Robust Proxy Accounting problem after switch from 2.2.10 to 3.2.1
Hi all i try to switch from freeradius 2.2.10 to 3.2.1 After fix all configs and dictionary go to this problem real radius server not respons : 10.10.10.1 is proxy radius 192.168.10.1 is real radius server. with freeradius 2.2.10 with old config real radius respons on query. but after switch to freeradius 3.2.1 radius stop respons on query. May be i make wrong config or ? See log : Wed Nov 23 20:08:23 2022 : Debug: } Wed Nov 23 20:08:23 2022 : Debug: Listening on acct address * port 1813 Wed Nov 23 20:08:23 2022 : Debug: Listening on detail file /var/log/freeradius/radacct/detail.example.com/detail-*:* as server home.example.com Wed Nov 23 20:08:23 2022 : Info: Ready to process requests Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - User-Name = "test_bgbras" Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - NAS-Identifier = "demo-bng" Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - NAS-IP-Address = 10.10.10.1 Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - NAS-Port = 0 Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - NAS-Port-Id = "vlan100" Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - NAS-Port-Type = Virtual Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Service-Type = Framed-User Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Framed-Protocol = PPP Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Calling-Station-Id = "f6:cb:f6:40:1f:a0" Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Called-Station-Id = "1a:27:b5:27:bb:53" Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Class = 0x6375693d746573745f6267627261732c73753d3934323033392c736b3d686c3677777564716138396d2c626b69643d32323534303038392c626b7269643d332c6d763d3532393135313830303939372c6d743d3630353333342c676d743d3630343830302c73703d312c73723d2c61633d312c75693d3934323033392c6363693d3138382c63633d47656e6572616c2c61733d312c636f3d2c64623d3130323430302c75623d3130323430302c63626b69643d3232353430303930 Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Status-Type = Start Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Authentic = RADIUS Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Session-Id = "16fecbef21f8c2cf" Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Session-Time = 0 Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Input-Octets = 0 Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Output-Octets = 0 Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Input-Packets = 0 Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Output-Packets = 0 Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Input-Gigawords = 0 Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Output-Gigawords = 0 Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Framed-IP-Address = 10.0.0.3 Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Event-Timestamp = "Nov 23 2022 19:59:44 IST" Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Unique-Session-Id = "319ef2e5f83ff3c6e82f09959978097b" Wed Nov 23 20:08:23 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Read packet from /var/log/freeradius/radacct/detail.example.com/detail.work User-Name = "test_bgbras" NAS-Identifier = "demo-bng" NAS-IP-Address = 10.10.10.1 NAS-Port = 0 NAS-Port-Id = "vlan100" NAS-Port-Type = Virtual Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "f6:cb:f6:40:1f:a0" Called-Station-Id = "1a:27:b5:27:bb:53" Class = 0x6375693d746573745f6267627261732c73753d3934323033392c736b3d686c3677777564716138396d2c626b69643d32323534303038392c626b7269643d332c6d763d3532393135313830303939372c6d743d3630353333342c676d743d3630343830302c73703d312c73723d2c61633d312c75693d3934323033392c6363693d3138382c63633d47656e6572616c2c61733d312c636f3d2c64623d3130323430302c75623d3130323430302c63626b69643d3232353430303930 Acct-Status-Type = Start Acct-Authentic = RADIUS Acct-Session-Id = "16fecbef21f8c2cf" Acct-Session-Time = 0 Acct-Input-Octets = 0 Acct-Output-Octets = 0 Acct-Input-Packets = 0 Acct-Output-Packets = 0 Acct-Input-Gigawords = 0 Acct-Output-Gigawords = 0 Framed-IP-Address = 10.0.0.3 Event-Timestamp = "Nov 23 2022 19:59:44 IST" Acct-Unique-Session-Id = "319ef2e5f83ff3c6e82f09959978097b" Packet-Original-Timestamp = "Nov 23 2022 19:59:44 IST" Acct-Delay-Time = 519 Packet-Transmit-Counter = 1 Wed Nov 23 20:08:23 2022 : Debug: (0) Empty preacct section in virtual server "home.example.com". Using default return values. Wed Nov 23 20:08:23 2022 : Debug: (0) # Executing section accounting from file /etc/freeradius/sites-enabled/robust-proxy-accounting Wed Nov 23 20:08:23 2022 : Debug: (0) accounting { Wed Nov 23 20:08:23 2022 : Debug: (0) update control { Wed Nov 23 20:08:23 2022 : Debug: (0) &Proxy-To-Realm := 'acct_realm.example.com' Wed Nov 23 20:08:23 2022 : Debug: (0) } # update control = noop Wed Nov 23 20:08:23 2022 : Debug: (0) } # accounting = noop Wed Nov 23 20:08:23 2022 : Debug: Using home pool acct for realm acct_realm.example.com Wed Nov 23 20:08:23 2022 : Debug: (0) Starting proxy to home server 192.168.10.1 port 1813 Wed Nov 23 20:08:23 2022 : Debug: (0) server home.example.com { Wed Nov 23 20:08:23 2022 : Debug: (0) Empty pre-proxy section in virtual server "home.example.com". Using default return values. Wed Nov 23 20:08:23 2022 : Debug: (0) } Wed Nov 23 20:08:23 2022 : Debug: (0) proxy: Trying to allocate ID (0/2) Wed Nov 23 20:08:23 2022 : Debug: (0) proxy: Trying to open a new listener to the home server Wed Nov 23 20:08:23 2022 : Debug: Opened new proxy socket 'proxy address 10.10.10.1 port 48401' Wed Nov 23 20:08:23 2022 : Debug: Listening on proxy address 10.10.10.1 port 48401 Wed Nov 23 20:08:23 2022 : Debug: (0) proxy: Trying to allocate ID (1/2) Wed Nov 23 20:08:23 2022 : Debug: (0) proxy: request is now in proxy hash Wed Nov 23 20:08:23 2022 : Debug: (0) proxy: allocating destination 192.168.10.1 port 1813 - Id 122 Wed Nov 23 20:08:23 2022 : Debug: (0) Proxying request to home server 192.168.10.1 port 1813 timeout 6.000000 Wed Nov 23 20:08:23 2022 : Debug: Waking up in 0.3 seconds. Wed Nov 23 20:08:23 2022 : Debug: Ignoring spoofed proxy reply. Signature is invalid Wed Nov 23 20:08:23 2022 : Debug: Waking up in 0.1 seconds. Wed Nov 23 20:08:24 2022 : Debug: (0) Expecting proxy response no later than 5.666547 seconds from now Wed Nov 23 20:08:24 2022 : Debug: Waking up in 5.6 seconds. Wed Nov 23 20:08:29 2022 : Debug: (0) No proxy response, giving up on request and marking it done Wed Nov 23 20:08:29 2022 : Proxy: Marking home server 192.168.10.1 port 1813 as zombie (it has not responded in 6.000000 seconds). Wed Nov 23 20:08:29 2022 : Debug: (1) proxy: Trying to allocate ID (0/2) Wed Nov 23 20:08:29 2022 : Debug: (1) proxy: request is now in proxy hash Wed Nov 23 20:08:29 2022 : Debug: (1) proxy: allocating destination 192.168.10.1 port 1813 - Id 198 Wed Nov 23 20:08:29 2022 : Debug: PING: Waiting 4 seconds for response to ping Wed Nov 23 20:08:29 2022 : Debug: (1) Sent Accounting-Request Id 198 from 10.10.10.1:48401 to 192.168.10.1:1813 length 98 Wed Nov 23 20:08:29 2022 : Debug: (1) User-Name := "test_user_status_check" Wed Nov 23 20:08:29 2022 : Debug: (1) Acct-Status-Type := Stop Wed Nov 23 20:08:29 2022 : Debug: (1) Acct-Session-Id := "00000000" Wed Nov 23 20:08:29 2022 : Debug: (1) Event-Timestamp := "Nov 23 2022 20:08:29 IST" Wed Nov 23 20:08:29 2022 : Debug: (1) NAS-Identifier := "Status Check 0. Are you alive?" Wed Nov 23 20:08:29 2022 : Debug: PING: Next status packet in 30 seconds Wed Nov 23 20:08:29 2022 : ERROR: (0) Failing proxied request for user "test_bgbras", due to lack of any response from home server 192.168.10.1 port 1813 Wed Nov 23 20:08:29 2022 : Debug: (0) Clearing existing &reply: attributes Wed Nov 23 20:08:29 2022 : Debug: (0) Found Post-Proxy-Type Fail-Accounting Wed Nov 23 20:08:29 2022 : Debug: (0) server home.example.com { Wed Nov 23 20:08:29 2022 : Debug: (0) # Executing group from file /etc/freeradius/sites-enabled/robust-proxy-accounting Wed Nov 23 20:08:29 2022 : Debug: (0) Post-Proxy-Type Fail-Accounting { Wed Nov 23 20:08:29 2022 : Debug: (0) modsingle[post-proxy]: calling detail.example.com (rlm_detail) Wed Nov 23 20:08:29 2022 : Debug: /var/log/freeradius/radacct/detail.example.com/detail-%Y%m%d:%H:%G Wed Nov 23 20:08:29 2022 : Debug: Parsed xlat tree: Wed Nov 23 20:08:29 2022 : Debug: literal --> /var/log/freeradius/radacct/detail.example.com/detail- Wed Nov 23 20:08:29 2022 : Debug: percent --> Y Wed Nov 23 20:08:29 2022 : Debug: percent --> m Wed Nov 23 20:08:29 2022 : Debug: percent --> d Wed Nov 23 20:08:29 2022 : Debug: literal --> : Wed Nov 23 20:08:29 2022 : Debug: percent --> H Wed Nov 23 20:08:29 2022 : Debug: literal --> : Wed Nov 23 20:08:29 2022 : Debug: percent --> G Wed Nov 23 20:08:29 2022 : Debug: (0) detail.example.com: EXPAND /var/log/freeradius/radacct/detail.example.com/detail-%Y%m%d:%H:%G Wed Nov 23 20:08:29 2022 : Debug: (0) detail.example.com: --> /var/log/freeradius/radacct/detail.example.com/detail-20221123:20:08 Wed Nov 23 20:08:29 2022 : Debug: (0) detail.example.com: /var/log/freeradius/radacct/detail.example.com/detail-%Y%m%d:%H:%G expands to /var/log/freeradius/radacct/detail.example.com/detail-20221123:20:08 Wed Nov 23 20:08:29 2022 : WARNING: (0) detail.example.com: Suppressing infinite loop Wed Nov 23 20:08:29 2022 : Debug: (0) modsingle[post-proxy]: returned from detail.example.com (rlm_detail) Wed Nov 23 20:08:29 2022 : Debug: (0) [detail.example.com] = noop Wed Nov 23 20:08:29 2022 : Debug: (0) } # Post-Proxy-Type Fail-Accounting = noop Wed Nov 23 20:08:29 2022 : Debug: (0) } Wed Nov 23 20:08:29 2022 : Debug: (0) detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): No response to request. Will retry in 30 seconds Wed Nov 23 20:08:29 2022 : Debug: (0) Finished request Wed Nov 23 20:08:29 2022 : Debug: (0) Cleaning up request packet ID 0 with timestamp +0 due to done Wed Nov 23 20:08:29 2022 : Debug: Waking up in 3.9 seconds. Wed Nov 23 20:08:29 2022 : Debug: Ignoring spoofed proxy reply. Signature is invalid Wed Nov 23 20:08:29 2022 : Debug: Waking up in 3.8 seconds. Wed Nov 23 20:08:33 2022 : Error: No response to status check 1 ID 198 for home server 192.168.10.1 port 1813 Wed Nov 23 20:08:33 2022 : Debug: Waking up in 25.3 seconds. Best regards, Martin
On Nov 23, 2022, at 9:55 AM, Martin Zaharinov <micron10@gmail.com> wrote:
i try to switch from freeradius 2.2.10 to 3.2.1 After fix all configs and dictionary
As we said on the GitHub issue, just install 3.2.1. There's no need to "fix" the dictionaries. You do need to upgrade your v2 configuration to v3. This is documented in raddb/README.rst
May be i make wrong config or ?
See log :
Read it?
... Wed Nov 23 20:08:23 2022 : Debug: (0) Proxying request to home server 192.168.10.1 port 1813 timeout 6.000000 Wed Nov 23 20:08:23 2022 : Debug: Waking up in 0.3 seconds. Wed Nov 23 20:08:23 2022 : Debug: Ignoring spoofed proxy reply. Signature is invalid
Hmm... that seems interesting. Maybe check the shared secrets? We very much recommend reading the debug output. Alan DeKok.
