FreeRADIUS does not recognize device added in the NAS table
Hello everyone, I was able to setup the FreeRADIUS server to authorise the user to our office wireless network. We have another pop-up office, which is VPN-ed to our main office. All devices of the both offices are able to see each other. Main office: 10.11.11.0/24 Pop-up office: 10:23.23.0/24 I create new record in the NAS table, with information pertaining to our wireless AP at the pop-up office. I uncomment the NAS in the sql.conf file I restart the server I started the server in debug log. The address 10.23.23.54 is the IP address of the Access Point in the pop-up office. The details of the devices I added manually in the NAS table, according to its fields ID: 22 Nasname: PopUpOff Shortname: TestAP Type: other Port: 1812 Secret: test123 Server: 10.23.23.54 Community: Null Description: RADIUS Client Below is the log file content. I highlight one Error that is failed to resolve the Nasname PopUpOff to IPv4, etc.... so I changed to the NAS IP address but that did not work either. But it keeps saying it is ignoring the auth request... etc... Do I have to put these in the clients.conf file as well? But that would defeat the SQL purpose I guess? Any help would be appreciated --------------------------------------------------------------------------------------------------- Sat Sep 29 18:06:41 2018 : Info: rlm_sql (sql): Opening additional connection (31), 1 of 31 pending slots used Sat Sep 29 18:16:13 2018 : Info: Signalled to terminate Sat Sep 29 18:16:13 2018 : Info: Exiting normally Sat Sep 29 18:16:13 2018 : Info: rlm_sql (sql): Closing connection (31) Sat Sep 29 18:16:13 2018 : Info: rlm_sql (sql): Closing connection (30) Sat Sep 29 18:34:19 2018 : Info: Debugger not attached Sat Sep 29 18:34:19 2018 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Sat Sep 29 18:34:19 2018 : Warning: [/etc/freeradius/3.0/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay" found in filter list for realm "DEFAULT". Sat Sep 29 18:34:19 2018 : Warning: [/etc/freeradius/3.0/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay-USec" found in filter list for realm "DEFAULT". Sat Sep 29 18:34:19 2018 : Info: rlm_sql_mysql: libmysql version: 5.7.23 Sat Sep 29 18:34:19 2018 : Info: rlm_sql (sql): Attempting to connect to database "radius" Sat Sep 29 18:34:19 2018 : Info: rlm_sql (sql): Opening additional connection (0), 1 of 32 pending slots used Sat Sep 29 18:34:19 2018 : Info: rlm_sql (sql): Opening additional connection (1), 1 of 31 pending slots used Sat Sep 29 18:34:19 2018 : Info: rlm_sql (sql): Opening additional connection (2), 1 of 30 pending slots used Sat Sep 29 18:34:19 2018 : Info: rlm_sql (sql): Opening additional connection (3), 1 of 29 pending slots used Sat Sep 29 18:34:19 2018 : Info: rlm_sql (sql): Opening additional connection (4), 1 of 28 pending slots used *Sat Sep 29 18:34:19 2018 : Error: Failed resolving "PopUpOff" to IPv4 address: Name or service not known* Sat Sep 29 18:34:19 2018 : Info: Need 5 more connections to reach 10 spares Sat Sep 29 18:34:19 2018 : Info: rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots used Sat Sep 29 18:34:19 2018 : Info: Loaded virtual server <default> Sat Sep 29 18:34:19 2018 : Warning: Ignoring "ldap" (see raddb/mods-available/README.rst) Sat Sep 29 18:34:19 2018 : Info: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:331 Sat Sep 29 18:34:19 2018 : Info: Loaded virtual server inner-tunnel Sat Sep 29 18:34:19 2018 : Info: Loaded virtual server default Sat Sep 29 18:34:19 2018 : Info: Ready to process requests Sat Sep 29 18:34:29 2018 : Error: Ignoring request to auth address * port 1812 bound to server default from unknown client 10.23.23.54 port 57553 proto udp Sat Sep 29 18:34:32 2018 : Error: Ignoring request to auth address * port 1812 bound to server default from unknown client 10.23.23.54 port 57553 proto udp Sat Sep 29 18:34:34 2018 : Error: Ignoring request to auth address * port 1812 bound to server default from unknown client 10.23.23.54 port 57553 proto udp Sat Sep 29 18:34:37 2018 : Error: