- Freeradius-Users - lists.freeradius.org

closing connection
by ego seek 31 Jul '06

31 Jul '06

hi. I'm a new user with freeradius. i'm using it to authenticate clients in a Wlan, it work great, but I need to disconnect a user that have finished his available broswing time.(i use a prepaid cards) how can i do? in the code there are some rows to deny the authentication if a guest consume his "daily time", how I can enebled it? is enabled by default? I saw in wiki.freeradius.org the radiusKick at ftp://ftp.nmo.net/pub/radkill/radkill-latest.tar.gz<ftp://ftp.nmo.net/pub/radkill/radkill-latest.tar.gz> but i cannot download it, and probably it is obsolete (written in 2000). can anybody help me? best regards.

1 0

Re: proxy request when ldap authentication is enable
by sumi thra 31 Jul '06

31 Jul '06

Im sorry, i missed out the debug long in my previous mail. Please find the logs given below. rad_recv: Access-Request packet from host 127.0.0.1:30504, id=8, length=295 User-Name = "anonymous" Called-Station-Id = "00-A0-F8-BF-E9-BC:ssid1" Calling-Station-Id = "00-0F-3D-E9-A6-54" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 127.0.0.1 NAS-Identifier = "switch" VSA-1 = "ssid1" ASA-2 = "1" NAS-Port-Id = "WLAN1" Connect-Info = "CONNECT 54Mbps 802.11a" State = 0x7202552d433833273413b6683dd14790 EAP-Message = 0x0205004f158000000045170301004073b0056431239ce2d8e9dff10e30ac509c6189763cbcc5d2f0a254fc338a827b5c7322e66c46ebbddf16bb5a0d807a31b3bdd103188ded50ea2e25578a88d6de Message-Authenticator = 0xebdc63168f0f7b03694605ba31129085 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 4 modcall[authorize]: module "preprocess" returns ok for request 4 modcall[authorize]: module "chap" returns noop for request 4 modcall[authorize]: module "mschap" returns noop for request 4 rlm_realm: No '/' in User-Name = "anonymous", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix_oblic" returns noop for request 4 rlm_realm: No '/' in User-Name = "anonymous", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "prefix_oblic" returns noop for request 4 rlm_realm: No '@' in User-Name = "anonymous", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix_at" returns noop for request 4 rlm_realm: No '@' in User-Name = "anonymous", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "prefix_at" returns noop for request 4 rlm_realm: No '%' in User-Name = "anonymous", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix_percent" returns noop for request 4 rlm_realm: No '%' in User-Name = "anonymous", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "prefix_percent" returns noop for request 4 users: Matched entry anonymous at line 2 modcall[authorize]: module "files" returns ok for request 4 rlm_eap: EAP packet type response id 5 length 79 rlm_eap: No EAP Start, astestuserng it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 4 modcall: leaving group authorize (returns updated) for request 4 rad_check_password: Found Auth-Type EAP rad_check_password: Found Auth-Type EAP Warning: Found 2 auth-types on request for user 'anonymous' auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 4 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 eaptls_process returned 7 rlm_eap_ttls: Session established. Proceeding to decode tunneled attributes. Processing the authorize section of radiusd.conf modcall: entering group authorize for request 4 modcall[authorize]: module "preprocess" returns ok for request 4 modcall[authorize]: module "chap" returns noop for request 4 modcall[authorize]: module "mschap" returns noop for request 4 rlm_realm: No '/' in User-Name = "testuser(a)domain.com", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix_oblic" returns noop for request 4 rlm_realm: No '/' in User-Name = "testuser(a)domain.com", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "prefix_oblic" returns noop for request 4 rlm_realm: Looking up realm "domain.com" for User-Name = " testuser(a)domain.com" rlm_realm: Found realm "domain.com" rlm_realm: Proxying request from user testuser to realm domain.com rlm_realm: Adding Realm = "domain.com" rlm_realm: Preparing to proxy authentication request to realm " domain.com" modcall[authorize]: module "suffix_at" returns updated for request 4 rlm_realm: Request already proxied. Ignoring. modcall[authorize]: module "prefix_at" returns noop for request 4 rlm_realm: Request already proxied. Ignoring. modcall[authorize]: module "suffix_percent" returns noop for request 4 rlm_realm: Request already proxied. Ignoring. modcall[authorize]: module "prefix_percent" returns noop for request 4 radius_xlat: 'group2' rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'o=domain,c=india' radius_xlat: '(uid=testuser(a)domain.com)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to 1.1.1.3:389, authentication 0 rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to 1.1.1.3:389 rlm_ldap: cn=Manager,o=domain,c=India bind to 1.1.1.3:389 failed: Can't contact LDAP server rlm_ldap: (re)connection attempt failed rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 radius_xlat: '1234' rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'o=domain,c=india' radius_xlat: '(uid=testuser(a)domain.com)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to 1.1.1.3:389, authentication 0 rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to 1.1.1.3:389 rlm_ldap: cn=Manager,o=domain,c=India bind to 1.1.1.3:389 failed: Can't contact LDAP server rlm_ldap: (re)connection attempt failed rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 radius_xlat: '1111' rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'o=domain,c=india' radius_xlat: '(uid=testuser(a)domain.com)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to 1.1.1.3:389, authentication 0 rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to 1.1.1.3:389 rlm_ldap: cn=Manager,o=domain,c=India bind to 1.1.1.3:389 failed: Can't contact LDAP server rlm_ldap: (re)connection attempt failed rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 radius_xlat: '111' rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'o=domain,c=india' radius_xlat: '(uid=testuser(a)domain.com)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to 1.1.1.3:389, authentication 0 rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to 1.1.1.3:389 rlm_ldap: cn=Manager,o=domain,c=India bind to 1.1.1.3:389 failed: Can't contact LDAP server rlm_ldap: (re)connection attempt failed rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 radius_xlat: 'group1' rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'o=domain,c=india' radius_xlat: '(uid=testuser(a)domain.com)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to 1.1.1.3:389, authentication 0 rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to 1.1.1.3:389 rlm_ldap: cn=Manager,o=domain,c=India bind to 1.1.1.3:389 failed: Can't contact LDAP server rlm_ldap: (re)connection attempt failed rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 radius_xlat: 'group2' rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'o=domain,c=india' radius_xlat: '(uid=testuser(a)domain.com)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to 1.1.1.3:389, authentication 0 rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to 1.1.1.3:389 rlm_ldap: cn=Manager,o=domain,c=India bind to 1.1.1.3:389 failed: Can't contact LDAP server rlm_ldap: (re)connection attempt failed rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 radius_xlat: '1234' rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'o=domain,c=india' radius_xlat: '(uid=testuser(a)domain.com)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to 1.1.1.3:389, authentication 0 rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to 1.1.1.3:389 rlm_ldap: cn=Manager,o=domain,c=India bind to 1.1.1.3:389 failed: Can't contact LDAP server rlm_ldap: (re)connection attempt failed rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 users: Matched entry DEFAULT at line 40 modcall[authorize]: module "files" returns ok for request 4 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 4 modcall: leaving group authorize (returns updated) for request 4 TTLS: Tunneled authentication will be proxied to domain.com Tunneled session will be proxied. Not doing EAP. modcall[authenticate]: module "eap" returns handled for request 4 modcall: leaving group authenticate (returns handled) for request 4 Sending Access-Request of id 0 to 1.1.1.1 port 1812 User-Name = "testuser(a)domain.com" User-Password = "domain" Called-Station-Id = "00-A0-F8-BF-E9-BC:ssid1" Calling-Station-Id = "00-0F-3D-E9-A6-54" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 127.0.0.1 NAS-Identifier = "switch" VSA-1 = "ssid1" ASA-2 = "1" NAS-Port-Id = "WLAN1" Connect-Info = "CONNECT 54Mbps 802.11a" Proxy-State = 0x38 Waking up in 6 seconds... rad_recv: Access-Request packet from host 127.0.0.1:30504, id=8, length=295 Dropping conflicting packet from client wios:30504 - ID: 8 due to unfinished request 4 --- Walking the entire request list --- Cleaning up request 0 ID 4 with timestamp 44ce1508 Cleaning up request 1 ID 5 with timestamp 44ce1508 Cleaning up request 2 ID 6 with timestamp 44ce1508 Cleaning up request 3 ID 7 with timestamp 44ce1508 Re-sending Access-Request of id 0 to 1.1.1.1 port 1812 User-Name = "testuser(a)domain.com" User-Password = "domain" Called-Station-Id = "00-A0-F8-BF-E9-BC:ssid1" Calling-Station-Id = "00-0F-3D-E9-A6-54" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 127.0.0.1 NAS-Identifier = "switch" VSA-1 = "ssid1" ASA-2 = "1" NAS-Port-Id = "WLAN1" Connect-Info = "CONNECT 54Mbps 802.11a" Client-IP-Address = 127.0.0.1 Realm = "domain.com" Proxy-State = 0x38 Waking up in 5 seconds... rad_recv: Access-Accept packet from host 1.1.1.1:1812, id=0, length=67 Reply-Message = " Hi testuser(a)domain.com welcome " Proxy-State = 0x38 authorize: Skipping authorize in post-proxy stage rad_check_password: Found Auth-Type EAP rad_check_password: Found Auth-Type EAP rad_check_password: Found Auth-Type Warning: Found 3 auth-types on request for user 'anonymous' rad_check_password: Auth-Type = Accept, accepting the user radius_xlat: ' Hi testuser(a)domain.com welcome' Login OK: [anonymous] (from client wios port 1 cli 00-0F-3D-E9-A6-54) Sending Access-Accept of id 8 to 127.0.0.1 port 30504 Reply-Message = " Hi testuser(a)domain.com welcome" Finished request 4 Going to the next request Waking up in 5 seconds... rad_recv: Access-Accept packet from host 1.1.1.1:1812, id=0, length=67 Reply from home server 1.1.1.1:1812 - ID: 0 arrived too late for request 4. Try increasing 'retry_delay' or 'max_request_time' Waking up in 5 seconds... --- Walking the entire request list --- Waking up in 5 seconds.. Thanks for any help. On 7/22/06, Alan DeKok <aland(a)nitros9.org> wrote: > > "sumi thra" <sumi.techno(a)gmail.com> wrote: > > > Please find the configuration in the users file & proxy.conf file. > Please > > > let me know if i am missing or wrong configuration is done is achieve > my > > > objective. > > Can you explain why you posted the configuration files when I told > you the debug output was important? > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0