Hi Alan on last line after stop radius with ctrl+ C i see this : Last error was: Received Accounting-Response packet from home server 192.168.10.1 port 1813 with invalid Response Authenticator! (Shared secret is incorrect.) but secret is set properly: home_server home1.example.com { type = acct src_ipaddr = 10.10.10.1 ipaddr = 192.168.10.1 port = 1813 secret = “secret" status_check = request username = "test_bgbras" response_window = 20 revive_interval = 120 check_interval = 30 num_answers_to_alive = 3 max_outstanding = 65536 zombie_period = 40 } Below will see log from develop mode: Wed Nov 23 22:08:31 2022 : Debug: Server was built with: Wed Nov 23 22:08:31 2022 : Debug: accounting : yes Wed Nov 23 22:08:31 2022 : Debug: authentication : yes Wed Nov 23 22:08:31 2022 : Debug: ascend-binary-attributes : yes Wed Nov 23 22:08:31 2022 : Debug: coa : yes Wed Nov 23 22:08:31 2022 : Debug: recv-coa-from-home-server : yes Wed Nov 23 22:08:31 2022 : Debug: control-socket : yes Wed Nov 23 22:08:31 2022 : Debug: detail : yes Wed Nov 23 22:08:31 2022 : Debug: dhcp : yes Wed Nov 23 22:08:31 2022 : Debug: dynamic-clients : yes Wed Nov 23 22:08:31 2022 : Debug: osfc2 : no Wed Nov 23 22:08:31 2022 : Debug: proxy : yes Wed Nov 23 22:08:31 2022 : Debug: regex-pcre : yes Wed Nov 23 22:08:31 2022 : Debug: regex-posix : no Wed Nov 23 22:08:31 2022 : Debug: regex-posix-extended : no Wed Nov 23 22:08:31 2022 : Debug: session-management : yes Wed Nov 23 22:08:31 2022 : Debug: stats : yes Wed Nov 23 22:08:31 2022 : Debug: systemd : no Wed Nov 23 22:08:31 2022 : Debug: tcp : yes Wed Nov 23 22:08:31 2022 : Debug: threads : yes Wed Nov 23 22:08:31 2022 : Debug: tls : yes Wed Nov 23 22:08:31 2022 : Debug: unlang : yes Wed Nov 23 22:08:31 2022 : Debug: vmps : yes Wed Nov 23 22:08:31 2022 : Debug: developer : yes Wed Nov 23 22:08:31 2022 : Debug: Server core libs: Wed Nov 23 22:08:31 2022 : Debug: freeradius-server : 3.2.2 Wed Nov 23 22:08:31 2022 : Debug: talloc : 2.3.* Wed Nov 23 22:08:31 2022 : Debug: ssl : 3.0.0g dev Wed Nov 23 22:08:31 2022 : Debug: pcre : 8.45 2021-06-15 Wed Nov 23 22:08:31 2022 : Debug: Endianness: Wed Nov 23 22:08:31 2022 : Debug: little Wed Nov 23 22:08:31 2022 : Debug: Compilation flags: Wed Nov 23 22:08:31 2022 : Debug: cppflags : -pipe -O3 -Wall -march=skylake -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -fno-stack-protector -mno-stackrealign -flto=4 -I/build/orionos/s64/include -I/build/orionos/s64/usr/include Wed Nov 23 22:08:31 2022 : Debug: cflags : -I. -Isrc -include src/freeradius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-strict-aliasing -Wno-date-time -pipe -O3 -Wall -march=skylake -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -fno-stack-protector -mno-stackrealign -flto=4 -I/build/orionos/s64/include -I/build/orionos/s64/usr/include -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -Wformat-y2k -Wno-format-extra-args -Wno-format-zero-length -Wno-cast-align -Wformat-nonliteral -Wformat-security -Wformat=2 -DWITH_VERIFY_PTR=1 -DIS_MODULE=1 Wed Nov 23 22:08:31 2022 : Debug: ldflags : -L/build/orionos/s64/lib -L/build/orionos/s64/usr/lib Wed Nov 23 22:08:31 2022 : Debug: libs : -lcrypto -lssl -ltalloc -latomic -lpcre -lcap -lresolv -ldl -lpthread -lz -lmariadb -lp11-kit -lhogweed -lgmp -lidn -lidn2 -lffi -lgnutls -lnettle -lmysqlclient -lreadline -lssl -lcrypto -lncurses -ltinfo -lltdl -liconv -lexpat -lpcre -lbz2 -llzma -lxml2 -lnl-3 -lnl-genl-3 -lnl-route-3 -ltinfo -ltirpc -lssl -lcrypto -lboost_regex -lboost_serialization -lboost_wserialization -lboost_system -lcap -lpcap -lreadline Wed Nov 23 22:08:31 2022 : Debug: Wed Nov 23 22:08:31 2022 : Info: FreeRADIUS Version 3.2.2 Wed Nov 23 22:08:31 2022 : Info: Copyright (C) 1999-2022 The FreeRADIUS server project and contributors Wed Nov 23 22:08:31 2022 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Wed Nov 23 22:08:31 2022 : Info: PARTICULAR PURPOSE Wed Nov 23 22:08:31 2022 : Info: You may redistribute copies of FreeRADIUS under the terms of the Wed Nov 23 22:08:31 2022 : Info: GNU General Public License Wed Nov 23 22:08:31 2022 : Info: For more information about these matters, see the file named COPYRIGHT Wed Nov 23 22:08:31 2022 : Info: Starting - reading configuration files ... Wed Nov 23 22:08:31 2022 : Debug: including dictionary file /etc/freeradius/dictionary Wed Nov 23 22:08:31 2022 : Debug: including dictionary file /etc/freeradius/dictionary Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/freeradius.conf Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/proxy.conf Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/clients.conf Wed Nov 23 22:08:31 2022 : Debug: including files in directory /etc/freeradius/policy.d/ Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/policy.d/accounting Wed Nov 23 22:08:31 2022 : Debug: including files in directory /etc/freeradius/modules/ Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/modules/expr Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/modules/exec Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/modules/chap Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/modules/pap Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/modules/detail Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/modules/detail.example.com Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/modules/preprocess Wed Nov 23 22:08:31 2022 : Debug: including files in directory /etc/freeradius/sites-enabled/ Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/sites-enabled/robust-proxy-accounting Wed Nov 23 22:08:31 2022 : Debug: including configuration file /etc/freeradius/sites-enabled/default Wed Nov 23 22:08:31 2022 : Debug: main { Wed Nov 23 22:08:31 2022 : Debug: security { Wed Nov 23 22:08:31 2022 : Debug: user = "freerad" Wed Nov 23 22:08:31 2022 : Debug: group = "freerad" Wed Nov 23 22:08:31 2022 : Debug: allow_core_dumps = no Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[38]: The item 'max_attributes' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[39]: The item 'reject_delay' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[40]: The item 'status_server' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[41]: The item 'allow_vulnerable_openssl' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: name = "radiusd" Wed Nov 23 22:08:31 2022 : Debug: prefix = "/usr" Wed Nov 23 22:08:31 2022 : Debug: localstatedir = "/var" Wed Nov 23 22:08:31 2022 : Debug: logdir = "/var/log/freeradius" Wed Nov 23 22:08:31 2022 : Debug: run_dir = "/var/run/freeradius" Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[2]: The item 'ignore_case' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[4]: The item 'sysconfdir' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[9]: The item 'log_file' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[10]: The item 'log_destination' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[12]: The item 'confdir' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[14]: The item 'libdir' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[15]: The item 'pidfile' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[16]: The item 'max_request_time' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[17]: The item 'cleanup_delay' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[18]: The item 'max_requests' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[29]: The item 'hostname_lookups' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[30]: The item 'regular_expressions' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[31]: The item 'extended_expressions' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[32]: The item 'checkrad' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[44]: The item 'proxy_requests' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: main { Wed Nov 23 22:08:31 2022 : Debug: name = "radiusd" Wed Nov 23 22:08:31 2022 : Debug: prefix = "/usr" Wed Nov 23 22:08:31 2022 : Debug: localstatedir = "/var" Wed Nov 23 22:08:31 2022 : Debug: sbindir = "/usr/sbin" Wed Nov 23 22:08:31 2022 : Debug: logdir = "/var/log/freeradius" Wed Nov 23 22:08:31 2022 : Debug: run_dir = "/var/run/freeradius" Wed Nov 23 22:08:31 2022 : Debug: libdir = "/usr/lib/freeradius" Wed Nov 23 22:08:31 2022 : Debug: radacctdir = "/var/log/freeradius/radacct" Wed Nov 23 22:08:31 2022 : Debug: hostname_lookups = no Wed Nov 23 22:08:31 2022 : Debug: max_request_time = 30 Wed Nov 23 22:08:31 2022 : Debug: cleanup_delay = 5 Wed Nov 23 22:08:31 2022 : Debug: max_requests = 1024 Wed Nov 23 22:08:31 2022 : Debug: postauth_client_lost = no Wed Nov 23 22:08:31 2022 : Debug: pidfile = "/var/run/freeradius/freeradius.pid" Wed Nov 23 22:08:31 2022 : Debug: checkrad = "/usr/sbin/checkrad" Wed Nov 23 22:08:31 2022 : Debug: debug_level = 0 Wed Nov 23 22:08:31 2022 : Debug: proxy_requests = yes Wed Nov 23 22:08:31 2022 : Debug: log { Wed Nov 23 22:08:31 2022 : Debug: stripped_names = no Wed Nov 23 22:08:31 2022 : Debug: auth = no Wed Nov 23 22:08:31 2022 : Debug: auth_badpass = no Wed Nov 23 22:08:31 2022 : Debug: auth_goodpass = no Wed Nov 23 22:08:31 2022 : Debug: msg_denied = "You are already logged in - access denied" Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: resources { Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: security { Wed Nov 23 22:08:31 2022 : Debug: max_attributes = 200 Wed Nov 23 22:08:31 2022 : Debug: reject_delay = 1.000000 Wed Nov 23 22:08:31 2022 : Debug: status_server = yes Wed Nov 23 22:08:31 2022 : Debug: allow_vulnerable_openssl = "no" Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[2]: The item 'ignore_case' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[4]: The item 'sysconfdir' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[9]: The item 'log_file' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[10]: The item 'log_destination' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[12]: The item 'confdir' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[30]: The item 'regular_expressions' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/freeradius.conf[31]: The item 'extended_expressions' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: