Mon Jan 11 11:01:38 2010 : Info: [suffix] No such realm "NULL" Mon Jan 11 11:01:38 2010 : Info: ++[suffix] returns noop Mon Jan 11 11:01:38 2010 : Info: [eap] No EAP-Message, not doing EAP Mon Jan 11 11:01:38 2010 : Info: ++[eap] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[unix] returns notfound Mon Jan 11 11:01:38 2010 : Info: [files] users: Matched entry DEFAULT at line 229 Mon Jan 11 11:01:38 2010 : Info: ++[files] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[expiration] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[logintime] returns noop Mon Jan 11 11:01:38 2010 : Info: [pap] Found existing Auth-Type, not changing it. Mon Jan 11 11:01:38 2010 : Info: ++[pap] returns noop Mon Jan 11 11:01:38 2010 : Info: Found Auth-Type = Accept Mon Jan 11 11:01:38 2010 : Info: Auth-Type = Accept, accepting the user Mon Jan 11 11:01:38 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 153336608 cli 905308507313) Mon Jan 11 11:01:38 2010 : Info: +- entering group post-auth {...} Mon Jan 11 11:01:38 2010 : Info: [TCELL_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[TCELL_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [BirmasGPRS_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[BirmasGPRS_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PSUOtonom_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PSUOtonom_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom1_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom1_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom2_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom2_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom3_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom3_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [Turkcell3G_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[Turkcell3G_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PsuYBP2Ortak_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[reply_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 255 to 172.30.80.1 port 1048 Mon Jan 11 11:01:38 2010 : Info: Finished request 2. Mon Jan 11 11:01:38 2010 : Debug: Going to the next request Mon Jan 11 11:01:38 2010 : Debug: Waking up in 4.8 seconds. rad_recv: Access-Request packet from host 172.30.80.1 port 1638, id=232, length=139 NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 159151144 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 : Info: +- entering group authorize {...} Mon Jan 11 11:01:38 2010 : Info: ++[preprocess] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/auth-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[auth_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: [chap] Setting 'Auth-Type := CHAP' Mon Jan 11 11:01:38 2010 : Info: ++[chap] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[mschap] returns noop Mon Jan 11 11:01:38 2010 : Info: [suffix] No '@' in User-Name = "tevfikceydeliler", looking up realm NULL Mon Jan 11 11:01:38 2010 : Info: [suffix] No such realm "NULL" Mon Jan 11 11:01:38 2010 : Info: ++[suffix] returns noop Mon Jan 11 11:01:38 2010 : Info: [eap] No EAP-Message, not doing EAP Mon Jan 11 11:01:38 2010 : Info: ++[eap] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[unix] returns notfound Mon Jan 11 11:01:38 2010 : Info: [files] users: Matched entry DEFAULT at line 229 Mon Jan 11 11:01:38 2010 : Info: ++[files] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[expiration] returns noop Mon Jan 11 11:01:38 2010 : Info: ++[logintime] returns noop Mon Jan 11 11:01:38 2010 : Info: [pap] Found existing Auth-Type, not changing it. Mon Jan 11 11:01:38 2010 : Info: ++[pap] returns noop Mon Jan 11 11:01:38 2010 : Info: Found Auth-Type = Accept Mon Jan 11 11:01:38 2010 : Info: Auth-Type = Accept, accepting the user Mon Jan 11 11:01:38 2010 : Auth: Login OK: [tevfikceydeliler/<CHAP-Password>] (from client turkcellAPN port 159151144 cli 905308507313) Mon Jan 11 11:01:38 2010 : Info: +- entering group post-auth {...