Hello, My freeradius 3.0.16 is not inserting data into radact, and it complains on start with the following error, but the accounting section is in radiusd.conf as stated below. Can anybody give me a clue where can be the problem? accounting { # We leave "detail" enabled to _additionally_ log accounting to /var/lo$ detail sql } Error on freeradius Start: /etc/freeradius/3.0/radiusd.conf[784]: The accounting section should be inside of a 'server { ... }' block! thanks Best
On 2 July 2018 20:41:10 BST, John Martins <jm829580@gmail.com> wrote:
/etc/freeradius/3.0/radiusd.conf[784]: The accounting section should be inside of a 'server { ... }' block!
Put it in sites-enabled/default, not in radiusd.conf There's already an accounting{} section there... -- Matthew
Hello Matthew, Thanks for you answer. I commented it in radiusd.conf and I see I already have it in sites-enabled/default, but it is not inserting data in raddacct. Any idea? thanks )) On Mon, Jul 2, 2018 at 9:56 PM, Matthew Newton <mcn@freeradius.org> wrote:
On 2 July 2018 20:41:10 BST, John Martins <jm829580@gmail.com> wrote:
/etc/freeradius/3.0/radiusd.conf[784]: The accounting section should be inside of a 'server { ... }' block!
Put it in sites-enabled/default, not in radiusd.conf
There's already an accounting{} section there...
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
Post what your accounting section in sites-available/default looks like.
On Mon, Jul 2, 2018, 21:04 John Martins <jm829580@gmail.com> wrote:
> Hello Matthew,
>
> Thanks for you answer. I commented it in radiusd.conf and I see I already
> have it in sites-enabled/default, but it is not inserting data in raddacct.
> Any idea?
>
> thanks
>
> ))
>
> On Mon, Jul 2, 2018 at 9:56 PM, Matthew Newton <mcn@freeradius.org> wrote:
>
> > On 2 July 2018 20:41:10 BST, John Martins <jm829580@gmail.com> wrote:
> > >/etc/freeradius/3.0/radiusd.conf[784]: The accounting section should be
> > >inside of a 'server { ... }' block!
> >
> > Put it in sites-enabled/default, not in radiusd.conf
> >
> > There's already an accounting{} section there...
> >
> >
> > --
> > Matthew
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
On Mon, 2018-07-02 at 22:04 +0200, John Martins wrote:
Thanks for you answer. I commented it in radiusd.conf and I see I already have it in sites-enabled/default, but it is not inserting data in raddacct. Any idea?
You need to look at the debug output to find out what FreeRADIUS is doing. See http://wiki.freeradius.org/list-help which tells you how to do this and what to post here if you don't understand the output. Read the debug output carefully; it tells you everything the server is doing. Check it for when it calls "sql". My guess? Make sure it's actually receiving accounting packets from your NAS... -- Matthew
Hello, Below the info. required. accounting { # Update accounting packet by adding the CUI attribute # recorded from the corresponding Access-Accept # use it only if your NAS boxes do not support CUI themselves # cui # # Create a 'detail'ed log of the packets. # Note that accounting requests which are proxied # are also logged in the detail file. detail # daily # Update the wtmp file # # If you don't use "radlast", you can delete this line. unix # # For Simultaneous-Use tracking. # # # Due to packet losses in the network, the data here # may be incorrect. There is little we can do about it. # radutmp # sradutmp # Return an address to the IP Pool when we see a stop record. # main_pool # # Log traffic to an SQL database. # # See "Accounting queries" in mods-available/sql sql # # If you receive stop packets with zero session length, # they will NOT be logged in the database. The SQL module # will print a message (only in debugging mode), and will # return "noop". # # You can ignore these packets by uncommenting the following # three lines. Otherwise, the server will not respond to the # accounting request, and the NAS will retransmit. # # if (noop) { # ok # } # Cisco VoIP specific bulk accounting # pgsql-voip # For Exec-Program and Exec-Program-Wait exec # Filter attributes from the accounting response. attr_filter.accounting_response # # See "Autz-Type Status-Server" for how this works. # # Acct-Type Status-Server { # # } } thanks) On Mon, Jul 2, 2018 at 9:41 PM, John Martins <jm829580@gmail.com> wrote:
Hello,
My freeradius 3.0.16 is not inserting data into radact, and it complains on start with the following error, but the accounting section is in radiusd.conf as stated below. Can anybody give me a clue where can be the problem?
accounting { # We leave "detail" enabled to _additionally_ log accounting to /var/lo$ detail sql }
Error on freeradius Start:
/etc/freeradius/3.0/radiusd.conf[784]: The accounting section should be inside of a 'server { ... }' block!
thanks
Best
On Jul 2, 2018, at 3:41 PM, John Martins <jm829580@gmail.com> wrote:
My freeradius 3.0.16 is not inserting data into radact, and it complains on start with the following error, but the accounting section is in radiusd.conf as stated below.
It's not supposed to be there.
Can anybody give me a clue where can be the problem?
You edited the default configuration, and broke it. Don't do that. Instead, follow the documentation. That says to start with the default configuration, and then to make small changes. In the default configuration, the "accounting" section is in sites-enabled/default. Edit it there. The comments at the bottom of "radiusd.conf" make this clear. If you're going to edit the configuration files, then you should *read* them.
accounting { # We leave "detail" enabled to _additionally_ log accounting to /var/lo$ detail sql }
Error on freeradius Start:
/etc/freeradius/3.0/radiusd.conf[784]: The accounting section should be inside of a 'server { ... }' block!
That seems pretty clear. Alan DeKok.