freeradius: #### Loading Realms and Home Servers #### Wed Nov 23 22:08:31 2022 : Debug: proxy server { Wed Nov 23 22:08:31 2022 : Debug: retry_delay = 5 Wed Nov 23 22:08:31 2022 : Debug: retry_count = 3 Wed Nov 23 22:08:31 2022 : Debug: default_fallback = yes Wed Nov 23 22:08:31 2022 : Debug: dead_time = 120 Wed Nov 23 22:08:31 2022 : Debug: wake_all_if_all_dead = no Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/proxy.conf[2]: The item 'synchronous' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/proxy.conf[7]: The item 'post_proxy_authorize' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: home_server home1.example.com { Wed Nov 23 22:08:31 2022 : Debug: nonblock = no Wed Nov 23 22:08:31 2022 : Debug: ipaddr = 192.168.10.1 Wed Nov 23 22:08:31 2022 : Debug: port = 1813 Wed Nov 23 22:08:31 2022 : Debug: type = "acct" Wed Nov 23 22:08:31 2022 : Debug: secret = "secret" Wed Nov 23 22:08:31 2022 : Debug: src_ipaddr = "10.10.10.1" Wed Nov 23 22:08:31 2022 : Debug: response_window = 6.000000 Wed Nov 23 22:08:31 2022 : Debug: response_timeouts = 1 Wed Nov 23 22:08:31 2022 : Debug: max_outstanding = 65536 Wed Nov 23 22:08:31 2022 : Debug: zombie_period = 40 Wed Nov 23 22:08:31 2022 : Debug: status_check = "request" Wed Nov 23 22:08:31 2022 : Debug: ping_interval = 30 Wed Nov 23 22:08:31 2022 : Debug: check_timeout = 4 Wed Nov 23 22:08:31 2022 : Debug: num_answers_to_alive = 3 Wed Nov 23 22:08:31 2022 : Debug: revive_interval = 300 Wed Nov 23 22:08:31 2022 : Debug: username = "test_user_status_check" Wed Nov 23 22:08:31 2022 : Debug: limit { Wed Nov 23 22:08:31 2022 : Debug: max_connections = 16 Wed Nov 23 22:08:31 2022 : Debug: max_requests = 0 Wed Nov 23 22:08:31 2022 : Debug: lifetime = 0 Wed Nov 23 22:08:31 2022 : Debug: idle_timeout = 0 Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: coa { Wed Nov 23 22:08:31 2022 : Debug: irt = 2 Wed Nov 23 22:08:31 2022 : Debug: mrt = 16 Wed Nov 23 22:08:31 2022 : Debug: mrc = 5 Wed Nov 23 22:08:31 2022 : Debug: mrd = 30 Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: recv_coa { Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: realm LOCAL { Wed Nov 23 22:08:31 2022 : Debug: authhost = LOCAL Wed Nov 23 22:08:31 2022 : Debug: accthost = LOCAL Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: home_server_pool acct_pool.example.com { Wed Nov 23 22:08:31 2022 : Debug: type = load-balance Wed Nov 23 22:08:31 2022 : Debug: virtual_server = home.example.com Wed Nov 23 22:08:31 2022 : Debug: home_server = home1.example.com Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: realm acct_realm.example.com { Wed Nov 23 22:08:31 2022 : Debug: acct_pool = acct_pool.example.com Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: freeradius: #### Loading Clients #### Wed Nov 23 22:08:31 2022 : Debug: client 127.0.0.1 { Wed Nov 23 22:08:31 2022 : Debug: ipaddr = 10.10.10.1 Wed Nov 23 22:08:31 2022 : Debug: require_message_authenticator = no Wed Nov 23 22:08:31 2022 : Debug: secret = "secret" Wed Nov 23 22:08:31 2022 : Debug: limit { Wed Nov 23 22:08:31 2022 : Debug: max_connections = 16 Wed Nov 23 22:08:31 2022 : Debug: lifetime = 0 Wed Nov 23 22:08:31 2022 : Debug: idle_timeout = 30 Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: Adding client 10.10.10.1/32 (10.10.10.1) to prefix tree 32 Wed Nov 23 22:08:31 2022 : Info: Debugger not attached Wed Nov 23 22:08:31 2022 : Debug: freeradius: #### Instantiating modules #### Wed Nov 23 22:08:31 2022 : Debug: modules { Wed Nov 23 22:08:31 2022 : Debug: Loading rlm_expr with path: /usr/lib/freeradius/rlm_expr.so Wed Nov 23 22:08:31 2022 : Debug: Loaded rlm_expr, checking if it's valid Wed Nov 23 22:08:31 2022 : Debug: # Loaded module rlm_expr Wed Nov 23 22:08:31 2022 : Debug: # Loading module "expr" from file /etc/freeradius/modules/expr Wed Nov 23 22:08:31 2022 : Debug: expr { Wed Nov 23 22:08:31 2022 : Debug: safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: Loading rlm_exec with path: /usr/lib/freeradius/rlm_exec.so Wed Nov 23 22:08:31 2022 : Debug: Loaded rlm_exec, checking if it's valid Wed Nov 23 22:08:31 2022 : Debug: # Loaded module rlm_exec Wed Nov 23 22:08:31 2022 : Debug: # Loading module "exec" from file /etc/freeradius/modules/exec Wed Nov 23 22:08:31 2022 : Debug: exec { Wed Nov 23 22:08:31 2022 : Debug: wait = no Wed Nov 23 22:08:31 2022 : Debug: input_pairs = "request" Wed Nov 23 22:08:31 2022 : Debug: shell_escape = yes Wed Nov 23 22:08:31 2022 : Debug: timeout = 10 Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/modules/exec[28]: The item 'output' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: Loading rlm_chap with path: /usr/lib/freeradius/rlm_chap.so Wed Nov 23 22:08:31 2022 : Debug: Loaded rlm_chap, checking if it's valid Wed Nov 23 22:08:31 2022 : Debug: # Loaded module rlm_chap Wed Nov 23 22:08:31 2022 : Debug: # Loading module "chap" from file /etc/freeradius/modules/chap Wed Nov 23 22:08:31 2022 : Debug: Loading rlm_pap with path: /usr/lib/freeradius/rlm_pap.so Wed Nov 23 22:08:31 2022 : Debug: Loaded rlm_pap, checking if it's valid Wed Nov 23 22:08:31 2022 : Debug: # Loaded module rlm_pap Wed Nov 23 22:08:31 2022 : Debug: # Loading module "pap" from file /etc/freeradius/modules/pap Wed Nov 23 22:08:31 2022 : Debug: pap { Wed Nov 23 22:08:31 2022 : Debug: normalise = yes Wed Nov 23 22:08:31 2022 : Warning: /etc/freeradius/modules/pap[21]: The item 'auto_header' is defined, but is unused by the configuration Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: Loading rlm_detail with path: /usr/lib/freeradius/rlm_detail.so Wed Nov 23 22:08:31 2022 : Debug: Loaded rlm_detail, checking if it's valid Wed Nov 23 22:08:31 2022 : Debug: # Loaded module rlm_detail Wed Nov 23 22:08:31 2022 : Debug: # Loading module "detail" from file /etc/freeradius/modules/detail Wed Nov 23 22:08:31 2022 : Debug: detail { Wed Nov 23 22:08:31 2022 : Debug: filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" Wed Nov 23 22:08:31 2022 : Debug: header = "%t" Wed Nov 23 22:08:31 2022 : Debug: permissions = 384 Wed Nov 23 22:08:31 2022 : Debug: locking = no Wed Nov 23 22:08:31 2022 : Debug: escape_filenames = no Wed Nov 23 22:08:31 2022 : Debug: log_packet_header = no Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: # Loading module "detail.example.com" from file /etc/freeradius/modules/detail.example.com Wed Nov 23 22:08:31 2022 : Debug: detail detail.example.com { Wed Nov 23 22:08:31 2022 : Debug: filename = "/var/log/freeradius/radacct/detail.example.com/detail-%Y%m%d:%H:%G" Wed Nov 23 22:08:31 2022 : Debug: header = "%t" Wed Nov 23 22:08:31 2022 : Debug: permissions = 384 Wed Nov 23 22:08:31 2022 : Debug: locking = no Wed Nov 23 22:08:31 2022 : Debug: escape_filenames = no Wed Nov 23 22:08:31 2022 : Debug: log_packet_header = no Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: Loading rlm_preprocess with path: /usr/lib/freeradius/rlm_preprocess.so Wed Nov 23 22:08:31 2022 : Debug: Loaded rlm_preprocess, checking if it's valid Wed Nov 23 22:08:31 2022 : Debug: # Loaded module rlm_preprocess Wed Nov 23 22:08:31 2022 : Debug: # Loading module "preprocess" from file /etc/freeradius/modules/preprocess Wed Nov 23 22:08:31 2022 : Debug: preprocess { Wed Nov 23 22:08:31 2022 : Debug: huntgroups = "/etc/freeradius/huntgroups" Wed Nov 23 22:08:31 2022 : Debug: hints = "/etc/freeradius/hints" Wed Nov 23 22:08:31 2022 : Debug: with_ascend_hack = no Wed Nov 23 22:08:31 2022 : Debug: ascend_channels_per_line = 23 Wed Nov 23 22:08:31 2022 : Debug: with_ntdomain_hack = no Wed Nov 23 22:08:31 2022 : Debug: with_specialix_jetstream_hack = no Wed Nov 23 22:08:31 2022 : Debug: with_cisco_vsa_hack = no Wed Nov 23 22:08:31 2022 : Debug: with_alvarion_vsa_hack = no Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: instantiate { Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: # Instantiating module "pap" from file /etc/freeradius/modules/pap Wed Nov 23 22:08:31 2022 : Debug: # Instantiating module "detail" from file /etc/freeradius/modules/detail Wed Nov 23 22:08:31 2022 : Debug: # Instantiating module "detail.example.com" from file /etc/freeradius/modules/detail.example.com Wed Nov 23 22:08:31 2022 : Debug: # Instantiating module "preprocess" from file /etc/freeradius/modules/preprocess Wed Nov 23 22:08:31 2022 : Debug: reading pairlist file /etc/freeradius/huntgroups Wed Nov 23 22:08:31 2022 : Debug: reading pairlist file /etc/freeradius/hints Wed Nov 23 22:08:31 2022 : Debug: } # modules Wed Nov 23 22:08:31 2022 : Debug: freeradius: #### Loading Virtual Servers #### Wed Nov 23 22:08:31 2022 : Debug: server { # from file /etc/freeradius/freeradius.conf Wed Nov 23 22:08:31 2022 : Error: /etc/freeradius/sites-enabled/default[1]: The authorize section should be inside of a 'server { ... }' block! Wed Nov 23 22:08:31 2022 : Debug: authorize { Wed Nov 23 22:08:31 2022 : Debug: preprocess Wed Nov 23 22:08:31 2022 : Debug: chap Wed Nov 23 22:08:31 2022 : Debug: pap Wed Nov 23 22:08:31 2022 : Debug: } # authorize Wed Nov 23 22:08:31 2022 : Error: /etc/freeradius/sites-enabled/default[18]: The preacct section should be inside of a 'server { ... }' block! Wed Nov 23 22:08:31 2022 : Debug: preacct { Wed Nov 23 22:08:31 2022 : Debug: preprocess Wed Nov 23 22:08:31 2022 : Debug: policy acct_unique { Wed Nov 23 22:08:31 2022 : Debug: update { Wed Nov 23 22:08:31 2022 : Debug: &Tmp-String-9 := "ai:" Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: if ("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/ && "%{string:&Class}" =~ /^ai:([0-9a-f]{32})/) { Wed Nov 23 22:08:31 2022 : Debug: update { Wed Nov 23 22:08:31 2022 : Debug: &Acct-Unique-Session-Id := "%{md5:%{1},%{Acct-Session-ID}}" Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: else { Wed Nov 23 22:08:31 2022 : Debug: update { Wed Nov 23 22:08:31 2022 : Debug: &Acct-Unique-Session-Id := "%{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}" Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: update { Wed Nov 23 22:08:31 2022 : Debug: &Tmp-String-9 !