On 7/31/06, Phil Mayers <p.mayers@imperial.ac.uk> wrote:
The logs you have given are NOT debugging output.
root@barbaculo:/usr/local/etc/raddb# radiusd -X -A & [1] 16321 Starting - reading configuration files ... ....... Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:1039, id=0, length=216 User-Name = "arccas" CHAP-Challenge = 0xf606250a5f23241fb1b9d9109af1a082 CHAP-Password = 0x00c66b772cfa0368bcf45f5e2945903846 NAS-IP-Address = 0.0.0.0 Service-Type = Login-User Framed-IP-Address = 192.168.182.3 Calling-Station-Id = "00-02-D7-BF-A0-98" Called-Station-Id = "00-50-BF-E3-E8-2A" NAS-Identifier = "nas01" Acct-Session-Id = "44ce1d9300000001" NAS-Port-Type = Wireless-802.11 NAS-Port = 1 Message-Authenticator = 0x4e30008639aaaa133c8110c2088e9d90 WISPr-Logoff-URL = "http://192.168.182.1:3990/logoff" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for arccas radius_xlat: '(uid=arccas)' radius_xlat: 'ou=statistica,dc=xxx,dc=it' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to localhost:389, authentication 0 rlm_ldap: bind as cn=Manager,dc=xxx,dc=it/PASSWORD to localhost:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: performing search in ou=statistica,dc=xxx,dc=it, with filter (uid=arccas) rlm_ldap: checking if remote access for arccas is allowed by userPassword rlm_ldap: Added password a in check items rlm_ldap: looking for check items in directory... rlm_ldap: Adding radiusGroupName as Ldap-Group, value student & op=21 rlm_ldap: Adding radiusCallingStationId as Calling-Station-Id, value 00-02-D7-BF-A0-98 & op=21 rlm_ldap: Adding userPassword as User-Password, value a & op=21 rlm_ldap: looking for reply items in directory... rlm_ldap: user arccas authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns ok for request 0 rlm_checkval: Item Name: Calling-Station-Id, Value: 00-02-D7-BF-A0-98 rlm_checkval: Value Name: Calling-Station-Id, Value: 00-02-D7-BF-A0-98 modcall[authorize]: module "checkval" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type CHAP auth: type "CHAP" Processing the authenticate section of radiusd.conf modcall: entering group CHAP for request 0 rlm_chap: login attempt by "arccas" with CHAP password rlm_chap: Using clear text password a for user arccas authentication. rlm_chap: chap user arccas authenticated succesfully modcall[authenticate]: module "chap" returns ok for request 0 modcall: leaving group CHAP (returns ok) for request 0 Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 0 rlm_ippool: Could not find Pool-Name attribute. modcall[post-auth]: module "studenti" returns noop for request 0 modcall: leaving group post-auth (returns noop) for request 0 Sending Access-Accept of id 0 to 127.0.0.1 port 1039 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Accounting-Request packet from host 127.0.0.1:1037, id=0, length=131 Acct-Status-Type = Start User-Name = "arccas" Calling-Station-Id = "00-02-D7-BF-A0-98" Called-Station-Id = "00-50-BF-E3-E8-2A" NAS-Port-Type = Wireless-802.11 NAS-Port = 1 NAS-Port-Id = "00000001" NAS-IP-Address = 0.0.0.0 NAS-Identifier = "nas01" Framed-IP-Address = 192.168.182.3 Acct-Session-Id = "44ce1d9300000001" Processing the preacct section of radiusd.conf modcall: entering group preacct for request 1 modcall[preacct]: module "preprocess" returns noop for request 1 rlm_acct_unique: Hashing 'NAS-Port = 1,Client-IP-Address = 127.0.0.1,NAS-IP-Address = 0.0.0.0,Acct-Session-Id = "44ce1d9300000001",User-Name = "arccas"' rlm_acct_unique: Acct-Unique-Session-ID = "6b0287a8c4334b7b". modcall[preacct]: module "acct_unique" returns ok for request 1 rlm_realm: No '@' in User-Name = "arccas", looking up realm NULL rlm_realm: No such realm "NULL" modcall[preacct]: module "suffix" returns noop for request 1 modcall: leaving group preacct (returns ok) for request 1 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 1 rlm_ippool: This is not an Accounting-Stop. Return NOOP. modcall[accounting]: module "studenti" returns noop for request 1 radius_xlat: '/usr/local/var/log/radius/radacct/127.0.0.1/detail-20060731' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/127.0.0.1/detail-20060731 modcall[accounting]: module "detail" returns ok for request 1 modcall[accounting]: module "unix" returns ok for request 1 radius_xlat: '/usr/local/var/log/radius/radutmp' radius_xlat: 'arccas' modcall[accounting]: module "radutmp" returns ok for request 1 modcall: leaving group accounting (returns ok) for request 1 Sending Accounting-Response of id 0 to 127.0.0.1 port 1037 Finished request 1 What does your radiusd.conf look like? radius.conf ippool studenti { range-start = 192.168.182.129 range-stop = 192.168.182.254 netmask = 255.255.255.0 cache-size = 800 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex override = yes maximum-timeout = 0 } accounting { studenti ...... post-auth { studenti ...... ------------- users DEFAULT Auth-Type = LDAP Fall-Through = 1 DEFAULT Huntgroup-Name == "studenti", Ldap-Group == "student", Pool-Name:="studenti" DEFAULT Service-Type == Framed-User Framed-IP-Address = 255.255.255.254, Framed-MTU = 576, Service-Type = Framed-User, Fall-Through = Yes, WISPr-Bandwidth-Max-Up = 128000, WISPr-Bandwidth-Max-Down = 512000 DEFAULT Framed-Protocol == PPP Framed-Protocol = PPP, Framed-Compression = Van-Jacobson-TCP-IP DEFAULT Hint == "CSLIP" Framed-Protocol = SLIP, Framed-Compression = Van-Jacobson-TCP-IP DEFAULT Hint == "SLIP" Framed-Protocol = SLIP ------- Huntgroups studenti NAS-IP-Address == 192.168.182.1 -------- I'll repeat myself - you are NOT setting the Pool-Name attribute. Set
it, and it will work.
How i can set it? I really didn't understand this. Where I must set the Pool-Name attribute? In radius.conf. Really, thanks a lot for your patience. Giusy