Thanks for all, I installed freeradius 2.1.6 and it seems that eap works correctly, Thanks! 2009/7/28 Rokkhan <rokkhan@gmail.com>:
Ok, I'll try to update 2.1.6. I have not found newer rpm packages than i installed in my server on freeradius.org, because when I go to the download section and I select Binary packages for Suse, it sends me to the page where i took from packages the first time (http://download.opensuse.org/repositories/network:/aaa/) and there is no newer version than 2.1.1-6 But i will ask some help from my friends and I'll try to install from the tar.gz.
By the way, now sometimes i get this error (Error: rlm_eap: No EAP session matching the State variable) from the server that maybe could be related.
rad_recv: Access-Request packet from host 193.4.42.201 port 1645, id=241, length=403 User-Name = "36005405865132200096315165226168360027502200066623658TDP00290005" Framed-MTU = 1400 Called-Station-Id = "001e.7aa8.e7a0" Calling-Station-Id = "000b.6b1f.5ac4" Service-Type = Login-User Message-Authenticator = 0x0f1edc0510387abdb71af318e243543b EAP-Message = 0x020500cc1900160301008610000082008043d5b97a98332e4f8370833ee0b6e9e528c305d999e378ab3ec157582089354df3f49c859da9b21592bf7861fa0c9976e33f25265f6fd4616e06450da6462a4ca59d5e2f225f0b7fffa5302d6c5cc1a1b389745992b881e4a4eb8e468c9750a532f108984aabac56b5148a669cc5d6c4fde9d80b909dc96438b651c55d71e0ef14030100010116030100300df0a239eafc874ff2eaaba0be58c0e9f9e9bcf69fbce7673e4104fb16e476279efc864fdbde012e197579c033e2ccf5 NAS-Port-Type = Wireless-802.11 NAS-Port = 55874 State = 0xa65781dda5529866f068234f09c4ea04 NAS-IP-Address = 193.4.42.201 NAS-Identifier = "sar00290001" Tue Jul 28 12:54:26 2009 : Info: +- entering group authorize {...} Tue Jul 28 12:54:26 2009 : Info: ++[preprocess] returns ok Tue Jul 28 12:54:26 2009 : Info: [eap] EAP packet type response id 5 length 204 Tue Jul 28 12:54:26 2009 : Info: [eap] Continuing tunnel setup. Tue Jul 28 12:54:26 2009 : Info: ++[eap] returns ok Tue Jul 28 12:54:26 2009 : Info: Found Auth-Type = EAP Tue Jul 28 12:54:26 2009 : Info: +- entering group authenticate {...} Tue Jul 28 12:54:26 2009 : Error: rlm_eap: No EAP session matching the State variable. Tue Jul 28 12:54:26 2009 : Info: [eap] Either EAP-request timed out OR EAP-response to an unknown EAP-request Tue Jul 28 12:54:26 2009 : Info: [eap] Failed in handler Tue Jul 28 12:54:26 2009 : Info: ++[eap] returns invalid Tue Jul 28 12:54:26 2009 : Info: Failed to authenticate the user. Tue Jul 28 12:54:26 2009 : Auth: Login incorrect: [36005405865132200096315165226168360027502200066623658TDP00290005/<via Auth-Type = EAP>] (from client wifiap_sanjuan port 55874 cli 000b.6b1f.5ac4) Tue Jul 28 12:54:26 2009 : Info: Using Post-Auth-Type Reject Tue Jul 28 12:54:26 2009 : Info: +- entering group REJECT {...} Tue Jul 28 12:54:26 2009 : Info: [attr_filter.access_reject] expand: %{User-Name} -> 36005405865132200096315165226168360027502200066623658TDP00290005 Tue Jul 28 12:54:26 2009 : Debug: attr_filter: Matched entry DEFAULT at line 11 Tue Jul 28 12:54:26 2009 : Info: ++[attr_filter.access_reject] returns updated Tue Jul 28 12:54:26 2009 : Info: [sql] expand: %{User-Name} -> 36005405865132200096315165226168360027502200066623658TDP00290005 Tue Jul 28 12:54:26 2009 : Info: [sql] sql_set_user escaped user --> '36005405865132200096315165226168360027502200066623658TDP00290005' Tue Jul 28 12:54:26 2009 : Info: [sql] expand: %{User-Password} -> Tue Jul 28 12:54:26 2009 : Info: [sql] expand: %{Chap-Password} -> Tue Jul 28 12:54:26 2009 : Info: [sql] expand: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') -> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '36005405865132200096315165226168360027502200066623658TDP00290005', '', 'Access-Reject', '2009-07-28 12:54:26') Tue Jul 28 12:54:26 2009 : Debug: rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '36005405865132200096315165226168360027502200066623658TDP00290005', '', 'Access-Reject', '2009-07-28 12:54:26') Tue Jul 28 12:54:26 2009 : Debug: rlm_sql (sql): Reserving sql socket id: 11 Tue Jul 28 12:54:26 2009 : Debug: rlm_sql (sql): Released sql socket id: 11 Tue Jul 28 12:54:26 2009 : Info: ++[sql] returns ok Tue Jul 28 12:54:26 2009 : Info: Delaying reject of request 2 for 1 seconds Tue Jul 28 12:54:26 2009 : Debug: Going to the next request Tue Jul 28 12:54:26 2009 : Debug: Waking up in 0.9 seconds.
2009/7/28 Alan DeKok <aland@deployingradius.com>:
Rokkhan wrote:
I have a working Freedius 1.0.5 server since year 2005 and i want to improve it, migrating a Freeradius 2.1.1-6 version, the latest version i have found for my Sles10 Sp2 server.
See the freeradius.org web page. It has RPMs of the newer versions for suse.
When i run server on debug mode for doing tests the server works without problems, and validate's users using both types of EAP and both Authorization types (Ldap and Mysql). But when i run as daemon and i introduce it in production validating about 2000 of users, freeradius 2.1.1-6 crashes in a few minutes and shows this error "Error: rlm_eap: Failed to store handler".
That's a bad error. I haven't seen it in a while, so I would suggest upgrading to 2.1.6.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html