} Mon Jan 11 11:01:38 2010 : Info: [TCELL_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[TCELL_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [BirmasGPRS_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[BirmasGPRS_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PSUOtonom_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PSUOtonom_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom1_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom1_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom2_pool] Could not f ind Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom2_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [YBPOtonom3_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[YBPOtonom3_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [Turkcell3G_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[Turkcell3G_pool] returns noop Mon Jan 11 11:01:38 2010 : Info: [PsuYBP2Ortak_pool] Could not find Pool-Name attribute. Mon Jan 11 11:01:38 2010 : Info: ++[PsuYBP2Ortak_pool] returns noop Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [reply_log] /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/reply-detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[reply_log] returns ok Mon Jan 11 11:01:38 2010 : Debug: expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Info: [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/172.30.80.1/detail-20100111 Mon Jan 11 11:01:38 2010 : Debug: expand: %t -> Mon Jan 11 11:01:38 2010 Mon Jan 11 11:01:38 2010 : Info: ++[detail] returns ok Mon Jan 11 11:01:38 2010 : Info: ++[exec] returns noop Sending Access-Accept of id 232 to 172.30.80.1 port 1638 Mon Jan 11 11:01:38 2010 : Info: Finished request 3. Mon Jan 11 11:01:38 2010 : Debug: Going to the next request Mon Jan 11 11:01:38 2010 : Debug: Waking up in 4.8 seconds. Mon Jan 11 11:01:43 2010 : Info: Cleaning up request 0 ID 163 with timestamp +37 Mon Jan 11 11:01:43 2010 : Info: Cleaning up request 1 ID 72 with timestamp +37 Mon Jan 11 11:01:43 2010 : Info: Cleaning up request 2 ID 255 with timestamp +37 Mon Jan 11 11:01:43 2010 : Info: Cleaning up request 3 ID 232 with timestamp +37 Mon Jan 11 11:01:43 2010 : Debug: Ready to process requests. ############################################################## And here is the detail log: ############################################################## Mon Jan 11 11:01:38 2010 Packet-Type = Access-Request NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 138236696 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 Packet-Type = Access-Accept Mon Jan 11 11:01:38 2010 Packet-Type = Access-Request NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 95552352 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 Packet-Type = Access-Accept Mon Jan 11 11:01:38 2010 Packet-Type = Access-Request NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 153336608 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 Packet-Type = Access-Accept Mon Jan 11 11:01:38 2010 Packet-Type = Access-Request NAS-IP-Address = 172.30.80.1 NAS-Identifier = "GGFILE02" Called-Station-Id = "yasarapn" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual NAS-Port = 159151144 CHAP-Challenge = 0xb88cf8ef1cffdea6dadc3e7ae8aa15b5 User-Name = "tevfikceydeliler" CHAP-Password = 0x01940918c738cd055fb41fa4170c7ca1c0 Calling-Station-Id = "905308507313" Mon Jan 11 11:01:38 2010 Packet-Type = Access-Accept ############################################################## Tevfik Ceydeliler ------------------------------------------------------------------------------------------------ Hello Tevfik, Run radius in debug mode (radius -X) and then try to authenticate the user. You should have enough information in the debug to figure out the problem. If you still can't figure it out paste your debug output here. You may also want to mention what version of freeradius you're using. Adrian -----Original Message----- From: freeradius-users-bounces+adrian=dsl4u.ca(a)lists.freeradius.org [mailto:freeradius-users-bounces+adrian=dsl4u.ca@lists.freeradius.org] On Behalf Of Tevfik Ceydeliler Sent: Tuesday, January 12, 2010 2:15 AM To: freeradius-users(a)lists.freeradius.org Subject: My Static IP Client conf. not work Hi Adrian, I change the operator for Framed IP Address and Netmask. But nothing changed. Client get Access-Accept but no IP address assigned. I check it with "ipconfig" Regards... Tevfik Ceydeliler Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.

1 0

Re: FreeRADIUS + DHCP config
by Ale Luna 12 Jan '10

12 Jan '10

I can suppose you do not have 'dhcp' module in auth, autz and/or etc sections in radiusd.conf -- С уважением, Коньков mailto:kes-kes@yandex.ru OK. I'm going to try this..... thanks a lot !... all

1 0