Le mercredi 29 octobre 2008 10:54, tnt@kalik.net a écrit :
Try radtest from remote to the radius server. Does that have secret issues? If it doesn't hostapd is broken. If it does - OS (crypto libraries) on one of the PCs is broken.
Hi, I have started a kubuntu Live CD to test. $ radtest bea herscret 10.1.1.254 1812 verysecret Sending Access-Request of id 115 to 10.1.1.254 port 1812 User-Name = "bea" User-Password = "herscret" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 rad_recv: Access-Accept packet from host 10.1.1.254:1812, id=115, length=86 NAS-Identifier = "debian-nas" NAS-Port = 0 Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 NAS-IP-Address = 10.3.1.1 Framed-Routing = None Framed-IP-Netmask = 255.255.255.0 Framed-IP-Address = 10.3.1.253 Framed-Protocol = PPP Service-Type = Framed-User And I tested : echo "User-Name=lolo,Password=secret,Framed-Protocol=PPP,Acct-Session-Id=48F7C09B-00000021,Acct-Status-Type=Start,Calling-Station-Id=00-1A-70-AE-D4-53" | radclient 10.1.1.254:1813 acct verysecret And in radiusd -X : [sql_log] Processing sql_log_accounting [sql_log] expand: %{User-Name} -> lolo [sql_log] expand: %{%{User-Name}:-DEFAULT} -> lolo [sql_log] sql_set_user escaped user --> 'lolo' [sql_log] expand: INSERT INTO radacct (AcctSessionId, UserName, NASIPAddress, FramedIPAddress, AcctStartTime, AcctStopTime, AcctSessionTime, AcctTerminateCause) VALUES ('%{Acct-Session-Id}', '%{User-Name}', '%{NAS-IP-Address}', '%{Framed-IP-Address}', '%S', '0', '0', ''); -> INSERT INTO radacct (AcctSessionId, UserName, NASIPAddress, FramedIPAddress, AcctStartTime, AcctStopTime, AcctSessionTime, AcctTerminateCause) VALUES ('48F7C09B-00000021', 'lolo', '10.1.1.254', '', '2008-10-29 17:13:48', '0', '0', ''); [sql_log] expand: /usr/var/log/radius/radacct/sql-relay -> /usr/var/log/radius/radacct/sql-relay ++[sql_log] returns ok [attr_filter.accounting_response] expand: %{User-Name} -> lolo attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 142 to 10.1.1.254 port 32920 Finished request 32. All seam work ! And in radacct there's an entry of it ! It could be just a problem between hostap and radius ?