DynaLoader loading problem
by Rohaizam Abu Bakar 31 Jul '06

31 Jul '06

FreeBSD 4.11 FreeRADIUS 1.0.4 I've installed rlm_perl in 1.0.4 version since it's not by default installed.. and trying to add perl script to add attribute during authorization and while restart:- NOTE: newtimeout2.pl - using original example.pl with added one sub routine line 30 as reported is line with "use Data::Dumper;" #################################################################### DynaLoader object version 1.04 does not match $DynaLoader::VERSION 1.03 at /usr/libdata/perl/5.00503/DynaLoader.pm line 80. BEGIN failed--compilation aborted at /usr/local/etc/raddb/newtimeout2.pl line 30. rlm_perl: perl_parse failed: /usr/local/etc/raddb/newtimeout2.pl not found or has syntax errors. radiusd.conf[1643]: myperl: Module instantiation failed. ################################################################# I've recently upgraded perl to 5.8.2 from 5.00503.... Freeradius been installed during old perl. But although I've recompiled again radius 1.0.4 with new perl environment.. Still received above error.. --haizam

2 1

close connection
by ego seek 31 Jul '06

31 Jul '06

hi. I'm a new user with freeradius. i'm using it to authenticate clients in a Wlan, it work great, but I need to disconnect a user that have finished his available broswing time.(i use a prepaid cards) how can i do? I saw in wiki.freeradius.org the radiusKick at ftp://ftp.nmo.net/pub/radkill/radkill-latest.tar.gz<ftp://ftp.nmo.net/pub/radkill/radkill-latest.tar.gz> but i cannot download it, and probably it is obsolete (written in 2000). can anybody help me? best regards.

