I was using 3.0.11. I have built 3.0.12 from scratch and tried that with more success. Ready to process requests (0) Received CoA-Request Id 134 from 127.0.0.1:43349 to 127.0.0.1:3799 length 56 (0) User-Name = "adrian" (0) Calling-Station-Id = "aa-bb-cc" (0) User-Password = "\210\317\357\267\025 \362\\\r\203VI\367W\315%" (0) # Executing section recv-coa from file /home/adrian/freeradius-server-3.0.12/etc/raddb/sites-enabled/coa (0) recv-coa { (0) [suffix] = noop (0) rest: ERROR: You set 'Auth-Type = REST' for a request that does not contain a User-Password attribute! (0) [rest.authenticate] = invalid (0) } # recv-coa = invalid (0) # Executing section send-coa from file /home/adrian/freeradius-server-3.0.12/etc/raddb/sites-enabled/coa (0) send-coa { (0) [ok] = ok (0) } # send-coa = ok (0) Sent CoA-NAK Id 134 from 127.0.0.1:3799 to 127.0.0.1:43349 length 0 (0) Finished request So this seems to raise a couple of issues for me. 1. I am sending a User-Password but FreeRadius thinks not? 2. In the real scenario, I probably wouldn't have a password at this point. I guess I can just send a dummy one? Assuming I can get #1 to work. Are there any plans to improve the REST module to handle CoA directly? Thanks again. Adrian -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+adrian.p.smith=bt.com@lists.freeradius.org] On Behalf Of Matthew Newton Sent: 20 December 2016 15:43 To: FreeRadius users mailing list Subject: Re: CoA -> REST On Tue, Dec 20, 2016 at 03:21:55PM +0000, adrian.p.smith@bt.com wrote:
I enabled that virtual server by linking it into sites-enabled.
I then added a single line:
rest.authenticate
in the "server coa" recv-coa section immediately before the "ok" line.
adding just "rest" stopped the server from starting.
I then send the server a CoA using radclient.
I see the server receiving it (as per the debug output below), but no mention of "rest.authenticate".
If I start from a completely clean 3.0.x install, and link coa into sites-enabled, and send it a coa packet with radclient, I get eceived CoA-Request Id 27 from 127.0.0.1:43031 to 127.0.0.1:3799 length 25 (0) User-Name = "test" (0) # Executing section recv-coa from file /opt/fr3/etc/raddb/sites-enabled/coa (0) recv-coa { (0) [suffix] = noop (0) [ok] = ok (0) } # recv-coa = ok (0) # Executing section send-coa from file /opt/fr3/etc/raddb/sites-enabled/coa (0) send-coa { (0) [ok] = ok (0) } # send-coa = ok (0) Sent CoA-ACK Id 27 from 127.0.0.1:3799 to 127.0.0.1:43031 length 0 (0) Finished request so... as Alan said: what is the *entire* debug output? All the debug lines right from and including the FreeRADIUS banner at the top actually matter, contrary to popular belief on this list :(. Or, compare to a completely clean install, see what the difference is, and work from there. Matthew
-----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+adrian.p.smith=bt.com@lists.freeradiu s.org] On Behalf Of Alan DeKok Sent: 20 December 2016 15:02 To: FreeRadius users mailing list Subject: Re: CoA -> REST
On Dec 20, 2016, at 5:40 AM, adrian.p.smith@bt.com wrote:
Thanks for the tip. I tried this and the server does now start up.
When I send it a CoA however, I see no sign of the REST module being called:
(0) Received CoA-Request Id 217 from 127.0.0.1:45490 to 127.0.0.1:3799 length 38 (0) User-Name = "adrian" (0) Calling-Station-Id = "aa-bb-cc" (0) Sent CoA-ACK Id 217 from 127.0.0.1:3799 to 127.0.0.1:45490 length 0 (0) Finished request
Anything else I've missed?
Read the *entire* debug log.
FreeRADIUS doesn't magically ignore virtual servers. If it's not using a virtual server, it's because of a local configuration issue.
The default CoA server in raddb/sites-available/coa works when it's enabled.
So... what did you do?
Alan DeKok.
-- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html