* ANY Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: } # preacct Wed Nov 23 22:08:31 2022 : Error: /etc/freeradius/sites-enabled/default[23]: The accounting section should be inside of a 'server { ... }' block! Wed Nov 23 22:08:31 2022 : Debug: accounting { Wed Nov 23 22:08:31 2022 : Debug: detail Wed Nov 23 22:08:31 2022 : Debug: detail.example.com Wed Nov 23 22:08:31 2022 : Debug: } # accounting Wed Nov 23 22:08:31 2022 : Debug: } # server Wed Nov 23 22:08:31 2022 : Debug: server home.example.com { # from file /etc/freeradius/sites-enabled/robust-proxy-accounting Wed Nov 23 22:08:31 2022 : Debug: accounting { Wed Nov 23 22:08:31 2022 : Debug: update { Wed Nov 23 22:08:31 2022 : Debug: &control:Proxy-To-Realm := 'acct_realm.example.com' Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: } # accounting Wed Nov 23 22:08:31 2022 : Debug: post-proxy { Wed Nov 23 22:08:31 2022 : Debug: Compiling Post-Proxy-Type Fail-Accounting for attr Post-Proxy-Type Wed Nov 23 22:08:31 2022 : Debug: group { Wed Nov 23 22:08:31 2022 : Debug: detail.example.com Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: Compiling Post-Proxy-Type Fail-Authentication for attr Post-Proxy-Type Wed Nov 23 22:08:31 2022 : Debug: group { Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: } # post-proxy Wed Nov 23 22:08:31 2022 : Debug: } # server home.example.com Wed Nov 23 22:08:31 2022 : Debug: Created signal pipe. Read end FD 5, write end FD 6 Wed Nov 23 22:08:31 2022 : Debug: freeradius: #### Opening IP addresses and Ports #### Wed Nov 23 22:08:31 2022 : Debug: Loading proto_acct with path: /usr/lib/freeradius/proto_acct.so Wed Nov 23 22:08:31 2022 : Debug: Loading proto_acct failed: /usr/lib/freeradius/proto_acct.so: cannot open shared object file: No such file or directory - No such file or directory Wed Nov 23 22:08:31 2022 : Debug: Loading library using linker search path(s) Wed Nov 23 22:08:31 2022 : Debug: Defaults : /lib:/usr/lib Wed Nov 23 22:08:31 2022 : Debug: Failed with error: proto_acct.so: cannot open shared object file: No such file or directory Wed Nov 23 22:08:31 2022 : Debug: listen { Wed Nov 23 22:08:31 2022 : Debug: type = "acct" Wed Nov 23 22:08:31 2022 : Debug: ipaddr = * Wed Nov 23 22:08:31 2022 : Debug: port = 0 Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: Loading proto_detail with path: /usr/lib/freeradius/proto_detail.so Wed Nov 23 22:08:31 2022 : Debug: Loading proto_detail failed: /usr/lib/freeradius/proto_detail.so: cannot open shared object file: No such file or directory - No such file or directory Wed Nov 23 22:08:31 2022 : Debug: Loading library using linker search path(s) Wed Nov 23 22:08:31 2022 : Debug: Defaults : /lib:/usr/lib Wed Nov 23 22:08:31 2022 : Debug: Failed with error: proto_detail.so: cannot open shared object file: No such file or directory Wed Nov 23 22:08:31 2022 : Debug: listen { Wed Nov 23 22:08:31 2022 : Debug: type = "detail" Wed Nov 23 22:08:31 2022 : Debug: listen { Wed Nov 23 22:08:31 2022 : Debug: filename = "/var/log/freeradius/radacct/detail.example.com/detail-*:*" Wed Nov 23 22:08:31 2022 : Debug: load_factor = 10 Wed Nov 23 22:08:31 2022 : Debug: poll_interval = 1 Wed Nov 23 22:08:31 2022 : Debug: retry_interval = 30 Wed Nov 23 22:08:31 2022 : Debug: one_shot = no Wed Nov 23 22:08:31 2022 : Debug: track = no Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: } Wed Nov 23 22:08:31 2022 : Debug: Listening on acct address * port 1813 Wed Nov 23 22:08:31 2022 : Debug: Listening on detail file /var/log/freeradius/radacct/detail.example.com/detail-*:* as server home.example.com Wed Nov 23 22:08:31 2022 : Info: Ready to process requests Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - User-Name = "test_bgbras" Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - NAS-Identifier = "demo-bng" Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - NAS-IP-Address = 10.10.10.1 Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - NAS-Port = 0 Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - NAS-Port-Id = "vlan100" Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - NAS-Port-Type = Virtual Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Service-Type = Framed-User Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Framed-Protocol = PPP Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Calling-Station-Id = "f6:cb:f6:40:1f:a0" Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Called-Station-Id = "1a:27:b5:27:bb:53" Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Class = 0x6375693d746573745f6267627261732c73753d3934323033392c736b3d726a70366a6f656e667561682c626b69643d32323534303038392c626b7269643d332c6d763d3532393135313830303939372c6d743d3630343831352c676d743d3630343830302c73703d312c73723d2c61633d312c75693d3934323033392c6363693d3138382c63633d47656e6572616c2c61733d312c636f3d2c64623d3130323430302c75623d3130323430302c63626b69643d3232353430303930 Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Status-Type = Start Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Authentic = RADIUS Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Session-Id = "4e48d224df6f0c10" Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Session-Time = 0 Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Input-Octets = 0 Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Output-Octets = 0 Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Input-Packets = 0 Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Output-Packets = 0 Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Input-Gigawords = 0 Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Output-Gigawords = 0 Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Framed-IP-Address = 10.0.0.1 Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Event-Timestamp = "Nov 23 2022 22:06:45 IST" Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Trying to read VP from line - Acct-Unique-Session-Id = "994228513543d72dc0dd509c7ce37743" Wed Nov 23 22:08:31 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Read packet from /var/log/freeradius/radacct/detail.example.com/detail.work User-Name = "test_bgbras" NAS-Identifier = "demo-bng" NAS-IP-Address = 10.10.10.1 NAS-Port = 0 NAS-Port-Id = "vlan100" NAS-Port-Type = Virtual Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "f6:cb:f6:40:1f:a0" Called-Station-Id = "1a:27:b5:27:bb:53" Class = 0x6375693d746573745f6267627261732c73753d3934323033392c736b3d726a70366a6f656e667561682c626b69643d32323534303038392c626b7269643d332c6d763d3532393135313830303939372c6d743d3630343831352c676d743d3630343830302c73703d312c73723d2c61633d312c75693d3934323033392c6363693d3138382c63633d47656e6572616c2c61733d312c636f3d2c64623d3130323430302c75623d3130323430302c63626b69643d3232353430303930 Acct-Status-Type = Start Acct-Authentic = RADIUS Acct-Session-Id = "4e48d224df6f0c10" Acct-Session-Time = 0 Acct-Input-Octets = 0 Acct-Output-Octets = 0 Acct-Input-Packets = 0 Acct-Output-Packets = 0 Acct-Input-Gigawords = 0 Acct-Output-Gigawords = 0 Framed-IP-Address = 10.0.0.1 Event-Timestamp = "Nov 23 2022 22:06:45 IST" Acct-Unique-Session-Id = "994228513543d72dc0dd509c7ce37743" Packet-Original-Timestamp = "Nov 23 2022 22:06:45 IST" Acct-Delay-Time = 106 Packet-Transmit-Counter = 1 Wed Nov 23 22:08:31 2022 : Debug: (0) Empty preacct section in virtual server "home.example.com". Using default return values. Wed Nov 23 22:08:31 2022 : Debug: (0) # Executing section accounting from file /etc/freeradius/sites-enabled/robust-proxy-accounting Wed Nov 23 22:08:31 2022 : Debug: (0) accounting { Wed Nov 23 22:08:31 2022 : Debug: (0) update control { Wed Nov 23 22:08:31 2022 : Debug: (0) &Proxy-To-Realm := 'acct_realm.example.com' Wed Nov 23 22:08:31 2022 : Debug: (0) } # update control = noop Wed Nov 23 22:08:31 2022 : Debug: (0) } # accounting = noop Wed Nov 23 22:08:31 2022 : Debug: Using home pool acct for realm acct_realm.example.com Wed Nov 23 22:08:31 2022 : Debug: (0) Starting proxy to home server 192.168.10.1 port 1813 Wed Nov 23 22:08:31 2022 : Debug: (0) server home.example.com { Wed Nov 23 22:08:31 2022 : Debug: (0) Empty pre-proxy section in virtual server "home.example.com". Using default return values. Wed Nov 23 22:08:31 2022 : Debug: (0) } Wed Nov 23 22:08:31 2022 : Debug: (0) proxy: Trying to allocate ID (0/2) Wed Nov 23 22:08:31 2022 : Debug: (0) proxy: Trying to open a new listener to the home server Wed Nov 23 22:08:31 2022 : Debug: Opened new proxy socket 'proxy address 10.10.10.1 port 38663' Wed Nov 23 22:08:31 2022 : Debug: Listening on proxy address 10.10.10.1 port 38663 Wed Nov 23 22:08:31 2022 : Debug: (0) proxy: Trying to allocate ID (1/2) Wed Nov 23 22:08:31 2022 : Debug: (0) proxy: request is now in proxy hash Wed Nov 23 22:08:31 2022 : Debug: (0) proxy: allocating destination 192.168.10.1 port 1813 - Id 176 Wed Nov 23 22:08:31 2022 : Debug: (0) Proxying request to home server 192.168.10.1 port 1813 timeout 6.000000 01 0d 74 65 73 74 5f 62 67 62 72 61 73 20 0a 64 65 6d 6f 2d 62 6e 67 04 06 4e 8e 20 46 05 06 00 00 00 00 57 09 76 6c 61 6e 31 30 30 3d 06 00 00 00 05 06 06 00 00 00 02 07 06 00 00 00 01 1f 13 66 36 3a 63 62 3a 66 36 3a 34 30 3a 31 66 3a 61 30 1e 13 31 61 3a 32 37 3a 62 35 3a 32 37 3a 62 62 3a 35 33 19 bd 63 75 69 3d 74 65 73 74 5f 62 67 62 72 61 73 2c 73 75 3d 39 34 32 30 33 39 2c 73 6b 3d 72 6a 70 36 6a 6f 65 6e 66 75 61 68 2c 62 6b 69 64 3d 32 32 35 34 30 30 38 39 2c 62 6b 72 69 64 3d 33 2c 6d 76 3d 35 32 39 31 35 31 38 30 30 39 39 37 2c 6d 74 3d 36 30 34 38 31 35 2c 67 6d 74 3d 36 30 34 38 30 30 2c 73 70 3d 31 2c 73 72 3d 2c 61 63 3d 31 2c 75 69 3d 39 34 32 30 33 39 2c 63 63 69 3d 31 38 38 2c 63 63 3d 47 65 6e 65 72 61 6c 2c 61 73 3d 31 2c 63 6f 3d 2c 64 62 3d 31 30 32 34 30 30 2c 75 62 3d 31 30 32 34 30 30 2c 63 62 6b 69 64 3d 32 32 35 34 30 30 39 30 28 06 00 00 00 01 2d 06 00 00 00 01 2c 12 34 65 34 38 64 32 32 34 64 66 36 66 30 63 31 30 2e 06 00 00 00 00 2a 06 00 00 00 00 2b 06 00 00 00 00 2f 06 00 00 00 00 30 06 00 00 00 00 34 06 00 00 00 00 35 06 00 00 00 00 08 06 0a 00 00 01 37 06 63 7e 4c 1d 29 06 00 00 00 6a 21 03 30 Socket: 13 Proto: 17 Src IP: 10.10.10.1 port: 38663 Dst IP: 192.168.10.1 port: 1813 Code: (4) Accounting-Request Id: 176 Length: 402 Vector: 00000000000000000000000000000000 Data: 01 0d 74 65 73 74 5f 62 67 62 72 61 73 20 0a 64 65 6d 6f 2d 