Hello Based on the last mail I send the info requested in https://wiki.freeradius.org/guide/Users-Mailing-List. - What you are trying to do: I'm trying to setup radius in order that it inserts data in radacct. - why you are trying to do it: because it does not insert data despite it authenticates the users properly. - what you expect the server to do: to insert data in radacct table. - what the server does instead (i.e. debug output). Debug Output: Ready to process requests (0) Received Access-Request Id 184 from 127.0.0.1:43810 to 127.0.0.1:1812 length 74 (0) User-Name = "test" (0) User-Password = "test" (0) NAS-IP-Address = 55.125.226.126 (0) NAS-Port = 0 (0) Message-Authenticator = 0x33c611c890fed552ae68589a573404eb (0) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/default (0) authorize { (0) [preprocess] = ok (0) [chap] = noop (0) [mschap] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "test", looking up realm NULL (0) suffix: No such realm "NULL" (0) [suffix] = noop (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) [files] = noop (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' rlm_sql (sql): Reserved connection (1) (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '% {SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 't est' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WH ERE username = 'test' ORDER BY id (0) sql: User found in radcheck table (0) sql: Conditional check items matched, merging assignment check items (0) sql: Cleartext-Password := "test" (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radreply WHERE username = '% {SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radreply WHERE username = 't est' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radreply WH ERE username = 'test' ORDER BY id (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDE R BY priority (0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priorit y (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority (0) sql: User not found in any groups rlm_sql (sql): Released connection (1) Need 4 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.7.22-0ubuntu0.17.10.1-log, protocol version 10 (0) [sql] = ok (0) [expiration] = noop (0) [logintime] = noop (0) [pap] = updated (0) } # authorize = updated (0) Found Auth-Type = PAP (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) Auth-Type PAP { (0) pap: Login attempt with password (0) pap: Comparing with "known good" Cleartext-Password (0) pap: User authenticated successfully (0) [pap] = ok (0) } # Auth-Type PAP = ok (0) # Executing section post-auth from file /etc/freeradius/3.0/sites-enabled/default (0) post-auth { (0) update { (0) No attributes updated (0) } # update = noop (0) sql: EXPAND .query (0) sql: --> .query (0) sql: Using query template 'query' rlm_sql (sql): Reserved connection (2) (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-U ser-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', 'test', 'Access-Accept', '2018-07-03 01:15:11') (0) sql: EXPAND /var/log/freeradius/sqllog.sql (0) sql: --> /var/log/freeradius/sqllog.sql (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', 'test', 'Access-Accept', '2018-07-03 01:15:11') (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (2) (0) [sql] = ok (0) [exec] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # post-auth = ok (0) Login OK: [test/test] (from client localhost port 0) (0) Sent Access-Accept Id 184 from 127.0.0.1:1812 to 127.0.0.1:43810 length 0 (0) Finished request Waking up in 4.9 seconds. (0) Cleaning up request packet ID 184 with timestamp +8 Ready to process requests On Tue, Jul 3, 2018 at 1:03 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 2, 2018, at 3:41 PM, John Martins <jm829580@gmail.com> wrote:
My freeradius 3.0.16 is not inserting data into radact, and it complains
on
start with the following error, but the accounting section is in radiusd.conf as stated below.
It's not supposed to be there.
Can anybody give me a clue where can be the problem?
You edited the default configuration, and broke it. Don't do that.
Instead, follow the documentation. That says to start with the default configuration, and then to make small changes.
In the default configuration, the "accounting" section is in sites-enabled/default. Edit it there.
The comments at the bottom of "radiusd.conf" make this clear.
If you're going to edit the configuration files, then you should *read* them.
accounting { # We leave "detail" enabled to _additionally_ log accounting to /var/lo$ detail sql }
Error on freeradius Start:
/etc/freeradius/3.0/radiusd.conf[784]: The accounting section should be inside of a 'server { ... }' block!
That seems pretty clear.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
On Jul 2, 2018, at 7:28 PM, John Martins <jm829580@gmail.com> wrote:
- What you are trying to do: I'm trying to setup radius in order that it inserts data in radacct.
a) configure the "sql" module b) have the NAS send the server accounting packets.
- why you are trying to do it: because it does not insert data despite it authenticates the users properly.
authentication != accounting
- what you expect the server to do: to insert data in radacct table.
It only does that when it receives accounting packets.
- what the server does instead (i.e. debug output).
Which shows no accounting packets. And therefore, nothing to be inserted into "radacct". The server can't magically invent accounting data. The NAS *MUST* send accounting data to the server. Alan DeKok.
Hello, The module sql is configured as per wiki, I suppose it's correct. How can I know if it is properly configured? have the NAS send the server accounting packets. the NAS is sending packets, plus I test it also from terminal with radtest. Can you tell me what do you mean when you say that the NAS is not sending packets? the NAS is my router, right? it is sending them. thanks On Tue, Jul 3, 2018 at 1:41 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 2, 2018, at 7:28 PM, John Martins <jm829580@gmail.com> wrote:
- What you are trying to do: I'm trying to setup radius in order that it inserts data in radacct.
a) configure the "sql" module b) have the NAS send the server accounting packets.
- why you are trying to do it: because it does not insert data despite it authenticates the users properly.
authentication != accounting
- what you expect the server to do: to insert data in radacct table.
It only does that when it receives accounting packets.
- what the server does instead (i.e. debug output).
Which shows no accounting packets. And therefore, nothing to be inserted into "radacct".
