Using virtual servers to authenticate with different ports and Users
Hi, I am new to the idea of virtual servers on freeradius. I would like to authenticate one group of users using Port 1812 and a second group of users on port 1645 with the intention of using virtual server settings. I have got freeradius 2.1.11 with default radiusd.conf settings working according to the instructions from freeradius wiki. I would like to change the default settings in using virutal server by enclosing the first "listen section with type=auth" on default "radiusd.conf" with server wifi. However, the test user was rejected. Please let me know whether I need other settings to be modified to get the user accepted. I am only changing the default settings into one virtual server at the moment. Thank you. Regards Alan Enclosed please find messages from "radiusd -X" after "virtual server wifi" added: Listening on accounting address * port 1813 Listening on command file /usr/local/var/run/radiusd/radiusd.sock Listening on authentication address * port 1812 as server wifi Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 38387, id=56, length=59 User-Name = "testing" User-Password = "password" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 server wifi { WARNING: Empty authorize section. Using default return values. ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. } # server wifi Using Post-Auth-Type Reject WARNING: Unknown value specified for Post-Auth-Type. Cannot perform requested action. Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 56 to 127.0.0.1 port 38387 Waking up in 4.9 seconds. Cleaning up request 0 ID 56 with timestamp +38 Ready to process requests.
On Wed, May 2, 2012 at 4:42 PM, Alan Kong <akongr@ee.cuhk.edu.hk> wrote:
I would like to authenticate one group of users using Port 1812 and a second group of users on port 1645 with the intention of using virtual server settings.
I have got freeradius 2.1.11
Why? That's a version with known serious bug. Use 2.1.12 or v2.1.x branch from git.
Listening on accounting address * port 1813 Listening on command file /usr/local/var/run/radiusd/radiusd.sock Listening on authentication address * port 1812 as server wifi Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel
That doesn't look right. Look at sites-enabled/virtual-server. There's an example there on how to listen to another port for authentication. You should be able to use that file as a base. -- Fajar
Hi, Thank you for the suggestions. I have upgraded to version 2.1.12 on CentOS 5. I am testing with "sites-enabled/inner-tunnel" virtual server setting, how do I read the "second_files" in the module "files". I have included both "files" and "second_files" in the "authorize" section in "inner-tunnel". And both list of users worked. I want to read different list of users for the "inner-tunnel" virtual server. Thank you. Regards Alan On 5/2/2012 6:29 PM, Fajar A. Nugraha wrote:
On Wed, May 2, 2012 at 4:42 PM, Alan Kong<akongr@ee.cuhk.edu.hk> wrote:
I would like to authenticate one group of users using Port 1812 and a second group of users on port 1645 with the intention of using virtual server settings.
I have got freeradius 2.1.11 Why? That's a version with known serious bug. Use 2.1.12 or v2.1.x branch from git.
Listening on accounting address * port 1813 Listening on command file /usr/local/var/run/radiusd/radiusd.sock Listening on authentication address * port 1812 as server wifi Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel That doesn't look right. Look at sites-enabled/virtual-server. There's an example there on how to listen to another port for authentication. You should be able to use that file as a base.
On Fri, May 4, 2012 at 11:05 AM, Alan Kong <akongr@ee.cuhk.edu.hk> wrote:
Hi,
Thank you for the suggestions. I have upgraded to version 2.1.12 on CentOS 5.
I am testing with "sites-enabled/inner-tunnel" virtual server setting, how do I read the "second_files" in the module "files". I have included both "files" and "second_files" in the "authorize" section in "inner-tunnel". And both list of users worked. I want to read different list of users for the "inner-tunnel" virtual server.
How did you create second_files? Use the same method. Basically I think you should create another instance of files module. See http://wiki.freeradius.org/Rlm_sql#Instances for example (it's for sql, but you should get the idea from there). -- Fajar
HI, Thank you very much. It works now. Regards Alan On 5/4/2012 1:56 PM, Fajar A. Nugraha wrote:
On Fri, May 4, 2012 at 11:05 AM, Alan Kong<akongr@ee.cuhk.edu.hk> wrote:
Hi,
Thank you for the suggestions. I have upgraded to version 2.1.12 on CentOS 5.
I am testing with "sites-enabled/inner-tunnel" virtual server setting, how do I read the "second_files" in the module "files". I have included both "files" and "second_files" in the "authorize" section in "inner-tunnel". And both list of users worked. I want to read different list of users for the "inner-tunnel" virtual server. How did you create second_files? Use the same method.
Basically I think you should create another instance of files module. See http://wiki.freeradius.org/Rlm_sql#Instances for example (it's for sql, but you should get the idea from there).
participants (2)
-
Alan Kong -
Fajar A. Nugraha