62 6e 67 04 06 4e 8e 20 46 05 06 00 00 00 00 57 09 76 6c 61 6e 31 30 30 3d 06 00 00 00 05 06 06 00 00 00 02 07 06 00 00 00 01 1f 13 66 36 3a 63 62 3a 66 36 3a 34 30 3a 31 66 3a 61 30 1e 13 31 61 3a 32 37 3a 62 35 3a 32 37 3a 62 62 3a 35 33 19 bd 63 75 69 3d 74 65 73 74 5f 62 67 62 72 61 73 2c 73 75 3d 39 34 32 30 33 39 2c 73 6b 3d 72 6a 70 36 6a 6f 65 6e 66 75 61 68 2c 62 6b 69 64 3d 32 32 35 34 30 30 38 39 2c 62 6b 72 69 64 3d 33 2c 6d 76 3d 35 32 39 31 35 31 38 30 30 39 39 37 2c 6d 74 3d 36 30 34 38 31 35 2c 67 6d 74 3d 36 30 34 38 30 30 2c 73 70 3d 31 2c 73 72 3d 2c 61 63 3d 31 2c 75 69 3d 39 34 32 30 33 39 2c 63 63 69 3d 31 38 38 2c 63 63 3d 47 65 6e 65 72 61 6c 2c 61 73 3d 31 2c 63 6f 3d 2c 64 62 3d 31 30 32 34 30 30 2c 75 62 3d 31 30 32 34 30 30 2c 63 62 6b 69 64 3d 32 32 35 34 30 30 39 30 28 06 00 00 00 01 2d 06 00 00 00 01 2c 12 34 65 34 38 64 32 32 34 64 66 36 66 30 63 31 30 2e 06 00 00 00 00 2a 06 00 00 00 00 2b 06 00 00 00 00 2f 06 00 00 00 00 30 06 00 00 00 00 34 06 00 00 00 00 35 06 00 00 00 00 08 06 0a 00 00 01 37 06 63 7e 4c 1d 29 06 00 00 00 6a 21 03 30 Socket: 13 Proto: 17 Src IP: 10.10.10.1 port: 38663 Dst IP: 192.168.10.1 port: 1813 Code: (4) Accounting-Request Id: 176 Length: 402 Vector: b37fbdebc7cc8eb12816dcd2329e9053 Data: 01 0d 74 65 73 74 5f 62 67 62 72 61 73 20 0a 64 65 6d 6f 2d 62 6e 67 04 06 4e 8e 20 46 05 06 00 00 00 00 57 09 76 6c 61 6e 31 30 30 3d 06 00 00 00 05 06 06 00 00 00 02 07 06 00 00 00 01 1f 13 66 36 3a 63 62 3a 66 36 3a 34 30 3a 31 66 3a 61 30 1e 13 31 61 3a 32 37 3a 62 35 3a 32 37 3a 62 62 3a 35 33 19 bd 63 75 69 3d 74 65 73 74 5f 62 67 62 72 61 73 2c 73 75 3d 39 34 32 30 33 39 2c 73 6b 3d 72 6a 70 36 6a 6f 65 6e 66 75 61 68 2c 62 6b 69 64 3d 32 32 35 34 30 30 38 39 2c 62 6b 72 69 64 3d 33 2c 6d 76 3d 35 32 39 31 35 31 38 30 30 39 39 37 2c 6d 74 3d 36 30 34 38 31 35 2c 67 6d 74 3d 36 30 34 38 30 30 2c 73 70 3d 31 2c 73 72 3d 2c 61 63 3d 31 2c 75 69 3d 39 34 32 30 33 39 2c 63 63 69 3d 31 38 38 2c 63 63 3d 47 65 6e 65 72 61 6c 2c 61 73 3d 31 2c 63 6f 3d 2c 64 62 3d 31 30 32 34 30 30 2c 75 62 3d 31 30 32 34 30 30 2c 63 62 6b 69 64 3d 32 32 35 34 30 30 39 30 28 06 00 00 00 01 2d 06 00 00 00 01 2c 12 34 65 34 38 64 32 32 34 64 66 36 66 30 63 31 30 2e 06 00 00 00 00 2a 06 00 00 00 00 2b 06 00 00 00 00 2f 06 00 00 00 00 30 06 00 00 00 00 34 06 00 00 00 00 35 06 00 00 00 00 08 06 0a 00 00 01 37 06 63 7e 4c 1d 29 06 00 00 00 6a 21 03 30 Wed Nov 23 22:08:31 2022 : Debug: Waking up in 0.3 seconds. Socket: 13 Proto: 0 Src IP: 192.168.10.1 port: 1813 Dst IP: 10.10.10.1 port: 38663 Code: (5) Accounting-Response Id: 176 Length: 20 Vector: f78be0bb643267411026c59d02ad7669 Wed Nov 23 22:08:31 2022 : Debug: Ignoring spoofed proxy reply. Signature is invalid Wed Nov 23 22:08:31 2022 : Debug: Waking up in 0.1 seconds. Wed Nov 23 22:08:31 2022 : Debug: (0) Expecting proxy response no later than 5.666579 seconds from now Wed Nov 23 22:08:31 2022 : Debug: Waking up in 5.6 seconds. Wed Nov 23 22:08:37 2022 : Debug: (0) No proxy response, giving up on request and marking it done Wed Nov 23 22:08:37 2022 : Proxy: Marking home server 192.168.10.1 port 1813 as zombie (it has not responded in 6.000000 seconds). Wed Nov 23 22:08:37 2022 : Debug: (1) proxy: Trying to allocate ID (0/2) Wed Nov 23 22:08:37 2022 : Debug: (1) proxy: request is now in proxy hash Wed Nov 23 22:08:37 2022 : Debug: (1) proxy: allocating destination 192.168.10.1 port 1813 - Id 44 Wed Nov 23 22:08:37 2022 : Debug: PING: Waiting 4 seconds for response to ping 01 18 74 65 73 74 5f 75 73 65 72 5f 73 74 61 74 75 73 5f 63 68 65 63 6b 28 06 00 00 00 02 2c 0a 30 30 30 30 30 30 30 30 37 06 63 7e 4c 8d 20 20 53 74 61 74 75 73 20 43 68 65 63 6b 20 30 2e 20 41 72 65 20 79 6f 75 20 61 6c 69 76 65 3f Socket: 13 Proto: 17 Src IP: 10.10.10.1 port: 38663 Dst IP: 192.168.10.1 port: 1813 Code: (4) Accounting-Request Id: 44 Length: 98 Vector: 00000000000000000000000000000000 Data: 01 18 74 65 73 74 5f 75 73 65 72 5f 73 74 61 74 75 73 5f 63 68 65 63 6b 28 06 00 00 00 02 2c 0a 30 30 30 30 30 30 30 30 37 06 63 7e 4c 8d 20 20 53 74 61 74 75 73 20 43 68 65 63 6b 20 30 2e 20 41 72 65 20 79 6f 75 20 61 6c 69 76 65 3f Wed Nov 23 22:08:37 2022 : Debug: (1) Sent Accounting-Request Id 44 from 10.10.10.1:38663 to 192.168.10.1:1813 length 98 Wed Nov 23 22:08:37 2022 : Debug: (1) User-Name := "test_user_status_check" Wed Nov 23 22:08:37 2022 : Debug: (1) Acct-Status-Type := Stop Wed Nov 23 22:08:37 2022 : Debug: (1) Acct-Session-Id := "00000000" Wed Nov 23 22:08:37 2022 : Debug: (1) Event-Timestamp := "Nov 23 2022 22:08:37 IST" Wed Nov 23 22:08:37 2022 : Debug: (1) NAS-Identifier := "Status Check 0. Are you alive?" Socket: 13 Proto: 17 Src IP: 10.10.10.1 port: 38663 Dst IP: 192.168.10.1 port: 1813 Code: (4) Accounting-Request Id: 44 Length: 98 Vector: 83bff5db562147bbbf4f22bf060e6ccd Data: 01 18 74 65 73 74 5f 75 73 65 72 5f 73 74 61 74 75 73 5f 63 68 65 63 6b 28 06 00 00 00 02 2c 0a 30 30 30 30 30 30 30 30 37 06 63 7e 4c 8d 20 20 53 74 61 74 75 73 20 43 68 65 63 6b 20 30 2e 20 41 72 65 20 79 6f 75 20 61 6c 69 76 65 3f Wed Nov 23 22:08:37 2022 : Debug: PING: Next status packet in 30 seconds Wed Nov 23 22:08:37 2022 : ERROR: (0) Failing proxied request for user "test_bgbras", due to lack of any response from home server 192.168.10.1 port 1813 Wed Nov 23 22:08:37 2022 : Debug: (0) Clearing existing &reply: attributes Wed Nov 23 22:08:37 2022 : Debug: (0) Found Post-Proxy-Type Fail-Accounting Wed Nov 23 22:08:37 2022 : Debug: (0) server home.example.com { Wed Nov 23 22:08:37 2022 : Debug: (0) # Executing group from file /etc/freeradius/sites-enabled/robust-proxy-accounting Wed Nov 23 22:08:37 2022 : Debug: (0) Post-Proxy-Type Fail-Accounting { Wed Nov 23 22:08:37 2022 : Debug: (0) modsingle[post-proxy]: calling detail.example.com (rlm_detail) Wed Nov 23 22:08:37 2022 : Debug: /var/log/freeradius/radacct/detail.example.com/detail-%Y%m%d:%H:%G Wed Nov 23 22:08:37 2022 : Debug: Parsed xlat tree: Wed Nov 23 22:08:37 2022 : Debug: literal --> /var/log/freeradius/radacct/detail.example.com/detail- Wed Nov 23 22:08:37 2022 : Debug: percent --> Y Wed Nov 23 22:08:37 2022 : Debug: percent --> m Wed Nov 23 22:08:37 2022 : Debug: percent --> d Wed Nov 23 22:08:37 2022 : Debug: literal --> : Wed Nov 23 22:08:37 2022 : Debug: percent --> H Wed Nov 23 22:08:37 2022 : Debug: literal --> : Wed Nov 23 22:08:37 2022 : Debug: percent --> G Wed Nov 23 22:08:37 2022 : Debug: (0) detail.example.com: EXPAND /var/log/freeradius/radacct/detail.example.com/detail-%Y%m%d:%H:%G Wed Nov 23 22:08:37 2022 : Debug: (0) detail.example.com: --> /var/log/freeradius/radacct/detail.example.com/detail-20221123:22:08 Wed Nov 23 22:08:37 2022 : Debug: (0) detail.example.com: /var/log/freeradius/radacct/detail.example.com/detail-%Y%m%d:%H:%G expands to /var/log/freeradius/radacct/detail.example.com/detail-20221123:22:08 Wed Nov 23 22:08:37 2022 : WARNING: (0) detail.example.com: Suppressing infinite loop Wed Nov 23 22:08:37 2022 : Debug: (0) modsingle[post-proxy]: returned from detail.example.com (rlm_detail) Wed Nov 23 22:08:37 2022 : Debug: (0) [detail.example.com] = noop Wed Nov 23 22:08:37 2022 : Debug: (0) } # Post-Proxy-Type Fail-Accounting = noop Wed Nov 23 22:08:37 2022 : Debug: (0) } Wed Nov 23 22:08:37 2022 : Debug: (0) detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): No response to request. Will retry in 30 seconds Wed Nov 23 22:08:37 2022 : Debug: (0) Finished request Wed Nov 23 22:08:37 2022 : Debug: (0) Cleaning up request packet ID 0 with timestamp +0 due to done Wed Nov 23 22:08:37 2022 : Debug: Waking up in 3.9 seconds. Socket: 13 Proto: 0 Src IP: 192.168.10.1 port: 1813 Dst IP: 10.10.10.1 port: 38663 Code: (5) Accounting-Response Id: 44 Length: 20 Vector: de2b86fec5cb20c27752769f539136ee Wed Nov 23 22:08:37 2022 : Debug: Ignoring spoofed proxy reply. Signature is invalid Wed Nov 23 22:08:37 2022 : Debug: Waking up in 3.8 seconds. Wed Nov 23 22:08:41 2022 : Error: No response to status check 1 ID 44 for home server 192.168.10.1 port 1813 Wed Nov 23 22:08:41 2022 : Debug: Waking up in 24.0 seconds. Wed Nov 23 22:09:05 2022 : Debug: (2) proxy: Trying to allocate ID (0/2) Wed Nov 23 22:09:05 2022 : Debug: (2) proxy: request is now in proxy hash Wed Nov 23 22:09:05 2022 : Debug: (2) proxy: allocating destination 192.168.10.1 port 1813 - Id 131 Wed Nov 23 22:09:05 2022 : Debug: PING: Waiting 4 seconds for response to ping 01 18 74 65 73 74 5f 75 73 65 72 5f 73 74 61 74 75 73 5f 63 68 65 63 6b 28 06 00 00 00 02 2c 0a 30 30 30 30 30 30 30 30 37 06 63 7e 4c a9 20 20 53 74 61 74 75 73 20 43 68 65 63 6b 20 31 2e 20 41 72 65 20 79 6f 75 20 61 6c 69 76 65 3f Socket: 13 Proto: 17 Src IP: 10.10.10.1 port: 38663 Dst IP: 192.168.10.1 port: 1813 Code: (4) Accounting-Request Id: 131 Length: 98 Vector: 00000000000000000000000000000000 Data: 01 18 74 65 73 74 5f 75 73 65 72 5f 73 74 61 74 75 73 5f 63 68 65 63 6b 28 06 00 00 00 02 2c 0a 30 30 30 30 30 30 30 30 37 06 63 7e 4c a9 20 20 53 74 61 74 75 73 20 43 68 65 63 6b 20 31 2e 20 41 72 65 20 79 6f 75 20 61 6c 69 76 65 3f Wed Nov 23 22:09:05 2022 : Debug: (2) Sent Accounting-Request Id 131 from 10.10.10.1:38663 to 192.168.10.1:1813 length 98 Wed Nov 23 22:09:05 2022 : Debug: (2) User-Name := "test_user_status_check" Wed Nov 23 22:09:05 2022 : Debug: (2) Acct-Status-Type := Stop Wed Nov 23 22:09:05 2022 : Debug: (2) Acct-Session-Id := "00000000" Wed Nov 23 22:09:05 2022 : Debug: (2) Event-Timestamp := "Nov 23 2022 22:09:05 IST" Wed Nov 23 22:09:05 2022 : Debug: (2) NAS-Identifier := "Status Check 1. Are you alive?" Socket: 13 Proto: 17 Src IP: 10.10.10.1 port: 38663 Dst IP: 192.168.10.1 port: 1813 Code: (4) Accounting-Request Id: 131 Length: 98 Vector: 7d768f15d70c03c356df8a12e8dfa48b Data: 01 18 74 65 73 74 5f 75 73 65 72 5f 73 74 61 74 75 73 5f 63 68 65 63 6b 28 06 00 00 00 02 2c 0a 30 30 30 30 30 30 30 30 37 06 63 7e 4c a9 20 20 53 74 61 74 75 73 20 43 68 65 63 6b 20 31 2e 20 41 72 65 20 79 6f 75 20 61 6c 69 76 65 3f Wed Nov 23 22:09:05 2022 : Debug: PING: Next status packet in 30 seconds Wed Nov 23 22:09:05 2022 : Debug: Waking up in 3.9 seconds. Socket: 13 Proto: 0 Src IP: 192.168.10.1 port: 1813 Dst IP: 