The server can't magically invent accounting data. The NAS *MUST* send accounting data to the server.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
On Jul 2, 2018, at 7:52 PM, John Martins <jm829580@gmail.com> wrote:
The module sql is configured as per wiki, I suppose it's correct. How can I know if it is properly configured?
If you read the debug output and it shows the SQL module running without errors.
have the NAS send the server accounting packets. the NAS is sending packets, plus I test it also from terminal with radtest. Can you tell me what do you mean when you say that the NAS is not sending packets? the NAS is my router, right? it is sending them.
*ACCOUNTING* packets. Which, as I said, are not the same as authentication packets. If you're going to configure a RADIUS server, it helps to understand the basic terminology. Or if you don't understand the terminology I'm using, ask. Alan DeKok.
In my freeRADIUS installation from ubuntu repo accounting wasn't working because the acctupdate column was missing from the schema. So what I'd suggest would be to use radclient or NTRadPing and send accounting packets with freeRADIUS in debug mode and watch the output. On Tue, Jul 3, 2018, 01:40 Alan DeKok <aland@deployingradius.com> wrote:
On Jul 2, 2018, at 7:52 PM, John Martins <jm829580@gmail.com> wrote:
The module sql is configured as per wiki, I suppose it's correct. How
can I
know if it is properly configured?
If you read the debug output and it shows the SQL module running without errors.
have the NAS send the server accounting packets. the NAS is sending packets, plus I test it also from terminal with radtest. Can you tell me what do you mean when you say that the NAS is not sending packets? the NAS is my router, right? it is sending them.
*ACCOUNTING* packets. Which, as I said, are not the same as authentication packets.
If you're going to configure a RADIUS server, it helps to understand the basic terminology. Or if you don't understand the terminology I'm using, ask.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 3 July 2018 07:03:28 BST, Uchenna Nebedum <nebeduch@gmail.com> wrote:
So what I'd suggest would be to use radclient or NTRadPing and send accounting packets with freeRADIUS in debug mode and watch the output.
The debug output will show if the accounting packets are arriving from the NAS. Nothing else really matters. If they aren't, something else needs fixing, not FreeRADIUS. -- Matthew
Never said freeRADIUS needed fixing. On Tue, Jul 3, 2018, 07:17 Matthew Newton <mcn@freeradius.org> wrote:
On 3 July 2018 07:03:28 BST, Uchenna Nebedum <nebeduch@gmail.com> wrote:
So what I'd suggest would be to use radclient or NTRadPing and send accounting packets with freeRADIUS in debug mode and watch the output.
The debug output will show if the accounting packets are arriving from the NAS. Nothing else really matters. If they aren't, something else needs fixing, not FreeRADIUS.
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Uchenna, I'll do so and give you feedback, thanks! On Tue, Jul 3, 2018 at 8:03 AM, Uchenna Nebedum <nebeduch@gmail.com> wrote: > In my freeRADIUS installation from ubuntu repo accounting wasn't working > because the acctupdate column was missing from the schema. So what I'd > suggest would be to use radclient or NTRadPing and send accounting packets > with freeRADIUS in debug mode and watch the output. > > On Tue, Jul 3, 2018, 01:40 Alan DeKok <aland@deployingradius.com> wrote: > > > On Jul 2, 2018, at 7:52 PM, John Martins <jm829580@gmail.com> wrote: > > > > > > The module sql is configured as per wiki, I suppose it's correct. How > > can I > > > know if it is properly configured? > > > > If you read the debug output and it shows the SQL module running > without > > errors. > > > > > have the NAS send the server accounting packets. the NAS is sending > > > packets, plus I test it also from terminal with radtest. > > > Can you tell me what do you mean when you say that the NAS is not > sending > > > packets? the NAS is my router, right? it is sending them. > > > > *ACCOUNTING* packets. Which, as I said, are not the same as > > authentication packets. > > > > If you're going to configure a RADIUS server, it helps to understand > the > > basic terminology. Or if you don't understand the terminology I'm using, > > ask. > > > > Alan DeKok. > > > > > > - > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > list/users.html >
Hello Uchenna, Could you tell me in which table was this acctupdate column missing? When I send accounting packets from NTRadPing, I get the following error: Ready to process requests Receive - Invalid packet code 4 sent to authentication port from client global p ort 57825 Ready to process requests Receive - Invalid packet code 4 sent to authentication port from client global p ort 57825 Receive - Invalid packet code 4 sent to authentication port from client global p ort 57825 Ready to process requests Receive - Invalid packet code 4 sent to authentication port from client global p ort 57825 Ready to process requests Any clue? thanks On Tue, Jul 3, 2018 at 8:03 AM, Uchenna Nebedum <nebeduch@gmail.com> wrote: > In my freeRADIUS installation from ubuntu repo accounting wasn't working > because the acctupdate column was missing from the schema. So what I'd > suggest would be to use radclient or NTRadPing and send accounting packets > with freeRADIUS in debug mode and watch the output. > > On Tue, Jul 3, 2018, 01:40 Alan DeKok <aland@deployingradius.com> wrote: > > > On Jul 2, 2018, at 7:52 PM, John Martins <jm829580@gmail.com> wrote: > > > > > > The module sql is configured as per wiki, I suppose it's correct. How > > can I > > > know if it is properly configured? > > > > If you read the debug output and it shows the SQL module running > without > > errors. > > > > > have the NAS send the server accounting packets. the NAS is sending > > > packets, plus I test it also from terminal with radtest. > > > Can you tell me what do you mean when you say that the NAS is not > sending > > > packets? the NAS is my router, right? it is sending them. > > > > *ACCOUNTING* packets. Which, as I said, are not the same as > > authentication packets. > > > > If you're going to configure a RADIUS server, it helps to understand > the > > basic terminology. Or if you don't understand the terminology I'm using, > > ask. > > > > Alan DeKok. > > > > > > - > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > list/users.html >