Ignoring request to auth address * port 1812 bound to server default from unknown client 10.2.2.54 port 57553 proto udp Sat Sep 29 18:34:38 2018 : Error: Ignoring request to auth address * port 1812 bound to server default from unknown client 10.23.23.54 port 57553 proto udp Sat Sep 29 18:34:42 2018 : Error: Ignoring request to auth address * port 1812 bound to server default from unknown client 10.23.23.54 port 37297 proto udp Sat Sep 29 18:34:43 2018 : Error: Ignoring request to auth address * port 1812 bound to server default from unknown client 10.23.23.54 port 57553 proto udp Sat Sep 29 18:34:45 2018 : Error: Ignoring request to auth address * port 1812 bound to server default from unknown client 10.23.23.54 port 37297 proto udp Sat Sep 29 18:57:29 2018 : Info: Signalled to terminate Sat Sep 29 18:57:29 2018 : Info: Exiting normally Sat Sep 29 18:57:29 2018 : Info: rlm_sql (sql): Closing connection (5) Sat Sep 29 18:57:29 2018 : Info: rlm_sql (sql): Closing connection (4) Sat Sep 29 18:57:29 2018 : Info: rlm_sql (sql): Closing connection (3) Sat Sep 29 18:57:29 2018 : Info: rlm_sql (sql): Closing connection (2) Sat Sep 29 18:57:29 2018 : Info: rlm_sql (sql): Closing connection (1) Sat Sep 29 18:57:29 2018 : Info: rlm_sql (sql): Closing connection (0)
On Sep 29, 2018, at 10:39 PM, James Ngo <james.ngobui@gmail.com> wrote:
Below is the log file content. I highlight one Error that is failed to resolve the Nasname PopUpOff to IPv4, etc.... so I changed to the NAS IP address but that did not work either.
Yes, it does work. If you read the debug output, you see that it's reading the NAS table when the server *starts*. And you didn't restart the server after changing the NAS table.
---------------------------------------------------------------------------------------------------
Sat Sep 29 18:06:41 2018 : Info: rlm_sql (sql): Opening additional connection (31), 1 of 31 pending slots used
Use "radiusd -X". Honestly... this is documented *everywhere*.
*Sat Sep 29 18:34:19 2018 : Error: Failed resolving "PopUpOff" to IPv4 address: Name or service not known*
Which means that the client is unknown. Did you try restarting the server *after* fixing the SQL database? Alan DeKok.
Hey Alan, Thank you for your instruction. I did restart both RADIUS and SQL (Apache2) server but still... However, I found out that, the field "nasname" should actually be the IP address of the nas (in my case, it is an access point) instead of the name PopUpOff. And also, the field "server" should be left blank (NULL). So after changing those fields and restart the server again, it is working now! But thank you very much for your helps and instructions Kind regards James -----Original Message----- From: Freeradius-Users <freeradius-users-bounces+james.ngobui=gmail.com@lists.freeradius.org> On Behalf Of Alan DeKok Sent: September 30, 2018 4:17 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: FreeRADIUS does not recognize device added in the NAS table On Sep 29, 2018, at 10:39 PM, James Ngo <james.ngobui@gmail.com> wrote:
Below is the log file content. I highlight one Error that is failed to resolve the Nasname PopUpOff to IPv4, etc.... so I changed to the NAS IP address but that did not work either.
Yes, it does work. If you read the debug output, you see that it's reading the NAS table when the server *starts*. And you didn't restart the server after changing the NAS table.
---------------------------------------------------------------------- -----------------------------
Sat Sep 29 18:06:41 2018 : Info: rlm_sql (sql): Opening additional connection (31), 1 of 31 pending slots used
Use "radiusd -X". Honestly... this is documented *everywhere*.
*Sat Sep 29 18:34:19 2018 : Error: Failed resolving "PopUpOff" to IPv4 address: Name or service not known*
Which means that the client is unknown. Did you try restarting the server *after* fixing the SQL database? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --- This email has been checked for viruses by AVG. https://www.avg.com
participants (3)
-
Alan DeKok -
James Ngo -
james.ngobui＠gmail.com