10.10.10.1 port: 38663 Code: (5) Accounting-Response Id: 131 Length: 20 Vector: 624cadfb5af94fde2dcb29058e2d891a Wed Nov 23 22:09:05 2022 : Debug: Ignoring spoofed proxy reply. Signature is invalid Wed Nov 23 22:09:05 2022 : Debug: Waking up in 3.8 seconds. Wed Nov 23 22:09:07 2022 : Debug: detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): Read packet from /var/log/freeradius/radacct/detail.example.com/detail.work User-Name = "test_bgbras" NAS-Identifier = "demo-bng" NAS-IP-Address = 10.10.10.1 NAS-Port = 0 NAS-Port-Id = "vlan100" NAS-Port-Type = Virtual Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "f6:cb:f6:40:1f:a0" Called-Station-Id = "1a:27:b5:27:bb:53" Class = 0x6375693d746573745f6267627261732c73753d3934323033392c736b3d726a70366a6f656e667561682c626b69643d32323534303038392c626b7269643d332c6d763d3532393135313830303939372c6d743d3630343831352c676d743d3630343830302c73703d312c73723d2c61633d312c75693d3934323033392c6363693d3138382c63633d47656e6572616c2c61733d312c636f3d2c64623d3130323430302c75623d3130323430302c63626b69643d3232353430303930 Acct-Status-Type = Start Acct-Authentic = RADIUS Acct-Session-Id = "4e48d224df6f0c10" Acct-Session-Time = 0 Acct-Input-Octets = 0 Acct-Output-Octets = 0 Acct-Input-Packets = 0 Acct-Output-Packets = 0 Acct-Input-Gigawords = 0 Acct-Output-Gigawords = 0 Framed-IP-Address = 10.0.0.1 Event-Timestamp = "Nov 23 2022 22:06:45 IST" Acct-Unique-Session-Id = "994228513543d72dc0dd509c7ce37743" Packet-Original-Timestamp = "Nov 23 2022 22:06:45 IST" Acct-Delay-Time = 142 Packet-Transmit-Counter = 2 Wed Nov 23 22:09:07 2022 : Debug: (3) Empty preacct section in virtual server "home.example.com". Using default return values. Wed Nov 23 22:09:07 2022 : Debug: (3) # Executing section accounting from file /etc/freeradius/sites-enabled/robust-proxy-accounting Wed Nov 23 22:09:07 2022 : Debug: (3) accounting { Wed Nov 23 22:09:07 2022 : Debug: (3) update control { Wed Nov 23 22:09:07 2022 : Debug: (3) &Proxy-To-Realm := 'acct_realm.example.com' Wed Nov 23 22:09:07 2022 : Debug: (3) } # update control = noop Wed Nov 23 22:09:07 2022 : Debug: (3) } # accounting = noop Wed Nov 23 22:09:07 2022 : Debug: Using home pool acct for realm acct_realm.example.com Wed Nov 23 22:09:07 2022 : Debug: (3) Starting proxy to home server 192.168.10.1 port 1813 Wed Nov 23 22:09:07 2022 : Debug: (3) server home.example.com { Wed Nov 23 22:09:07 2022 : Debug: (3) Empty pre-proxy section in virtual server "home.example.com". Using default return values. Wed Nov 23 22:09:07 2022 : Debug: (3) } Wed Nov 23 22:09:07 2022 : Debug: (3) proxy: Trying to allocate ID (0/2) Wed Nov 23 22:09:07 2022 : Debug: (3) proxy: request is now in proxy hash Wed Nov 23 22:09:07 2022 : Debug: (3) proxy: allocating destination 192.168.10.1 port 1813 - Id 228 Wed Nov 23 22:09:07 2022 : Debug: (3) Proxying request to home server 192.168.10.1 port 1813 timeout 6.000000 01 0d 74 65 73 74 5f 62 67 62 72 61 73 20 0a 64 65 6d 6f 2d 62 6e 67 04 06 4e 8e 20 46 05 06 00 00 00 00 57 09 76 6c 61 6e 31 30 30 3d 06 00 00 00 05 06 06 00 00 00 02 07 06 00 00 00 01 1f 13 66 36 3a 63 62 3a 66 36 3a 34 30 3a 31 66 3a 61 30 1e 13 31 61 3a 32 37 3a 62 35 3a 32 37 3a 62 62 3a 35 33 19 bd 63 75 69 3d 74 65 73 74 5f 62 67 62 72 61 73 2c 73 75 3d 39 34 32 30 33 39 2c 73 6b 3d 72 6a 70 36 6a 6f 65 6e 66 75 61 68 2c 62 6b 69 64 3d 32 32 35 34 30 30 38 39 2c 62 6b 72 69 64 3d 33 2c 6d 76 3d 35 32 39 31 35 31 38 30 30 39 39 37 2c 6d 74 3d 36 30 34 38 31 35 2c 67 6d 74 3d 36 30 34 38 30 30 2c 73 70 3d 31 2c 73 72 3d 2c 61 63 3d 31 2c 75 69 3d 39 34 32 30 33 39 2c 63 63 69 3d 31 38 38 2c 63 63 3d 47 65 6e 65 72 61 6c 2c 61 73 3d 31 2c 63 6f 3d 2c 64 62 3d 31 30 32 34 30 30 2c 75 62 3d 31 30 32 34 30 30 2c 63 62 6b 69 64 3d 32 32 35 34 30 30 39 30 28 06 00 00 00 01 2d 06 00 00 00 01 2c 12 34 65 34 38 64 32 32 34 64 66 36 66 30 63 31 30 2e 06 00 00 00 00 2a 06 00 00 00 00 2b 06 00 00 00 00 2f 06 00 00 00 00 30 06 00 00 00 00 34 06 00 00 00 00 35 06 00 00 00 00 08 06 0a 00 00 01 37 06 63 7e 4c 1d 29 06 00 00 00 8e 21 03 30 Socket: 13 Proto: 17 Src IP: 10.10.10.1 port: 38663 Dst IP: 192.168.10.1 port: 1813 Code: (4) Accounting-Request Id: 228 Length: 402 Vector: 00000000000000000000000000000000 Data: 01 0d 74 65 73 74 5f 62 67 62 72 61 73 20 0a 64 65 6d 6f 2d 62 6e 67 04 06 4e 8e 20 46 05 06 00 00 00 00 57 09 76 6c 61 6e 31 30 30 3d 06 00 00 00 05 06 06 00 00 00 02 07 06 00 00 00 01 1f 13 66 36 3a 63 62 3a 66 36 3a 34 30 3a 31 66 3a 61 30 1e 13 31 61 3a 32 37 3a 62 35 3a 32 37 3a 62 62 3a 35 33 19 bd 63 75 69 3d 74 65 73 74 5f 62 67 62 72 61 73 2c 73 75 3d 39 34 32 30 33 39 2c 73 6b 3d 72 6a 70 36 6a 6f 65 6e 66 75 61 68 2c 62 6b 69 64 3d 32 32 35 34 30 30 38 39 2c 62 6b 72 69 64 3d 33 2c 6d 76 3d 35 32 39 31 35 31 38 30 30 39 39 37 2c 6d 74 3d 36 30 34 38 31 35 2c 67 6d 74 3d 36 30 34 38 30 30 2c 73 70 3d 31 2c 73 72 3d 2c 61 63 3d 31 2c 75 69 3d 39 34 32 30 33 39 2c 63 63 69 3d 31 38 38 2c 63 63 3d 47 65 6e 65 72 61 6c 2c 61 73 3d 31 2c 63 6f 3d 2c 64 62 3d 31 30 32 34 30 30 2c 75 62 3d 31 30 32 34 30 30 2c 63 62 6b 69 64 3d 32 32 35 34 30 30 39 30 28 06 00 00 00 01 2d 06 00 00 00 01 2c 12 34 65 34 38 64 32 32 34 64 66 36 66 30 63 31 30 2e 06 00 00 00 00 2a 06 00 00 00 00 2b 06 00 00 00 00 2f 06 00 00 00 00 30 06 00 00 00 00 34 06 00 00 00 00 35 06 00 00 00 00 08 06 0a 00 00 01 37 06 63 7e 4c 1d 29 06 00 00 00 8e 21 03 30 Socket: 13 Proto: 17 Src IP: 10.10.10.1 port: 38663 Dst IP: 192.168.10.1 port: 1813 Code: (4) Accounting-Request Id: 228 Length: 402 Vector: f7b475080067ddd6eb3713f0b58f6152 Data: 01 0d 74 65 73 74 5f 62 67 62 72 61 73 20 0a 64 65 6d 6f 2d 62 6e 67 04 06 4e 8e 20 46 05 06 00 00 00 00 57 09 76 6c 61 6e 31 30 30 3d 06 00 00 00 05 06 06 00 00 00 02 07 06 00 00 00 01 1f 13 66 36 3a 63 62 3a 66 36 3a 34 30 3a 31 66 3a 61 30 1e 13 31 61 3a 32 37 3a 62 35 3a 32 37 3a 62 62 3a 35 33 19 bd 63 75 69 3d 74 65 73 74 5f 62 67 62 72 61 73 2c 73 75 3d 39 34 32 30 33 39 2c 73 6b 3d 72 6a 70 36 6a 6f 65 6e 66 75 61 68 2c 62 6b 69 64 3d 32 32 35 34 30 30 38 39 2c 62 6b 72 69 64 3d 33 2c 6d 76 3d 35 32 39 31 35 31 38 30 30 39 39 37 2c 6d 74 3d 36 30 34 38 31 35 2c 67 6d 74 3d 36 30 34 38 30 30 2c 73 70 3d 31 2c 73 72 3d 2c 61 63 3d 31 2c 75 69 3d 39 34 32 30 33 39 2c 63 63 69 3d 31 38 38 2c 63 63 3d 47 65 6e 65 72 61 6c 2c 61 73 3d 31 2c 63 6f 3d 2c 64 62 3d 31 30 32 34 30 30 2c 75 62 3d 31 30 32 34 30 30 2c 63 62 6b 69 64 3d 32 32 35 34 30 30 39 30 28 06 00 00 00 01 2d 06 00 00 00 01 2c 12 34 65 34 38 64 32 32 34 64 66 36 66 30 63 31 30 2e 06 00 00 00 00 2a 06 00 00 00 00 2b 06 00 00 00 00 2f 06 00 00 00 00 30 06 00 00 00 00 34 06 00 00 00 00 35 06 00 00 00 00 08 06 0a 00 00 01 37 06 63 7e 4c 1d 29 06 00 00 00 8e 21 03 30 Wed Nov 23 22:09:07 2022 : Debug: Waking up in 0.3 seconds. Socket: 13 Proto: 0 Src IP: 192.168.10.1 port: 1813 Dst IP: 10.10.10.1 port: 38663 Code: (5) Accounting-Response Id: 228 Length: 20 Vector: 413e6e6bca980f259311bff73799d788 Wed Nov 23 22:09:07 2022 : Debug: Ignoring spoofed proxy reply. Signature is invalid Wed Nov 23 22:09:07 2022 : Debug: Waking up in 0.1 seconds. Wed Nov 23 22:09:07 2022 : Debug: (3) Expecting proxy response no later than 5.666255 seconds from now Wed Nov 23 22:09:07 2022 : Debug: Waking up in 1.6 seconds. Wed Nov 23 22:09:09 2022 : Error: No response to status check 2 ID 131 for home server 192.168.10.1 port 1813 Wed Nov 23 22:09:09 2022 : Debug: Waking up in 3.9 seconds. Wed Nov 23 22:09:13 2022 : Debug: (3) No proxy response, giving up on request and marking it done Wed Nov 23 22:09:13 2022 : ERROR: (3) Failing proxied request for user "test_bgbras", due to lack of any response from home server 192.168.10.1 port 1813 Wed Nov 23 22:09:13 2022 : Debug: (3) Clearing existing &reply: attributes Wed Nov 23 22:09:13 2022 : Debug: (3) Found Post-Proxy-Type Fail-Accounting Wed Nov 23 22:09:13 2022 : Debug: (3) server home.example.com { Wed Nov 23 22:09:13 2022 : Debug: (3) # Executing group from file /etc/freeradius/sites-enabled/robust-proxy-accounting Wed Nov 23 22:09:13 2022 : Debug: (3) Post-Proxy-Type Fail-Accounting { Wed Nov 23 22:09:13 2022 : Debug: (3) modsingle[post-proxy]: calling detail.example.com (rlm_detail) Wed Nov 23 22:09:13 2022 : Debug: /var/log/freeradius/radacct/detail.example.com/detail-%Y%m%d:%H:%G Wed Nov 23 22:09:13 2022 : Debug: Parsed xlat tree: Wed Nov 23 22:09:13 2022 : Debug: literal --> /var/log/freeradius/radacct/detail.example.com/detail- Wed Nov 23 22:09:13 2022 : Debug: percent --> Y Wed Nov 23 22:09:13 2022 : Debug: percent --> m Wed Nov 23 22:09:13 2022 : Debug: percent --> d Wed Nov 23 22:09:13 2022 : Debug: literal --> : Wed Nov 23 22:09:13 2022 : Debug: percent --> H Wed Nov 23 22:09:13 2022 : Debug: literal --> : Wed Nov 23 22:09:13 2022 : Debug: percent --> G Wed Nov 23 22:09:13 2022 : Debug: (3) detail.example.com: EXPAND /var/log/freeradius/radacct/detail.example.com/detail-%Y%m%d:%H:%G Wed Nov 23 22:09:13 2022 : Debug: (3) detail.example.com: --> /var/log/freeradius/radacct/detail.example.com/detail-20221123:22:09 Wed Nov 23 22:09:13 2022 : Debug: (3) detail.example.com: /var/log/freeradius/radacct/detail.example.com/detail-%Y%m%d:%H:%G expands to /var/log/freeradius/radacct/detail.example.com/detail-20221123:22:09 Wed Nov 23 22:09:13 2022 : WARNING: (3) detail.example.com: Suppressing infinite loop Wed Nov 23 22:09:13 2022 : Debug: (3) modsingle[post-proxy]: returned from detail.example.com (rlm_detail) Wed Nov 23 22:09:13 2022 : Debug: (3) [detail.example.com] = noop Wed Nov 23 22:09:13 2022 : Debug: (3) } # Post-Proxy-Type Fail-Accounting = noop Wed Nov 23 22:09:13 2022 : Debug: (3) } Wed Nov 23 22:09:13 2022 : Debug: (3) detail (/var/log/freeradius/radacct/detail.example.com/detail-*:*): No response to request. Will retry in 30 seconds Wed Nov 23 22:09:13 2022 : Debug: (3) Finished request Wed Nov 23 22:09:13 2022 : Debug: (3) Cleaning up request packet ID 0 with timestamp +36 due to done Wed Nov 23 22:09:13 2022 : Debug: Waking up in 22.9 seconds. ^CEXIT(2) CALLED src/main/radiusd.c[778]. Last error was: Received Accounting-Response packet from home server 192.168.10.1 port 1813 with invalid Response Authenticator! (Shared secret is incorrect.)