Nah, that isn't a missing table error, check the type of accounting packet you're sending. Try Accounting start and remember to send to the right port, 1813 On Tue, Jul 3, 2018, 13:26 John Martins <jm829580@gmail.com> wrote: > Hello Uchenna, > > Could you tell me in which table was this acctupdate column missing? When > I send accounting packets from NTRadPing, I get the following error: > > Ready to process requests > Receive - Invalid packet code 4 sent to authentication port from client > global > p > ort 57825 > Ready to process requests > Receive - Invalid packet code 4 sent to authentication port from client > global > p > ort 57825 > Receive - Invalid packet code 4 sent to authentication port from client > global > p > ort 57825 > Ready to process requests > Receive - Invalid packet code 4 sent to authentication port from client > global > p > ort 57825 > Ready to process requests > > > Any clue? > > thanks > > > > > On Tue, Jul 3, 2018 at 8:03 AM, Uchenna Nebedum <nebeduch@gmail.com> > wrote: > > > In my freeRADIUS installation from ubuntu repo accounting wasn't working > > because the acctupdate column was missing from the schema. So what I'd > > suggest would be to use radclient or NTRadPing and send accounting > packets > > with freeRADIUS in debug mode and watch the output. > > > > On Tue, Jul 3, 2018, 01:40 Alan DeKok <aland@deployingradius.com> wrote: > > > > > On Jul 2, 2018, at 7:52 PM, John Martins <jm829580@gmail.com> wrote: > > > > > > > > The module sql is configured as per wiki, I suppose it's correct. How > > > can I > > > > know if it is properly configured? > > > > > > If you read the debug output and it shows the SQL module running > > without > > > errors. > > > > > > > have the NAS send the server accounting packets. the NAS is sending > > > > packets, plus I test it also from terminal with radtest. > > > > Can you tell me what do you mean when you say that the NAS is not > > sending > > > > packets? the NAS is my router, right? it is sending them. > > > > > > *ACCOUNTING* packets. Which, as I said, are not the same as > > > authentication packets. > > > > > > If you're going to configure a RADIUS server, it helps to understand > > the > > > basic terminology. Or if you don't understand the terminology I'm > using, > > > ask. > > > > > > Alan DeKok. > > > > > > > > > - > > > List info/subscribe/unsubscribe? See > > > http://www.freeradius.org/list/users.html > > - > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > > list/users.html > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html
You sent accounting packet to authentication port. On Tue, Jul 3, 2018, 13:26 John Martins <jm829580@gmail.com> wrote: > Hello Uchenna, > > Could you tell me in which table was this acctupdate column missing? When > I send accounting packets from NTRadPing, I get the following error: > > Ready to process requests > Receive - Invalid packet code 4 sent to authentication port from client > global > p > ort 57825 > Ready to process requests > Receive - Invalid packet code 4 sent to authentication port from client > global > p > ort 57825 > Receive - Invalid packet code 4 sent to authentication port from client > global > p > ort 57825 > Ready to process requests > Receive - Invalid packet code 4 sent to authentication port from client > global > p > ort 57825 > Ready to process requests > > > Any clue? > > thanks > > > > > On Tue, Jul 3, 2018 at 8:03 AM, Uchenna Nebedum <nebeduch@gmail.com> > wrote: > > > In my freeRADIUS installation from ubuntu repo accounting wasn't working > > because the acctupdate column was missing from the schema. So what I'd > > suggest would be to use radclient or NTRadPing and send accounting > packets > > with freeRADIUS in debug mode and watch the output. > > > > On Tue, Jul 3, 2018, 01:40 Alan DeKok <aland@deployingradius.com> wrote: > > > > > On Jul 2, 2018, at 7:52 PM, John Martins <jm829580@gmail.com> wrote: > > > > > > > > The module sql is configured as per wiki, I suppose it's correct. How > > > can I > > > > know if it is properly configured? > > > > > > If you read the debug output and it shows the SQL module running > > without > > > errors. > > > > > > > have the NAS send the server accounting packets. the NAS is sending > > > > packets, plus I test it also from terminal with radtest. > > > > Can you tell me what do you mean when you say that the NAS is not > > sending > > > > packets? the NAS is my router, right? it is sending them. > > > > > > *ACCOUNTING* packets. Which, as I said, are not the same as > > > authentication packets. > > > > > > If you're going to configure a RADIUS server, it helps to understand > > the > > > basic terminology. Or if you don't understand the terminology I'm > using, > > > ask. > > > > > > Alan DeKok. > > > > > > > > > - > > > List info/subscribe/unsubscribe? See > > > http://www.freeradius.org/list/users.html > > - > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > > list/users.html > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html