1 0

freeradius configure line
by Roger Thomas 31 Jul '06

31 Jul '06

Despite several attempts, configure failed to locate my LDAP installation. I installed openLDAP in a non standard location: /etc/ldap.2.2.13 . I have tried freeradius configure like these: a) (includes and libraries) ./configure --with-ldap-includes=/etc/ldap.2.2.13/include --with-ldap-libraries=/etc/ldap.2.2.13/lib b) (include and lib) ./configure --with-ldap-include=/etc/ldap.2.2.13/include --with-ldap-lib=/etc/ldap.2.2.13/lib c) (DASH between rlm and ldap) ./configure --with-modules="rlm-ldap" --with-rlm-ldap-include-dir=/etc/ldap.2.2.13/include --with-rlm-ldap-lib-dir=/etc/ldap.2.2.13/lib d) (UNDERSCORE between rlm and ldap) ./configure --with-modules="rlm_ldap" --with-rlm_ldap-include-dir=/etc/ldap.2.2.13/include --with-rlm_ldap-lib-dir=/etc/ldap.2.2.13/lib and at aech attempt, I will get these warning messages: configure: warning: silently not building rlm_ldap. configure: warning: FAILURE: rlm_ldap requires: libldap_r. I don't think it is a question whether I have installed LDAP correctly BECAUSE if I were to install LDAP libs and headers in /usr/local/lib and /usr/local/include, then freeradius would not complain and everthing compiled smoothly. That said, there could be something that I have missed and I am sure someone has done this before. Please advise. -- Roger --------------------------------------------------- Sign Up for free Email at http://ureg.home.net.my/ ---------------------------------------------------

2 1

MySQL: Checking Attributes for multiple values
by Andreas Liebe 30 Jul '06

30 Jul '06

I try to set up a FreeRadius where any user can be a member of one or more groups. The groups should check which service the user is using. Access should be granted if one of the groups has a match. I used the docs at http://wiki.freeradius.org/index.php/Rlm_sql. The 2 groups in this example should check if the request is coming from concentrator A resp. B. If a user is member of both groups access should be granted if he's either using A or B, but only access through A is permitted. If a user is only member of group A or B then everything is fine. As it turns out the check for IP A is a match for the radius server and thus access is denied because the IP in the request is B. But according to the docs "==" should only match if both attribute and value matches. I would expect the first the not to be a match and to try the 2nd test next. When I change the Attribute in the 1st test from NAS-IP-Address to an attribute not in the request the access from IP B is granted. Probably I misunderstood the checking algorithm. Can you give me a hint how to configure this correctly? I tested with FreeRadius 1.1.2 and a pre 1.0. Thanks, -Andreas radcheck: | id | UserName | Attribute | op | Value | +------+-------------------------+-----------------+----+---------+ | 1 | joe | Password | == | blah | radreply: | id | UserName | Attribute | op | Value | +----+-----------------+--------------+----+-------+ | 1 | joe | Fall-Through | = | Yes | usergroup: | id | UserName | GroupName | +----+---------------------------+-----------+ | 1 | joe | My01group | | 2 | joe | My02group | radgroupcheck: | id | GroupName | Attribute | op | Value | +----+------------+----------------+----+-----------------+ | 1 | My01group | NAS-IP-Address | == | 10.11.12.13 | | 2 | My02group | NAS-IP-Address | == | 10.11.12.14 |

