Radius, from 2 to 3 - radtest does not agree with its command line
Hi, I have an old server and this is the normal behavior: radtest johndoe 'jdsecret' 127.0.0.1 0 testing123 Sending Access-Request of id 52 to 127.0.0.1 port 1812 User-Name = "johndoe" User-Password = "jdsecret" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=52, length=20 I am doing a new server and it is different now: radtest johndoe 'jdsecret' 127.0.0.1 0 testing123 Sending Access-Request Id 250 from 0.0.0.0:43561 to 127.0.0.1:1812 User-Name = "johndoe" User-Password = "jdsecret" NAS-IP-Address = 10.0.0.3 NAS-Port = 0 Message-Authenticator = 0x00 (0) No reply from server for ID 250 socket 3 ... Why is NAS-IP-Address = 10.0.0.3? It makes no sense to me. There is no 10.0.0.3 in my interfaces. There is nothing in log, of course. TIA -- Cosme Corrêa +55 21 4042-6606
Hi, Need to be magic to discover which your version... non-version, It more hard to help. which is your version? tell more about your "old" and "new" versions said. -- Jorge Pereira On Wed, Sep 16, 2015 at 6:34 PM, Cosme Faria Corrêa <cosmefc@gmail.com> wrote:
Hi,
I have an old server and this is the normal behavior:
radtest johndoe 'jdsecret' 127.0.0.1 0 testing123 Sending Access-Request of id 52 to 127.0.0.1 port 1812 User-Name = "johndoe" User-Password = "jdsecret" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=52, length=20
I am doing a new server and it is different now:
radtest johndoe 'jdsecret' 127.0.0.1 0 testing123 Sending Access-Request Id 250 from 0.0.0.0:43561 to 127.0.0.1:1812 User-Name = "johndoe" User-Password = "jdsecret" NAS-IP-Address = 10.0.0.3 NAS-Port = 0 Message-Authenticator = 0x00 (0) No reply from server for ID 250 socket 3 ...
Why is NAS-IP-Address = 10.0.0.3? It makes no sense to me. There is no 10.0.0.3 in my interfaces.
There is nothing in log, of course.
TIA
-- Cosme Corrêa +55 21 4042-6606
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, thank you for your quick reply. Old: freeradius-2.1.12-4.el6_3.x86_64 New: freeradius-3.0.4-6.el7.x86_64 Using CentOS 6 and CentOS 7. TIA On 16/09/15 20:18, Jorge Pereira wrote: > Hi, > > Need to be magic to discover which your version... non-version, It more > hard to help. > which is your version? tell more about your "old" and "new" versions said. > > -- > Jorge Pereira > > On Wed, Sep 16, 2015 at 6:34 PM, Cosme Faria Corrêa <cosmefc@gmail.com> > wrote: > >> Hi, >> >> >> I have an old server and this is the normal behavior: >> >> radtest johndoe 'jdsecret' 127.0.0.1 0 testing123 >> Sending Access-Request of id 52 to 127.0.0.1 port 1812 >> User-Name = "johndoe" >> User-Password = "jdsecret" >> NAS-IP-Address = 127.0.0.1 >> NAS-Port = 0 >> Message-Authenticator = 0x00000000000000000000000000000000 >> rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=52, >> length=20 >> >> >> >> I am doing a new server and it is different now: >> >> radtest johndoe 'jdsecret' 127.0.0.1 0 testing123 >> Sending Access-Request Id 250 from 0.0.0.0:43561 to 127.0.0.1:1812 >> User-Name = "johndoe" >> User-Password = "jdsecret" >> NAS-IP-Address = 10.0.0.3 >> NAS-Port = 0 >> Message-Authenticator = 0x00 >> (0) No reply from server for ID 250 socket 3 >> ... >> >> >> Why is NAS-IP-Address = 10.0.0.3? It makes no sense to me. >> There is no 10.0.0.3 in my interfaces. >> >> There is nothing in log, of course. >> >> TIA >> >> -- >> Cosme Corrêa >> +55 21 4042-6606 >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Cosme Corrêa +55 21 4042-6606
On Sep 16, 2015, at 5:34 PM, Cosme Faria Corrêa <cosmefc@gmail.com> wrote:
I am doing a new server and it is different now:
radtest johndoe 'jdsecret' 127.0.0.1 0 testing123 Sending Access-Request Id 250 from 0.0.0.0:43561 to 127.0.0.1:1812 User-Name = "johndoe" User-Password = "jdsecret" NAS-IP-Address = 10.0.0.3 NAS-Port = 0 Message-Authenticator = 0x00 (0) No reply from server for ID 250 socket 3 ...
Why is NAS-IP-Address = 10.0.0.3? It makes no sense to me. There is no 10.0.0.3 in my interfaces.
It's the IP address associated with the hostname of the machine. In version 2, radtest used 127.0.0.1 as the NAS-IP-Address. In later versions, it used "hostname". Which on your system, resolves to 10.0.0.3. I suggest fixing DNS and / or the host name on your machine, so they're correct. Alan DeKok.
participants (3)
-
Alan DeKok -
Cosme Faria Corrêa -
Jorge Pereira