now, loook the debug below : (1) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list'): 42S22 On Tue, Jul 3, 2018 at 2:30 PM, Uchenna Nebedum <nebeduch@gmail.com> wrote: > You sent accounting packet to authentication port. > > On Tue, Jul 3, 2018, 13:26 John Martins <jm829580@gmail.com> wrote: > > > Hello Uchenna, > > > > Could you tell me in which table was this acctupdate column missing? > When > > I send accounting packets from NTRadPing, I get the following error: > > > > Ready to process requests > > Receive - Invalid packet code 4 sent to authentication port from client > > global > > p > > ort 57825 > > Ready to process requests > > Receive - Invalid packet code 4 sent to authentication port from client > > global > > p > > ort 57825 > > Receive - Invalid packet code 4 sent to authentication port from client > > global > > p > > ort 57825 > > Ready to process requests > > Receive - Invalid packet code 4 sent to authentication port from client > > global > > p > > ort 57825 > > Ready to process requests > > > > > > Any clue? > > > > thanks > > > > > > > > > > On Tue, Jul 3, 2018 at 8:03 AM, Uchenna Nebedum <nebeduch@gmail.com> > > wrote: > > > > > In my freeRADIUS installation from ubuntu repo accounting wasn't > working > > > because the acctupdate column was missing from the schema. So what I'd > > > suggest would be to use radclient or NTRadPing and send accounting > > packets > > > with freeRADIUS in debug mode and watch the output. > > > > > > On Tue, Jul 3, 2018, 01:40 Alan DeKok <aland@deployingradius.com> > wrote: > > > > > > > On Jul 2, 2018, at 7:52 PM, John Martins <jm829580@gmail.com> wrote: > > > > > > > > > > The module sql is configured as per wiki, I suppose it's correct. > How > > > > can I > > > > > know if it is properly configured? > > > > > > > > If you read the debug output and it shows the SQL module running > > > without > > > > errors. > > > > > > > > > have the NAS send the server accounting packets. the NAS is sending > > > > > packets, plus I test it also from terminal with radtest. > > > > > Can you tell me what do you mean when you say that the NAS is not > > > sending > > > > > packets? the NAS is my router, right? it is sending them. > > > > > > > > *ACCOUNTING* packets. Which, as I said, are not the same as > > > > authentication packets. > > > > > > > > If you're going to configure a RADIUS server, it helps to > understand > > > the > > > > basic terminology. Or if you don't understand the terminology I'm > > using, > > > > ask. > > > > > > > > Alan DeKok. > > > > > > > > > > > > - > > > > List info/subscribe/unsubscribe? See > > > > http://www.freeradius.org/list/users.html > > > - > > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > > > list/users.html > > > > > - > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > list/users.html >
You're welcome it was the same problem i had, Alan helped me with it. Always test the installation before adding NAS, that way you can ask more precise questions. On Tue, Jul 3, 2018, 14:10 John Martins <jm829580@gmail.com> wrote: > now, loook the debug below : > > (1) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' > in 'field list'): 42S22 > > On Tue, Jul 3, 2018 at 2:30 PM, Uchenna Nebedum <nebeduch@gmail.com> > wrote: > > > You sent accounting packet to authentication port. > > > > On Tue, Jul 3, 2018, 13:26 John Martins <jm829580@gmail.com> wrote: > > > > > Hello Uchenna, > > > > > > Could you tell me in which table was this acctupdate column missing? > > When > > > I send accounting packets from NTRadPing, I get the following error: > > > > > > Ready to process requests > > > Receive - Invalid packet code 4 sent to authentication port from client > > > global > > > p > > > ort 57825 > > > Ready to process requests > > > Receive - Invalid packet code 4 sent to authentication port from client > > > global > > > p > > > ort 57825 > > > Receive - Invalid packet code 4 sent to authentication port from client > > > global > > > p > > > ort 57825 > > > Ready to process requests > > > Receive - Invalid packet code 4 sent to authentication port from client > > > global > > > p > > > ort 57825 > > > Ready to process requests > > > > > > > > > Any clue? > > > > > > thanks > > > > > > > > > > > > > > > On Tue, Jul 3, 2018 at 8:03 AM, Uchenna Nebedum <nebeduch@gmail.com> > > > wrote: > > > > > > > In my freeRADIUS installation from ubuntu repo accounting wasn't > > working > > > > because the acctupdate column was missing from the schema. So what > I'd > > > > suggest would be to use radclient or NTRadPing and send accounting > > > packets > > > > with freeRADIUS in debug mode and watch the output. > > > > > > > > On Tue, Jul 3, 2018, 01:40 Alan DeKok <aland@deployingradius.com> > > wrote: > > > > > > > > > On Jul 2, 2018, at 7:52 PM, John Martins <jm829580@gmail.com> > wrote: > > > > > > > > > > > > The module sql is configured as per wiki, I suppose it's correct. > > How > > > > > can I > > > > > > know if it is properly configured? > > > > > > > > > > If you read the debug output and it shows the SQL module running > > > > without > > > > > errors. > > > > > > > > > > > have the NAS send the server accounting packets. the NAS is > sending > > > > > > packets, plus I test it also from terminal with radtest. > > > > > > Can you tell me what do you mean when you say that the NAS is not > > > > sending > > > > > > packets? the NAS is my router, right? it is sending them. > > > > > > > > > > *ACCOUNTING* packets. Which, as I said, are not the same as > > > > > authentication packets. > > > > > > > > > > If you're going to configure a RADIUS server, it helps to > > understand > > > > the > > > > > basic terminology. Or if you don't understand the terminology I'm > > > using, > > > > > ask. > > > > > > > > > > Alan DeKok. > > > > > > > > > > > > > > > - > > > > > List info/subscribe/unsubscribe? See > > > > > http://www.freeradius.org/list/users.html > > > > - > > > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > > > > list/users.html > > > > > > > - > > > List info/subscribe/unsubscribe? See > > > http://www.freeradius.org/list/users.html > > - > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > > list/users.html > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html
On Jul 3, 2018, at 9:31 AM, Uchenna Nebedum <nebeduch@gmail.com> wrote:
You're welcome it was the same problem i had, Alan helped me with it. Always test the installation before adding NAS, that way you can ask more precise questions.
