IP Pool defined, but radius does not hand out an IP address.
When I connect a client to freeradius the client authenticates, gets an accept/accept, but does not get an IP address. I've tried it with the Group and Pool-Name directives in each client's block, and I've tried it with them in a DEFAULT by themselves. Neither has handed out an IP address. System vitals: radius:/etc/freeradius# uname -a Linux radius 2.6.18-5-686 #1 SMP Mon Dec 24 16:41:07 UTC 2007 i686 GNU/Linux radius:/etc/freeradius# cat /etc/debian_version 4.0 radius:/etc/freeradius# freeradius -v freeradius: FreeRADIUS Version 1.1.3, for host i486-pc-linux-gnu, built on Dec 16 2006 at 23:48:11 # radtest umcc xxxxxx localhost 0 xxxxxxx Sending Access-Request of id 144 to 127.0.0.1 port 1812 User-Name = "umcc" User-Password = "bts10200" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=144, length=44 Service-Type = Framed-User Framed-IP-Netmask = 255.255.255.255 Framed-Protocol = PPP Framed-Compression = Van-Jacobson-TCP-IP radius.log: Thu Jan 24 11:20:51 2008 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Thu Jan 24 11:20:51 2008 : Info: Ready to process requests. Thu Jan 24 11:32:33 2008 : Auth: Login OK: [umcc] (from client localhost-testing port 0) users: umcc User-Password == "xxxxxx" Service-Type = Framed-User, Framed-IP-Netmask = 255.255.255.255, Group == main_pool, Pool-Name := "main_pool", Framed-Protocol = PPP, Framed-Compression = Van-Jacobsen-TCP-IP radiusd.conf (pertinent sections) ippool main_pool { range-start = 208.64.35.2 range-stop = 208.64.35.254 netmask = 255.255.255.255 cache-size = 253 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex override = yes maximum-timeout = 0 } accounting { detail unix radutmp main_pool } post-auth { main_pool }
Andrew D Kirch wrote:
When I connect a client to freeradius the client authenticates, gets an accept/accept, but does not get an IP address. I've tried it with the Group and Pool-Name directives in each client's block, and I've tried it with them in a DEFAULT by themselves. Neither has handed out an IP address. ... radius:/etc/freeradius# freeradius -v freeradius: FreeRADIUS Version 1.1.3, for host i486-pc-linux-gnu, built on Dec 16 2006 at 23:48:11
You should upgrade to at least 1.1.6, maybe 2.0.1 And with all of the information you posted, you didn't include the most important, which is requested in the FAQ, README, INSTALL, "man" page, and daily on this list: radiusd -X. Is there some other place in the documentation where this should be suggested? Alan DeKok.
On Thursday 24 January 2008 13:10:09 Alan DeKok wrote:
And with all of the information you posted, you didn't include the most important, which is requested in the FAQ, README, INSTALL, "man" page, and daily on this list: radiusd -X.
Is there some other place in the documentation where this should be suggested?
Alan DeKok.
Big red letters on the front page of the website. Or below the subscribe/unsubscribe line in the footer of every message. =) -Kevin
Alan DeKok wrote:
Andrew D Kirch wrote:
When I connect a client to freeradius the client authenticates, gets an accept/accept, but does not get an IP address. I've tried it with the Group and Pool-Name directives in each client's block, and I've tried it with them in a DEFAULT by themselves. Neither has handed out an IP address.
...
radius:/etc/freeradius# freeradius -v freeradius: FreeRADIUS Version 1.1.3, for host i486-pc-linux-gnu, built on Dec 16 2006 at 23:48:11
You should upgrade to at least 1.1.6, maybe 2.0.1
And with all of the information you posted, you didn't include the most important, which is requested in the FAQ, README, INSTALL, "man" page, and daily on this list: radiusd -X.
Is there some other place in the documentation where this should be suggested?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
You might try putting it at the top of radiusd.conf, everyone's eventually going to see that. Because I use Debian the others are packaged and abstracted away. I used the Freeradius wiki quite a bit as well, and perhaps it could be more visible there too. In fact I think this might be an honorable use of the <blink> element as I was able to use the freeradius -X output to immediately debug my problem. Thank you for the help. Andrew
It's all in black and white: # for different users. The Pool-Name attribute is a *check* item not # a reply item. # # Example: # radiusd.conf: ippool students { [...] } # users file : DEFAULT Group == students, Pool-Name := "students" # Yet, you have put it as a reply item. Ivan Kalik Kalik Informatika ISP Dana 24/1/2008, "Andrew D Kirch" <trelane@trelane.net> piše:
When I connect a client to freeradius the client authenticates, gets an accept/accept, but does not get an IP address. I've tried it with the Group and Pool-Name directives in each client's block, and I've tried it with them in a DEFAULT by themselves. Neither has handed out an IP address.
System vitals: radius:/etc/freeradius# uname -a Linux radius 2.6.18-5-686 #1 SMP Mon Dec 24 16:41:07 UTC 2007 i686 GNU/Linux radius:/etc/freeradius# cat /etc/debian_version 4.0 radius:/etc/freeradius# freeradius -v freeradius: FreeRADIUS Version 1.1.3, for host i486-pc-linux-gnu, built on Dec 16 2006 at 23:48:11
# radtest umcc xxxxxx localhost 0 xxxxxxx Sending Access-Request of id 144 to 127.0.0.1 port 1812 User-Name = "umcc" User-Password = "bts10200" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=144, length=44 Service-Type = Framed-User Framed-IP-Netmask = 255.255.255.255 Framed-Protocol = PPP Framed-Compression = Van-Jacobson-TCP-IP
radius.log: Thu Jan 24 11:20:51 2008 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Thu Jan 24 11:20:51 2008 : Info: Ready to process requests. Thu Jan 24 11:32:33 2008 : Auth: Login OK: [umcc] (from client localhost-testing port 0)
users: umcc User-Password == "xxxxxx" Service-Type = Framed-User, Framed-IP-Netmask = 255.255.255.255, Group == main_pool, Pool-Name := "main_pool", Framed-Protocol = PPP, Framed-Compression = Van-Jacobsen-TCP-IP
radiusd.conf (pertinent sections) ippool main_pool { range-start = 208.64.35.2 range-stop = 208.64.35.254 netmask = 255.255.255.255 cache-size = 253 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex override = yes maximum-timeout = 0 } accounting { detail unix radutmp main_pool } post-auth { main_pool }
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Andrew D Kirch -
Kevin Bonner -
tnt＠kalik.co.yu