1 0

Distro with FreeRadius 1.1
by Graham Beneke 30 Jul '06

30 Jul '06

Hi All I'm trying to setup a FreeRadius 1.1.x - MySQL - phpMyPrepaid system. I'm looking for a distro that can get me there with the least path of resistance... I've currently got a dedicated box running FC4 and FreeRadius 0.9.x and I've been fumbling around for 2 weeks now and not getting anywhere. I found an RPM for ver 1.1.x and tried to install it but the system was unable to resolve a whole stack of dependencies. Tried to install from source and I got attacked by pages and pages of warnings and errors that i don't have a clue how to resolve... Thanks -- Graham Beneke Apolix Internet Services E-Mail: graham(a)apolix.co.za <mailto:graham@apolix.co.za> WEB: www.apolix.co.za <http://www.apolix.co.za/> Cell: 082-432-1873 <skype:+27824321873?call> Skype: grbeneke <skype:grbeneke?call>

4 4

mikrotik MSCHAPv2 MPPE pppoe
by Igor Smitran 29 Jul '06

29 Jul '06

I am trying to make mikrotik and freeradius work together. However, i can't make it work with pppoe MSCHAPv2 and MPPE. I only succeeded to make it work with PAP. I also tried to set freeradius in every combination that crossed my mind (use mppe, mppe strong, mschapv2, eap-peap....). Mikrotik sends access requests to freeradius but freeradius returns "<No User-Password Attribute> from client...". Maybe this isn't realy a question for freeradius list but can anybody help me? Thank you P.S. If admins feel that this doesn't belong to freeradius list they can delete this message.

2 2

authorize with files + ldap problem
by Wipat Srutiprom 29 Jul '06

29 Jul '06

On freeradius-1.0.4-1.FC4.1 come with fedora core 4. I want to authorize either UNIX user (/etc/passwd/) or LDAP user. /etc/raddb/users file is: DEFAULT Auth-Type = System Fall-Through = 1 I success with both LDAP user and UNIX user with /etc/raddb/radiusd.conf is: authorize { ldap files } Then I change the order in /etc/raddb/radiusd.conf to: authorize { files ldap } only UNIX user is be accept, but LDAP user is be reject. My sample radtest: radtest myuser mypassword localhost 0 testing123 My sample radius-x output: rad_recv: Access-Request packet from host 127.0.0.1:32775, id=165, length=56 User-Name = "myuser" User-Password = "mypassword" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for demo rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory... rlm_ldap: user demo authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 rad_recv: Access-Request packet from host 127.0.0.1:32775, id=165, length=56 Sending Access-Reject of id 165 to 127.0.0.1:32775 I wondor that after files modules failed, why not try LDAP modules? Do I need more config? Thanks for all help. --Wipat ----------------------------------------- This email was sent using SquirrelMail. https://front.psu.ac.th/ -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

Problems on FC4
by Vida Luz Arista 28 Jul '06

28 Jul '06

Hi All I have installed rpm freeradius-1.0.4-1.FC4.1 on Fedora core 4, however I have the following problems, whe I use radtest for test my server radtest kiko "kako99" localhost 1812 testing123 Sending Access-Request of id 215 to 127.0.0.1:1812 User-Name = "vlal" User-Password = "vita99" NAS-IP-Address = smtp.cablenet.com.ni NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=215, length=20 All my user are of my system (/etc/passwd and /etc/shadow), I need to enable radius for dialuo users. I am testing the radius server with [root@mailproxy3 raddb]# radiusd -X -A Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/proxy.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/snmp.conf Config: including file: /etc/raddb/sql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/radius" main: libdir = "/usr/lib" main: radacctdir = "/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/radiusd/radiusd.pid" main: user = "radiusd" main: group = "radiusd" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib Module: Loaded System unix: cache = no unix: passwd = "/etc/passwd" unix: shadow = "(null)" unix: group = "/etc/group" unix: radwtmp = "/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded preprocess preprocess: huntgroups = "/etc/raddb/huntgroups" preprocess: hints = "/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/etc/raddb/users" files: acctusersfile = "/etc/raddb/acct_users" files: preproxy_usersfile = "/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded detail detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Listening on proxy *:1814 Ready to process requests. I need you suggestions. Regards.

1 0