On Tue, Jul 3, 2018, 14:10 John Martins <jm829580@gmail.com> wrote:
now, loook the debug below :
(1) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list'): 42S22
The only way anyone gets that error is if they do *not* follow the documentation and examples for setting up MySQL. I don't know what's going on, but there's recently been a flood of people who refuse to read the docs, refuse all help on the list, and then complain when told this. This antisocial ignorance will not be tolerated. Alan DeKok.
Hi Uchenna, Thanks a lot!! I added the missing column and now I get data in radacct, thanks a lot!! On Tue, Jul 3, 2018 at 2:30 PM, Uchenna Nebedum <nebeduch@gmail.com> wrote: > You sent accounting packet to authentication port. > > On Tue, Jul 3, 2018, 13:26 John Martins <jm829580@gmail.com> wrote: > > > Hello Uchenna, > > > > Could you tell me in which table was this acctupdate column missing? > When > > I send accounting packets from NTRadPing, I get the following error: > > > > Ready to process requests > > Receive - Invalid packet code 4 sent to authentication port from client > > global > > p > > ort 57825 > > Ready to process requests > > Receive - Invalid packet code 4 sent to authentication port from client > > global > > p > > ort 57825 > > Receive - Invalid packet code 4 sent to authentication port from client > > global > > p > > ort 57825 > > Ready to process requests > > Receive - Invalid packet code 4 sent to authentication port from client > > global > > p > > ort 57825 > > Ready to process requests > > > > > > Any clue? > > > > thanks > > > > > > > > > > On Tue, Jul 3, 2018 at 8:03 AM, Uchenna Nebedum <nebeduch@gmail.com> > > wrote: > > > > > In my freeRADIUS installation from ubuntu repo accounting wasn't > working > > > because the acctupdate column was missing from the schema. So what I'd > > > suggest would be to use radclient or NTRadPing and send accounting > > packets > > > with freeRADIUS in debug mode and watch the output. > > > > > > On Tue, Jul 3, 2018, 01:40 Alan DeKok <aland@deployingradius.com> > wrote: > > > > > > > On Jul 2, 2018, at 7:52 PM, John Martins <jm829580@gmail.com> wrote: > > > > > > > > > > The module sql is configured as per wiki, I suppose it's correct. > How > > > > can I > > > > > know if it is properly configured? > > > > > > > > If you read the debug output and it shows the SQL module running > > > without > > > > errors. > > > > > > > > > have the NAS send the server accounting packets. the NAS is sending > > > > > packets, plus I test it also from terminal with radtest. > > > > > Can you tell me what do you mean when you say that the NAS is not > > > sending > > > > > packets? the NAS is my router, right? it is sending them. > > > > > > > > *ACCOUNTING* packets. Which, as I said, are not the same as > > > > authentication packets. > > > > > > > > If you're going to configure a RADIUS server, it helps to > understand > > > the > > > > basic terminology. Or if you don't understand the terminology I'm > > using, > > > > ask. > > > > > > > > Alan DeKok. > > > > > > > > > > > > - > > > > List info/subscribe/unsubscribe? See > > > > http://www.freeradius.org/list/users.html > > > - > > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > > > list/users.html > > > > > - > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > list/users.html >
To the Wiki and regard to questions and answers, we should add: do not answer if the answer is not useful... On Tue, Jul 3, 2018 at 3:18 PM, John Martins <jm829580@gmail.com> wrote: > Hi Uchenna, > > Thanks a lot!! I added the missing column and now I get data in radacct, > thanks a lot!! > > On Tue, Jul 3, 2018 at 2:30 PM, Uchenna Nebedum <nebeduch@gmail.com> > wrote: > >> You sent accounting packet to authentication port. >> >> On Tue, Jul 3, 2018, 13:26 John Martins <jm829580@gmail.com> wrote: >> >> > Hello Uchenna, >> > >> > Could you tell me in which table was this acctupdate column missing? >> When >> > I send accounting packets from NTRadPing, I get the following error: >> > >> > Ready to process requests >> > Receive - Invalid packet code 4 sent to authentication port from client >> > global >> > p >> > ort 57825 >> > Ready to process requests >> > Receive - Invalid packet code 4 sent to authentication port from client >> > global >> > p >> > ort 57825 >> > Receive - Invalid packet code 4 sent to authentication port from client >> > global >> > p >> > ort 57825 >> > Ready to process requests >> > Receive - Invalid packet code 4 sent to authentication port from client >> > global >> > p >> > ort 57825 >> > Ready to process requests >> > >> > >> > Any clue? >> > >> > thanks >> > >> > >> > >> > >> > On Tue, Jul 3, 2018 at 8:03 AM, Uchenna Nebedum <nebeduch@gmail.com> >> > wrote: >> > >> > > In my freeRADIUS installation from ubuntu repo accounting wasn't >> working >> > > because the acctupdate column was missing from the schema. So what I'd >> > > suggest would be to use radclient or NTRadPing and send accounting >> > packets >> > > with freeRADIUS in debug mode and watch the output. >> > > >> > > On Tue, Jul 3, 2018, 01:40 Alan DeKok <aland@deployingradius.com> >> wrote: >> > > >> > > > On Jul 2, 2018, at 7:52 PM, John Martins <jm829580@gmail.com> >> wrote: >> > > > > >> > > > > The module sql is configured as per wiki, I suppose it's correct. >> How >> > > > can I >> > > > > know if it is properly configured? >> > > > >> > > > If you read the debug output and it shows the SQL module running >> > > without >> > > > errors. >> > > > >> > > > > have the NAS send the server accounting packets. the NAS is >> sending >> > > > > packets, plus I test it also from terminal with radtest. >> > > > > Can you tell me what do you mean when you say that the NAS is not >> > > sending >> > > > > packets? the NAS is my router, right? it is sending them. >> > > > >> > > > *ACCOUNTING* packets. Which, as I said, are not the same as >> > > > authentication packets. >> > > > >> > > > If you're going to configure a RADIUS server, it helps to >> understand >> > > the >> > > > basic terminology. Or if you don't understand the terminology I'm >> > using, >> > > > ask. >> > > > >> > > > Alan DeKok. >> > > > >> > > > >> > > > - >> > > > List info/subscribe/unsubscribe? See >> > > > http://www.freeradius.org/list/users.html >> > > - >> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ >> > > list/users.html >> > > >> > - >> > List info/subscribe/unsubscribe? See >> > http://www.freeradius.org/list/users.html >> - >> List info/subscribe/unsubscribe? See http://www.freeradius.org/list >> /users.html >> > >
On Jul 3, 2018, at 9:24 AM, John Martins <jm829580@gmail.com> wrote:
To the Wiki and regard to questions and answers, we should add: do not answer if the answer is not useful...