On 23 Nov 2022, at 16:58, Alan DeKok <aland@deployingradius.com> wrote:
On Nov 23, 2022, at 9:55 AM, Martin Zaharinov <micron10@gmail.com> wrote:
i try to switch from freeradius 2.2.10 to 3.2.1 After fix all configs and dictionary
As we said on the GitHub issue, just install 3.2.1. There's no need to "fix" the dictionaries.
You do need to upgrade your v2 configuration to v3. This is documented in raddb/README.rst
May be i make wrong config or ?
See log :
Read it?
... Wed Nov 23 20:08:23 2022 : Debug: (0) Proxying request to home server 192.168.10.1 port 1813 timeout 6.000000 Wed Nov 23 20:08:23 2022 : Debug: Waking up in 0.3 seconds. Wed Nov 23 20:08:23 2022 : Debug: Ignoring spoofed proxy reply. Signature is invalid
Hmm... that seems interesting.
Maybe check the shared secrets?
We very much recommend reading the debug output.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Nov 23, 2022, at 11:50 AM, Martin Zaharinov <micron10@gmail.com> wrote:
on last line after stop radius with ctrl+ C i see this : Last error was: Received Accounting-Response packet from home server 192.168.10.1 port 1813 with invalid Response Authenticator! (Shared secret is incorrect.)
That message should be clear.
but secret is set properly:
No, it's not. The server doesn't lie to you. If it says the shared secret is wrong, then the shared secret is wrong.
Below will see log from develop mode:
Just use "radiusd -X". Please follow the documentation. There's no need to do "radiusd -Xx" or "radiusd -Xxxxxx" See http://wiki.freeradius.org/list-help Alan DeKok.
Hi Alan
On 23 Nov 2022, at 19:10, Alan DeKok <aland@deployingradius.com> wrote:
On Nov 23, 2022, at 11:50 AM, Martin Zaharinov <micron10@gmail.com> wrote:
on last line after stop radius with ctrl+ C i see this : Last error was: Received Accounting-Response packet from home server 192.168.10.1 port 1813 with invalid Response Authenticator! (Shared secret is incorrect.)
That message should be clear.
but secret is set properly:
No, it's not.
Ok i recheck secret is same and work i test with may daemon direct connect to main radius.
The server doesn't lie to you. If it says the shared secret is wrong, then the shared secret is wrong.
Below will see log from develop mode:
Just use "radiusd -X". Please follow the documentation. There's no need to do "radiusd -Xx" or "radiusd -Xxxxxx"
OK for this
See http://wiki.freeradius.org/list-help
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
My idea is to make accountin proxy, when main acct radius stop respons to cache query in proxy and send after main server is back online. i try to read documentation and will try to make new config and use > proxy.conf instead robust-proxy-accounting can you guide me what else should i do? home-server virtual-server - cache Best regards, Martin
Hi Alan I want to apologize, someone had indeed changed the password Best regards, Martin
Hi Alan after fix config and all other proxy work fine i have 2 server proxy and 2 AAA vendor One use java base radius , other is freeradius server 3.x My proxy is base on freeradius 3.2.1 Problem is this : In java base: When user is auth and send Acct message to proxy when is connect with Java radius queue is very fast and in detail folder i see for < 1 sec detail.work and folder is empty with freeradius : But when connect proxy to freeradius server in detail folder file is bump : -rw------- 1 freerad freerad 1436209 Nov 29 18:50 detail-20221129:18:50 -rw------- 1 freerad freerad 744932 Nov 29 18:51 detail-20221129:18:51 -rw------- 1 freerad freerad 681658 Nov 29 18:52 detail-20221129:18:52 -rw------- 1 freerad freerad 748639 Nov 29 18:53 detail-20221129:18:53 -rw------- 1 freerad freerad 1048279 Nov 29 18:54 detail-20221129:18:54 -rw------- 1 freerad freerad 1429986 Nov 29 18:55 detail-20221129:18:55 -rw------- 1 freerad freerad 748492 Nov 29 18:56 detail-20221129:18:56 -rw------- 1 freerad freerad 690137 Nov 29 18:57 detail-20221129:18:57 -rw------- 1 freerad freerad 748859 Nov 29 18:58 detail-20221129:18:58 -rw------- 1 freerad freerad 1050320 Nov 29 18:59 detail-20221129:18:59 -rw------- 1 freerad freerad 1444990 Nov 29 19:00 detail-20221129:19:00 -rw------- 1 freerad freerad 754909 Nov 29 19:01 detail-20221129:19:01 -rw------- 1 freerad freerad 696535 Nov 29 19:02 detail-20221129:19:02 -rw------- 1 freerad freerad 764312 Nov 29 19:03 detail-20221129:19:03 -rw------- 1 freerad freerad 1031397 Nov 29 19:04 detail-20221129:19:04 -rw------- 1 freerad freerad 1435674 Nov 29 19:05 detail-20221129:19:05 -rw------- 1 freerad freerad 752248 Nov 29 19:06 detail-20221129:19:06 -rw------- 1 freerad freerad 686776 Nov 29 19:07 detail-20221129:19:07 -rw------- 1 freerad freerad 753858 Nov 29 19:08 detail-20221129:19:08 -rw------- 1 freerad freerad 1029465 Nov 29 19:09 detail-20221129:19:09 -rw------- 1 freerad freerad 1412378 Nov 29 19:10 detail-20221129:19:10 -rw------- 1 freerad freerad 753662 Nov 29 19:11 detail-20221129:19:11 -rw------- 1 freerad freerad 688278 Nov 29 19:12 detail-20221129:19:12 -rw------- 1 freerad freerad 755389 Nov 29 19:13 detail-20221129:19:13 -rw------- 1 freerad freerad 1032475 Nov 29 19:14 detail-20221129:19:14 -rw------- 1 freerad freerad 1430440 Nov 29 19:15 detail-20221129:19:15 -rw------- 1 freerad freerad 744299 Nov 29 19:16 detail-20221129:19:16 -rw------- 1 freerad freerad 684085 Nov 29 19:17 detail-20221129:19:17 -rw------- 1 freerad freerad 746811 Nov 29 19:18 detail-20221129:19:18 -rw------- 1 freerad freerad 1023190 Nov 29 19:19 detail-20221129:19:19 -rw------- 1 freerad freerad 1418708 Nov 29 19:20 detail-20221129:19:20 -rw------- 1 freerad freerad 766728 Nov 29 19:21 detail-20221129:19:21 -rw------- 1 freerad freerad 690250 Nov 29 19:22 detail-20221129:19:22 -rw------- 1 freerad freerad 746751 Nov 29 19:23 detail-20221129:19:23 -rw------- 1 freerad freerad 1017449 Nov 29 19:24 detail-20221129:19:24 -rw------- 1 freerad freerad 1422329 Nov 29 19:25 detail-20221129:19:25 -rw------- 1 freerad freerad 755814 Nov 29 19:26 detail-20221129:19:26 -rw------- 1 freerad freerad 691814 Nov 29 19:27 detail-20221129:19:27 -rw------- 1 freerad freerad 753988 Nov 29 19:28 detail-20221129:19:28 -rw------- 1 freerad freerad 1036341 Nov 29 19:29 detail-20221129:19:29 -rw------- 1 freerad freerad 1423868 Nov 29 19:30 detail-20221129:19:30 -rw------- 1 freerad freerad 754590 Nov 29 19:31 detail-20221129:19:31 -rw------- 1 freerad freerad 693278 Nov 29 19:32 detail-20221129:19:32 -rw------- 1 freerad freerad 751162 Nov 29 19:33 detail-20221129:19:33 -rw------- 1 freerad freerad 1034677 Nov 29 19:34 detail-20221129:19:34 -rw------- 1 freerad freerad 1430729 Nov 29 19:35 detail-20221129:19:35 -rw------- 1 freerad freerad 739525 Nov 29 19:36 detail-20221129:19:36 -rw------- 1 freerad freerad 688980 Nov 29 19:37 detail-20221129:19:37 -rw------- 1 freerad freerad 745496 Nov 29 19:38 detail-20221129:19:38 -rw------- 1 freerad freerad 351030 Nov 29 19:39 detail-20221129:19:39 -rw------- 1 freerad freerad 1039298 Nov 29 18:49 detail.work and detail.work change on every 2-3 min with old file in list. this is robust config: home_server home1.example.com { type = acct ipaddr = 192.168.0.1 port = 1813 secret = secret status_check = request username = "test_proxy" response_window = 20 revive_interval = 120 check_interval = 30 check_timeout = 4 num_answers_to_alive = 1 max_outstanding = 65536 zombie_period = 40 } home_server_pool acct_pool.example.com { type = fail-over home_server = home1.example.com virtual_server = home.example.com } freeradius.conf max_request_time = 60 cleanup_delay = 5 max_requests = 3840000 thread pool { start_servers = 64 max_servers = 128 min_spare_servers = 10 max_spare_servers = 48 max_requests_per_server = 0 auto_limit_acct = no } the question was there was something to be done not to accumulate files? Freeradius AAA is set to receive ~24k packets. Martin
On 24 Nov 2022, at 13:02, Martin Zaharinov <micron10@gmail.com> wrote:
Hi Alan
I want to apologize, someone had indeed changed the password
Best regards, Martin
On Nov 29, 2022, at 9:22 AM, Martin Zaharinov <micron10@gmail.com> wrote:
after fix config and all other proxy work fine
That's good.
But when connect proxy to freeradius server
in detail folder file is bump :
Why is FreeRADIUS not proxying directly to the home server? The virtual server "robust proxy accounting" only uses the detail file if the home server is down. So why is the home server down for extended periods of time?
the question was there was something to be done not to accumulate files?
Make sure that the home server is running?
Freeradius AAA is set to receive ~24k packets.
Per second? Per hour? Per day? Alan DeKok.
On 29 Nov 2022, at 16:59, Alan DeKok <aland@deployingradius.com> wrote:
On Nov 29, 2022, at 9:22 AM, Martin Zaharinov <micron10@gmail.com> wrote:
after fix config and all other proxy work fine
That's good.
But when connect proxy to freeradius server
in detail folder file is bump :
Why is FreeRADIUS not proxying directly to the home server?
Idea is when Main radius is miss to cache account data and to respons to client if Main server is not alive. Do you have config for proxing directly , and if is direct idea is when Main server is dead to respons to users and user dont wait acct answer from main server.
The virtual server "robust proxy accounting" only uses the detail file if the home server is down.
So why is the home server down for extended periods of time?
Java radius in folder file is very fast process and not stay in folder. Freeradius server, AAA vendor write server is alive and respons but in folder i see this files and file is increase.
the question was there was something to be done not to accumulate files?
Make sure that the home server is running?
is running detail.work is change but very slow not like Java radius.
Freeradius AAA is set to receive ~24k packets.
Per second? Per hour? Per day?
Per Second.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Nov 29, 2022, at 10:40 AM, Martin Zaharinov <micron10@gmail.com> wrote:
Idea is when Main radius is miss to cache account data and to respons to client if Main server is not alive.
I understand that. That is what the documentation for the "robust proxy accounting" server says. And I wrote that documentation, so I understand how it works.
Do you have config for proxing directly , and if is direct idea is when Main server is dead to respons to users and user dont wait acct answer from main server.
