Hi Elizabeth, Thanks for the quick response. I tried #/usr/sbin/tcpdump -X host 127.0.0.1 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes (Nothing happening) #/usr/sbin/tcpdump -X svr1.marind.com 15:20:55.301070 IP 192.168.1.50.63188> svr1.marind.com.domain: 13870+ A? b.rad.live.com. (32)vr 0x0000: 4500 003c a1c1 0000 8011 1568 c0a8 0132 E.. svr1.marind.com.domain: 57001+ A? b.rad.live.com. (32) 0x0000: 4500 003c a1cb 0000 8011 155e c0a8 0132 E.. svr1.marind.com.domain: 28694+ A? gfx2.hotmail.com. (34) 0x0000: 4500 003e a1cc 0000 8011 155b c0a8 0132 E..>.......[...2 0x0010: c0a8 0105 d55b 0035 002a 1dc8 7016 0100 .....[.5.*..p... 0x0020: 0001 0000 0000 0000 0467 6678 3207 686f .........gfx2.ho 0x0030: 746d 6169 6c03 636f 6d00 0001 0001 tmail.com..... 15:21:05.556816 IP 192.168.1.50.51451> svr1.marind.com.domain: 57001+ A? b.rad.live.com. (32) 0x0000: 4500 003c a1cd 0000 8011 155c c0a8 0132 E.. svr1.marind.com.domain: 28694+ A? gfx2.hotmail.com. (34) 0x0000: 4500 003e a1ce 0000 8011 1559 c0a8 0132 E..>.......Y...2 0x0010: c0a8 0105 d55b 0035 002a 1dc8 7016 0100 .....[.5.*..p... 0x0020: 0001 0000 0000 0000 0467 6678 3207 686f .........gfx2.ho 0x0030: 746d 6169 6c03 636f 6d00 0001 0001 tmail.com..... .....etc # /usr/sbin/lsof -i |grep -i radius radiusd 3965 root 5u IPv4 10123 UDP 192.168.0.10:radius radiusd 3965 root 6u IPv4 10125 UDP 192.168.0.10:radius-acct radiusd 3965 root 7u IPv4 10126 UDP 192.168.0.10:1814 #telnet 127.0.0.1 Trying 127.0.0.1... telnet: connect to address 127.0.0.1: Connection refused telnet: Unable to connect to remote host: Connection refused # telnet localhost 25 Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. 220 svr1.marind.com ESMTP Sendmail 8.13.1/8.13.1; Tue, 21 Oct 2008 15:46:37 +0700 #netstat -tna Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:32769 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:783 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN tcp 0 0 192.168.1.5:53 0.0.0.0:* LISTEN tcp 0 0 192.168.0.10:53 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:3128 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:445 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:25 127.0.0.1:32848 TIME_WAIT tcp 0 0 :::993 :::* LISTEN tcp 0 0 :::995 :::* LISTEN tcp 0 0 :::110 :::* LISTEN tcp 0 0 :::143 :::* LISTEN tcp 0 0 :::80 :::* LISTEN tcp 0 0 :::22 :::* LISTEN tcp 0 0 :::443 :::* LISTEN Before I changed the freeradius setting from tls to peap..everything were fine.. I have mail server also and previously testing telnet localhost work fine. "rules file" do you mean iptables? ________________________________
Date: Sun, 19 Oct 2008 21:46:37 -0700 From: liz@twistedpair.cc To: freeradius-users@lists.freeradius.org Subject: Re: radius is not listening
a few more suggestions :)
What is in your rules file?
Can you telnet to localhost port 1812, how about 127.0.0.1 1812 (broken hosts file mebbe)
also try this
lsof -i |grep -i radius
you should see radius listening
Liz
On Sun, Oct 19, 2008 at 7:38 PM, saman saman <ssaman@hotmail.com> wrote:
HI Alan, what If radtest localhost also doesn't work either? here the iptables output #iptables -L -n Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- 127.0.0.1 0.0.0.0/0 ACCEPT all -- 192.168.1.2 0.0.0.0/0 ACCEPT all -- 192.168.0.10 0.0.0.0/0 ACCEPT all -- 192.168.0.0/24 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 192.168.1.0/24 ACCEPT all -- .0.0.0/0 192.168.1.2 state RELATED,ESTABLISHED svr1 tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 svr1 tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 srv1 tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 srv1 tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 svr1 tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:110 svr1 tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:1812 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:1813 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:1814 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:110 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:2074 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:4000 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 8 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 11 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 80
Chain FORWARD (policy DROP) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT all -- 127.0.0.1 0.0.0.0/0 ACCEPT all -- 192.168.0.10 0.0.0.0/0 ACCEPT all -- 192.168.1.2 0.0.0.0/0 ACCEPT all -- 192.168.1.206 0.0.0.0/0
Chain mars (6 references) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x16/0x02 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED DROP tcp -- 0.0.0.0/0 0.0.0.0/0
#radtest John hello localhost 0 testing User-Name = "John" User-Password = "hello" NAS-IP-Address = 192.168.1.2 NAS-Port = 0 User-Name = "John" User-Password = "hello" NAS-IP-Address = 192.168.1.2 NAS-Port = 0 User-Name = "John" User-Password = "hello" NAS-IP-Address = 192.168.1.2 NAS-Port = 0 User-Name = "John" User-Password = "hello" NAS-IP-Address = 192.168.1.2 NAS-Port = 0 User-Name = "John" User-Password = "hello" NAS-IP-Address = 192.168.1.2 NAS-Port = 0 User-Name = "John" User-Password = "hello" NAS-IP-Address = 192.168.1.2 NAS-Port = 0
The above iptables output shows the udp 1812, 1813 & 1814 are all accepted.
Hi I am a newbie and recently would like to try to experience freeradius-server-2.0.4 but unfortunately I have problems can't solved. The freeradius is running ok but when attempt to authenticate the server is just not responding to clients request. ... #radiusd -X ... Ready to process requests.
The point of debug mode is to show it processing packets.
If you've sent it packets and it doesn't receive them, fix the firewall on your OS to allow RADIUS packets.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________