The answers here *do* help you. If you don't understand that help or dislike it, the problem is with you, not with the list. Complaining about the help you get here is not acceptable. If you continue down this path, you will be unsubscribed from the list, and permanently banned. Alan DeKok.
Hello, The NAS is sending data to the freeradius server, cause it was doing it before. I think it is a miss-configuration problem...in any case, can somebody tell me how to troubleshoot it? thanks On Tue, Jul 3, 2018 at 1:41 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 2, 2018, at 7:28 PM, John Martins <jm829580@gmail.com> wrote:
- What you are trying to do: I'm trying to setup radius in order that it inserts data in radacct.
a) configure the "sql" module b) have the NAS send the server accounting packets.
- why you are trying to do it: because it does not insert data despite it authenticates the users properly.
authentication != accounting
- what you expect the server to do: to insert data in radacct table.
It only does that when it receives accounting packets.
- what the server does instead (i.e. debug output).
Which shows no accounting packets. And therefore, nothing to be inserted into "radacct".
The server can't magically invent accounting data. The NAS *MUST* send accounting data to the server.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
On Jul 2, 2018, at 8:27 PM, John Martins <jm829580@gmail.com> wrote:
The NAS is sending data to the freeradius server, cause it was doing it before. I think it is a miss-configuration problem...in any case, can somebody tell me how to troubleshoot it?
Read the NAS documentation to see how to configure the NAS. And you didn't say which NAS you're using, so we're limited to only vague help. Ask good questions, get good answers. Alan DeKok.
Hello, I'm using Mikrotik router, and it works perfectly with an older version of freeradius ( installed in different Virtual M.). It is now that I updated when freeradius 3.0.15 is not working. BR On Tue, Jul 3, 2018 at 2:38 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 2, 2018, at 8:27 PM, John Martins <jm829580@gmail.com> wrote:
The NAS is sending data to the freeradius server, cause it was doing it before. I think it is a miss-configuration problem...in any case, can somebody tell me how to troubleshoot it?
Read the NAS documentation to see how to configure the NAS.
And you didn't say which NAS you're using, so we're limited to only vague help.
Ask good questions, get good answers.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
That was why i suggested you test the accounting with NTRadPing, or radclient. On Tue, Jul 3, 2018, 11:27 John Martins <jm829580@gmail.com> wrote:
Hello,
I'm using Mikrotik router, and it works perfectly with an older version of freeradius ( installed in different Virtual M.). It is now that I updated when freeradius 3.0.15 is not working.
BR
On Tue, Jul 3, 2018 at 2:38 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 2, 2018, at 8:27 PM, John Martins <jm829580@gmail.com> wrote:
The NAS is sending data to the freeradius server, cause it was doing it before. I think it is a miss-configuration problem...in any case, can somebody tell me how to troubleshoot it?
Read the NAS documentation to see how to configure the NAS.
And you didn't say which NAS you're using, so we're limited to only vague help.
Ask good questions, get good answers.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Jul 3, 2018, at 6:26 AM, John Martins <jm829580@gmail.com> wrote:
I'm using Mikrotik router, and it works perfectly with an older version of freeradius ( installed in different Virtual M.). It is now that I updated when freeradius 3.0.15 is not working.
So you're saying that when two VMs use the same IP address / port for the RADIUS server, but at different times... then the NAS sends one VM accounting packets, but doesn't send the other VM accounting packets? That's not how networks work. The problem here is simple. You're not listening to our advice. You're not following instructions. You're not *paying attention*. i.e. you either ignored, or didn't understand, the comments that accounting is not the same as authentication. This is something we can't help you with. At this point, your questions are no longer about FreeRADIUS. As such, they are off-topic for this list. So please stop posting about non-FreeRADIUS issues. Alan DeKok.
Hello, In line. So you're saying that when two VMs use the same IP address / port for the RADIUS server, but at different times... then the NAS sends one VM accounting packets, but doesn't send the other VM accounting packets? I think you miss understood me, I have not said it. They are different systems, I have a server working with freeradius 2.x and Mikrotik, and now I setup a new freeradius 3 and test it with the same Mikrotik, and obviously, I don't use the same ip address and stuff... That's not how networks work. The problem here is simple. You're not listening to our advice. You're not following instructions. You're not *paying attention*. i.e. you either ignored, or didn't understand, the comments that accounting is not the same as authentication. This I know, and I know that there is an accounting problem, but if MKT sends accounting packets to a radius 2.x, how can it be that it does not send to 3.x? This is something we can't help you with. At this point, your questions are no longer about FreeRADIUS. As such, they are off-topic for this list. So please stop posting about non-FreeRADIUS issues. On Tue, Jul 3, 2018 at 1:06 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 3, 2018, at 6:26 AM, John Martins <jm829580@gmail.com> wrote:
I'm using Mikrotik router, and it works perfectly with an older version
of
freeradius ( installed in different Virtual M.). It is now that I updated when freeradius 3.0.15 is not working.