Read sites-available/robust-proxy-accounting That is how that virtual server works. If you did anything else, you didn't follow the documentation.
The virtual server "robust proxy accounting" only uses the detail file if the home server is down.
So why is the home server down for extended periods of time?
Java radius in folder file is very fast process and not stay in folder.
That doesn't answer my question.
Freeradius server, AAA vendor write server is alive and respons but in folder i see this files and file is increase.
So you configured the robust-proxy-account wrong. It looks like you have it ALWAYS writing to the detail file, and then proxying. This is exactly the opposite of how that virtual server works. Instead, follow the documentation. Have it proxy first, and then only write to the detail file if the home server is down.
Per Second.
24K packets per second is a very high load system. If a home server goes down for extended periods of time, then there will quickly be gigabytes of detail files written to disk. Alan DeKok.
On 29 Nov 2022, at 17:46, Alan DeKok <aland@deployingradius.com> wrote:
On Nov 29, 2022, at 10:40 AM, Martin Zaharinov <micron10@gmail.com> wrote:
Idea is when Main radius is miss to cache account data and to respons to client if Main server is not alive.
I understand that. That is what the documentation for the "robust proxy accounting" server says. And I wrote that documentation, so I understand how it works.
Do you have config for proxing directly , and if is direct idea is when Main server is dead to respons to users and user dont wait acct answer from main server.
Read sites-available/robust-proxy-accounting
That is how that virtual server works. If you did anything else, you didn't follow the documentation.
The virtual server "robust proxy accounting" only uses the detail file if the home server is down.
So why is the home server down for extended periods of time?
Java radius in folder file is very fast process and not stay in folder.
That doesn't answer my question.
Server is not down , May be respons very slow (Freeradius Main server)
Freeradius server, AAA vendor write server is alive and respons but in folder i see this files and file is increase.
So you configured the robust-proxy-account wrong.
It looks like you have it ALWAYS writing to the detail file, and then proxying. This is exactly the opposite of how that virtual server works.
Instead, follow the documentation. Have it proxy first, and then only write to the detail file if the home server is down.
this is config that i make read proxy.conf and robust-proxy-accounting : home_server home1.example.com { type = acct ipaddr = 192.168.0.1 port = 1813 secret = secret status_check = request username = "test_proxy" response_window = 20 revive_interval = 30 revive_interval = 120 check_interval = 30 check_timeout = 4 num_answers_to_alive = 1 max_outstanding = 65536 zombie_period = 40 limit { max_connections = 0 max_requests = 0 lifetime = 0 idle_timeout = 0 } } home_server_pool acct_pool.example.com { type = fail-over home_server = home1.example.com virtual_server = home.example.com } realm acct_realm.example.com { acct_pool = acct_pool.example.com } server home.example.com { post-proxy { Post-Proxy-Type Fail-Accounting { detail.example.com } } listen { type = detail filename = "${radacctdir}/detail-*:*" load_factor = 10 } accounting { update control { &Proxy-To-Realm := 'acct_realm.example.com' } } }
Per Second.
24K packets per second is a very high load system. If a home server goes down for extended periods of time, then there will quickly be gigabytes of detail files written to disk.
To allow accept 24k packets per second.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Nov 29, 2022, at 10:52 AM, Martin Zaharinov <micron10@gmail.com> wrote:
Server is not down , May be respons very slow (Freeradius Main server)
If it's not responding, then it's not operating at capacity. Perhaps it would have been good *at the start* to say "my main RADIUS server isn't operating at 100%". It helps to debug the real problem. You can't just add "robust proxy accounting" in order to get your main RADIUS server to perform better. That's not how networking works. Also, you can't just "install FreeRADIUS" and expect it to do 24K packets/s. If you empty the configuration so that it simply replies to a packet and does nothing more, the server can easily do 40K to 50K packets per second. But as soon as you add a database, that number drops enormously. Writing accounting packets to SQL is hard, and can reach maybe 2K packets/s, depending on the SQL database. Redis will do 100K writes/s, but doesn't have the same table / complex queries as SQL. Much of the work in building a RADIUS system is in doing database optimizations. Either make the database do less work, or add more CPU power / shards / whatever to the database so that it can handle the load. In the end, this isn't really a FreeRADIUS issue. FreeRADIUS can do 40K packets/s. Databases can't. So... fix the database before doing anything else.
To allow accept 24k packets per second.
This is a much harder problem than getting robust proxy accounting working. No amount of poking the proxy server will help your main RADIUS server run faster. And doing 24K SQL writes per second isn't trivial. It takes either time (hard work) or money, or both. We can't really help you there, as SQL optimizations are very much outside of the scope of this mailing list. Alan DeKok.
On 29 Nov 2022, at 18:16, Alan DeKok <aland@deployingradius.com> wrote:
On Nov 29, 2022, at 10:52 AM, Martin Zaharinov <micron10@gmail.com> wrote:
Server is not down , May be respons very slow (Freeradius Main server)
If it's not responding, then it's not operating at capacity. Perhaps it would have been good *at the start* to say "my main RADIUS server isn't operating at 100%".
It helps to debug the real problem. You can't just add "robust proxy accounting" in order to get your main RADIUS server to perform better. That's not how networking works.
Also, you can't just "install FreeRADIUS" and expect it to do 24K packets/s. If you empty the configuration so that it simply replies to a packet and does nothing more, the server can easily do 40K to 50K packets per second.
But as soon as you add a database, that number drops enormously. Writing accounting packets to SQL is hard, and can reach maybe 2K packets/s, depending on the SQL database. Redis will do 100K writes/s, but doesn't have the same table / complex queries as SQL.
Much of the work in building a RADIUS system is in doing database optimizations. Either make the database do less work, or add more CPU power / shards / whatever to the database so that it can handle the load.
In the end, this isn't really a FreeRADIUS issue. FreeRADIUS can do 40K packets/s. Databases can't. So... fix the database before doing anything else.
The main problem is i dont have access to AAA vendor radius server i only know this is Freeradius server and he make optimization. I want to use the proxy so that it does not cause me a problem if the accounting server does not respond. and i try any to make config to send all packate to Main radius , but still in folder is make queue file: -rw------- 1 freerad freerad 650989 Nov 29 21:47 detail-20221129:21:47 -rw------- 1 freerad freerad 772733 Nov 29 21:48 detail-20221129:21:48 -rw------- 1 freerad freerad 1036230 Nov 29 21:49 detail-20221129:21:49 -rw------- 1 freerad freerad 1376806 Nov 29 21:50 detail-20221129:21:50 -rw------- 1 freerad freerad 745792 Nov 29 21:51 detail-20221129:21:51 -rw------- 1 freerad freerad 653855 Nov 29 21:52 detail-20221129:21:52 -rw------- 1 freerad freerad 1453 Nov 29 21:53 detail-20221129:21:53 -rw------- 1 freerad freerad 740783 Nov 29 21:46 detail.work Like time of respons of acct is veeery slow . And Yes may be problem is in DB not optimize or other. if have options to send all query to Main radius and if only not respons or dead to cache wait to back alive and send message m
To allow accept 24k packets per second.
This is a much harder problem than getting robust proxy accounting working. No amount of poking the proxy server will help your main RADIUS server run faster.
And doing 24K SQL writes per second isn't trivial. It takes either time (hard work) or money, or both. We can't really help you there, as SQL optimizations are very much outside of the scope of this mailing list.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Nov 29, 2022, at 11:25 AM, Martin Zaharinov <micron10@gmail.com> wrote:
The main problem is i dont have access to AAA vendor radius server i only know this is Freeradius server and he make optimization.
I want to use the proxy so that it does not cause me a problem if the accounting server does not respond.
As I said:
You can't just add "robust proxy accounting" in order to get your main RADIUS server to perform better. That's not how networking works.
Alan DeKok.
Thanks Alan I will talk with AAA vendor to optimize DB and to check all other Martin
On 29 Nov 2022, at 18:16, Alan DeKok <aland@deployingradius.com> wrote:
On Nov 29, 2022, at 10:52 AM, Martin Zaharinov <micron10@gmail.com> wrote:
Server is not down , May be respons very slow (Freeradius Main server)
If it's not responding, then it's not operating at capacity. Perhaps it would have been good *at the start* to say "my main RADIUS server isn't operating at 100%".
It helps to debug the real problem. You can't just add "robust proxy accounting" in order to get your main RADIUS server to perform better. That's not how networking works.
Also, you can't just "install FreeRADIUS" and expect it to do 24K packets/s. If you empty the configuration so that it simply replies to a packet and does nothing more, the server can easily do 40K to 50K packets per second.
But as soon as you add a database, that number drops enormously. Writing accounting packets to SQL is hard, and can reach maybe 2K packets/s, depending on the SQL database. Redis will do 100K writes/s, but doesn't have the same table / complex queries as SQL.
Much of the work in building a RADIUS system is in doing database optimizations. Either make the database do less work, or add more CPU power / shards / whatever to the database so that it can handle the load.
In the end, this isn't really a FreeRADIUS issue. FreeRADIUS can do 40K packets/s. Databases can't. So... fix the database before doing anything else.
To allow accept 24k packets per second.
This is a much harder problem than getting robust proxy accounting working. No amount of poking the proxy server will help your main RADIUS server run faster.
And doing 24K SQL writes per second isn't trivial. It takes either time (hard work) or money, or both. We can't really help you there, as SQL optimizations are very much outside of the scope of this mailing list.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
ok i am back after change robust config to this : home_server home1.example.com { type = acct ipaddr = 192.168.0.1 port = 1813 secret = secret status_check = request username = "test_proxy" response_window = 1 # response_window = 20 # revive_interval = 120 # check_interval = 30 # check_timeout = 4 # num_answers_to_alive = 1 # max_outstanding = 65536 # zombie_period = 40 } all test i make with Freeradius main -rw------- 1 freerad freerad 1034514 Nov 29 21:39 detail-20221129:21:39 -rw------- 1 freerad freerad 274375 Nov 29 21:40 detail-20221129:21:40 -rw------- 1 freerad freerad 141045 Nov 29 21:38 detail.work for 1-2 interval i monitor folder and detail.work is change with old file in folder. -rw------- 1 freerad freerad 1419261 Nov 29 21:40 detail-20221129:21:40 -rw------- 1 freerad freerad 86092 Nov 29 21:41 detail-20221129:21:41 -rw------- 1 freerad freerad 1034514 Nov 29 21:39 detail.work ——— -rw------- 1 freerad freerad 756237 Nov 29 21:41 detail-20221129:21:41 -rw------- 1 freerad freerad 98629 Nov 29 21:42 detail-20221129:21:42 -rw------- 1 freerad freerad 1419261 Nov 29 21:40 detail.work
On 29 Nov 2022, at 17:46, Alan DeKok <aland@deployingradius.com> wrote:
On Nov 29, 2022, at 10:40 AM, Martin Zaharinov <micron10@gmail.com> wrote:
Idea is when Main radius is miss to cache account data and to respons to client if Main server is not alive.
I understand that. That is what the documentation for the "robust proxy accounting" server says. And I wrote that documentation, so I understand how it works.
Do you have config for proxing directly , and if is direct idea is when Main server is dead to respons to users and user dont wait acct answer from main server.
Read sites-available/robust-proxy-accounting
That is how that virtual server works. If you did anything else, you didn't follow the documentation.
The virtual server "robust proxy accounting" only uses the detail file if the home server is down.
So why is the home server down for extended periods of time?
Java radius in folder file is very fast process and not stay in folder.
That doesn't answer my question.
Freeradius server, AAA vendor write server is alive and respons but in folder i see this files and file is increase.
So you configured the robust-proxy-account wrong.
It looks like you have it ALWAYS writing to the detail file, and then proxying. This is exactly the opposite of how that virtual server works.
Instead, follow the documentation. Have it proxy first, and then only write to the detail file if the home server is down.
Per Second.
24K packets per second is a very high load system. If a home server goes down for extended periods of time, then there will quickly be gigabytes of detail files written to disk.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
and is there options to increase number of messages send to Main radius ?
On 29 Nov 2022, at 16:59, Alan DeKok <aland@deployingradius.com> wrote:
On Nov 29, 2022, at 9:22 AM, Martin Zaharinov <micron10@gmail.com> wrote:
after fix config and all other proxy work fine
That's good.
But when connect proxy to freeradius server
in detail folder file is bump :
Why is FreeRADIUS not proxying directly to the home server?
The virtual server "robust proxy accounting" only uses the detail file if the home server is down.
So why is the home server down for extended periods of time?
the question was there was something to be done not to accumulate files?
Make sure that the home server is running?
Freeradius AAA is set to receive ~24k packets.
Per second? Per hour? Per day?
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Martin Zaharinov