So you're saying that when two VMs use the same IP address / port for the RADIUS server, but at different times... then the NAS sends one VM accounting packets, but doesn't send the other VM accounting packets?
That's not how networks work.
The problem here is simple. You're not listening to our advice. You're not following instructions. You're not *paying attention*.
i.e. you either ignored, or didn't understand, the comments that accounting is not the same as authentication.
This is something we can't help you with.
At this point, your questions are no longer about FreeRADIUS. As such, they are off-topic for this list. So please stop posting about non-FreeRADIUS issues.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
hi, your debug output only shows an authentication packet being dealt with....so , what happens when an accounting packet is received? show that being debugged. do you not get any accounting packets? if thats the case, check the NAS config - and if thats fine, check your UDP 1813 path to the server (firewall on and correctly configured?) alan On 3 July 2018 at 00:28, John Martins <jm829580@gmail.com> wrote:
Hello Based on the last mail I send the info requested in https://wiki.freeradius.org/guide/Users-Mailing-List.
- What you are trying to do: I'm trying to setup radius in order that it inserts data in radacct. - why you are trying to do it: because it does not insert data despite it authenticates the users properly. - what you expect the server to do: to insert data in radacct table. - what the server does instead (i.e. debug output).
Debug Output:
Ready to process requests (0) Received Access-Request Id 184 from 127.0.0.1:43810 to 127.0.0.1:1812 length 74 (0) User-Name = "test" (0) User-Password = "test" (0) NAS-IP-Address = 55.125.226.126 (0) NAS-Port = 0 (0) Message-Authenticator = 0x33c611c890fed552ae68589a573404eb (0) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/default (0) authorize { (0) [preprocess] = ok (0) [chap] = noop (0) [mschap] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "test", looking up realm NULL (0) suffix: No such realm "NULL" (0) [suffix] = noop (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) [files] = noop (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' rlm_sql (sql): Reserved connection (1) (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '% {SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 't est' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WH ERE username = 'test' ORDER BY id (0) sql: User found in radcheck table (0) sql: Conditional check items matched, merging assignment check items (0) sql: Cleartext-Password := "test" (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radreply WHERE username = '% {SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radreply WHERE username = 't est' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radreply WH ERE username = 'test' ORDER BY id (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDE R BY priority (0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priorit y (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority (0) sql: User not found in any groups rlm_sql (sql): Released connection (1) Need 4 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.7.22-0ubuntu0.17.10.1-log, protocol version 10 (0) [sql] = ok (0) [expiration] = noop (0) [logintime] = noop (0) [pap] = updated (0) } # authorize = updated (0) Found Auth-Type = PAP (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) Auth-Type PAP { (0) pap: Login attempt with password (0) pap: Comparing with "known good" Cleartext-Password (0) pap: User authenticated successfully (0) [pap] = ok (0) } # Auth-Type PAP = ok (0) # Executing section post-auth from file /etc/freeradius/3.0/sites-enabled/default (0) post-auth { (0) update { (0) No attributes updated (0) } # update = noop (0) sql: EXPAND .query (0) sql: --> .query (0) sql: Using query template 'query' rlm_sql (sql): Reserved connection (2) (0) sql: EXPAND %{User-Name} (0) sql: --> test (0) sql: SQL-User-Name set to 'test' (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-U ser-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', 'test', 'Access-Accept', '2018-07-03 01:15:11') (0) sql: EXPAND /var/log/freeradius/sqllog.sql (0) sql: --> /var/log/freeradius/sqllog.sql (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', 'test', 'Access-Accept', '2018-07-03 01:15:11') (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (2) (0) [sql] = ok (0) [exec] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # post-auth = ok (0) Login OK: [test/test] (from client localhost port 0) (0) Sent Access-Accept Id 184 from 127.0.0.1:1812 to 127.0.0.1:43810 length 0 (0) Finished request Waking up in 4.9 seconds. (0) Cleaning up request packet ID 184 with timestamp +8 Ready to process requests
On Tue, Jul 3, 2018 at 1:03 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 2, 2018, at 3:41 PM, John Martins <jm829580@gmail.com> wrote:
My freeradius 3.0.16 is not inserting data into radact, and it
complains on
start with the following error, but the accounting section is in radiusd.conf as stated below.
It's not supposed to be there.
Can anybody give me a clue where can be the problem?
You edited the default configuration, and broke it. Don't do that.
Instead, follow the documentation. That says to start with the default configuration, and then to make small changes.
In the default configuration, the "accounting" section is in sites-enabled/default. Edit it there.
The comments at the bottom of "radiusd.conf" make this clear.
If you're going to edit the configuration files, then you should *read* them.
accounting { # We leave "detail" enabled to _additionally_ log accounting to /var/lo$ detail sql }
Error on freeradius Start:
/etc/freeradius/3.0/radiusd.conf[784]: The accounting section should be inside of a 'server { ... }' block!
That seems pretty clear.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
participants (5)
-
Alan Buxey -
Alan DeKok -
John Martins -
Matthew Newton -
Uchenna Nebedum