radius stops authenticating users
The top login attempt doesn't work, and the bottom one does. Restarting radius doesn't fix the problem, but rebooting the server it's running on does. This is the 1.1.7 package for Debian Linux, the NAS is a Cisco AS5300. Below is the output from freeradius -X for a working and a failed login session for the same user. Further debug logs avaialable upon request. Thanks in advance for your help. modcall: entering group preacct for request 14 modcall[preacct]: module "preprocess" returns noop for request 14 rlm_acct_unique: Hashing 'NAS-Port = 1,Client-IP-Address = 208.64.35.3,NAS-IP-Address = 208.64.35.3,Acct-Session-Id = "000E79BC",User-Name = "skyhawk@k-inc.com"' rlm_acct_unique: Acct-Unique-Session-ID = "c27a6dc7ba7ef40a". modcall[preacct]: module "acct_unique" returns ok for request 14 rlm_realm: Looking up realm "k-inc.com" for User-Name = "skyhawk@k-inc.com" rlm_realm: No such realm "k-inc.com" modcall[preacct]: module "suffix" returns noop for request 14 modcall[preacct]: module "files" returns noop for request 14 modcall: leaving group preacct (returns ok) for request 14 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 14 radius_xlat: '/var/log/freeradius/radacct/208.64.35.3/detail-20080208' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/208.64.35.3/detail-20080208 modcall[accounting]: module "detail" returns ok for request 14 modcall[accounting]: module "unix" returns ok for request 14 radius_xlat: '/var/log/freeradius/radutmp' radius_xlat: 'skyhawk@k-inc.com' modcall[accounting]: module "radutmp" returns ok for request 14 rlm_ippool: Searching for an entry for nas/port: 208.64.35.3/1 rlm_ippool: Deallocated entry for ip/port: 208.64.35.241/1 rlm_ippool: num: 0 modcall[accounting]: module "main_pool" returns ok for request 14 modcall: leaving group accounting (returns ok) for request 14 Sending Accounting-Response of id 47 to 208.64.35.3 port 1646 Finished request 14 Processing the preacct section of radiusd.conf modcall: entering group preacct for request 4 modcall[preacct]: module "preprocess" returns noop for request 4 rlm_acct_unique: Hashing 'NAS-Port = 1,Client-IP-Address = 208.64.35.3,NAS-IP-Address = 208.64.35.3,Acct-Session-Id = "000E79BC",User-Name = "skyhawk@k-inc.com"' rlm_acct_unique: Acct-Unique-Session-ID = "c27a6dc7ba7ef40a". modcall[preacct]: module "acct_unique" returns ok for request 4 rlm_realm: Looking up realm "k-inc.com" for User-Name = "skyhawk@k-inc.com" rlm_realm: No such realm "k-inc.com" modcall[preacct]: module "suffix" returns noop for request 4 modcall[preacct]: module "files" returns noop for request 4 modcall: leaving group preacct (returns ok) for request 4 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 4 radius_xlat: '/var/log/freeradius/radacct/208.64.35.3/detail-20080208' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/208.64.35.3/detail-20080208 modcall[accounting]: module "detail" returns ok for request 4 modcall[accounting]: module "unix" returns ok for request 4 radius_xlat: '/var/log/freeradius/radutmp' radius_xlat: 'skyhawk@k-inc.com' modcall[accounting]: module "radutmp" returns ok for request 4 rlm_ippool: This is not an Accounting-Stop. Return NOOP. modcall[accounting]: module "main_pool" returns noop for request 4 modcall: leaving group accounting (returns ok) for request 4 Sending Accounting-Response of id 41 to 208.64.35.3 port 1646 Finished request 4
Those are accounting requests. They have nothing to do with logins. Ivan Kalik Kalik Informatika ISP Dana 8/2/2008, "Andrew D Kirch" <trelane@trelane.net> piše:
The top login attempt doesn't work, and the bottom one does. Restarting radius doesn't fix the problem, but rebooting the server it's running on does. This is the 1.1.7 package for Debian Linux, the NAS is a Cisco AS5300.
Below is the output from freeradius -X for a working and a failed login session for the same user. Further debug logs avaialable upon request. Thanks in advance for your help.
modcall: entering group preacct for request 14 modcall[preacct]: module "preprocess" returns noop for request 14 rlm_acct_unique: Hashing 'NAS-Port = 1,Client-IP-Address = 208.64.35.3,NAS-IP-Address = 208.64.35.3,Acct-Session-Id = "000E79BC",User-Name = "skyhawk@k-inc.com"' rlm_acct_unique: Acct-Unique-Session-ID = "c27a6dc7ba7ef40a". modcall[preacct]: module "acct_unique" returns ok for request 14 rlm_realm: Looking up realm "k-inc.com" for User-Name = "skyhawk@k-inc.com" rlm_realm: No such realm "k-inc.com" modcall[preacct]: module "suffix" returns noop for request 14 modcall[preacct]: module "files" returns noop for request 14 modcall: leaving group preacct (returns ok) for request 14 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 14 radius_xlat: '/var/log/freeradius/radacct/208.64.35.3/detail-20080208' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/208.64.35.3/detail-20080208 modcall[accounting]: module "detail" returns ok for request 14 modcall[accounting]: module "unix" returns ok for request 14 radius_xlat: '/var/log/freeradius/radutmp' radius_xlat: 'skyhawk@k-inc.com' modcall[accounting]: module "radutmp" returns ok for request 14 rlm_ippool: Searching for an entry for nas/port: 208.64.35.3/1 rlm_ippool: Deallocated entry for ip/port: 208.64.35.241/1 rlm_ippool: num: 0 modcall[accounting]: module "main_pool" returns ok for request 14 modcall: leaving group accounting (returns ok) for request 14 Sending Accounting-Response of id 47 to 208.64.35.3 port 1646 Finished request 14
Processing the preacct section of radiusd.conf modcall: entering group preacct for request 4 modcall[preacct]: module "preprocess" returns noop for request 4 rlm_acct_unique: Hashing 'NAS-Port = 1,Client-IP-Address = 208.64.35.3,NAS-IP-Address = 208.64.35.3,Acct-Session-Id = "000E79BC",User-Name = "skyhawk@k-inc.com"' rlm_acct_unique: Acct-Unique-Session-ID = "c27a6dc7ba7ef40a". modcall[preacct]: module "acct_unique" returns ok for request 4 rlm_realm: Looking up realm "k-inc.com" for User-Name = "skyhawk@k-inc.com" rlm_realm: No such realm "k-inc.com" modcall[preacct]: module "suffix" returns noop for request 4 modcall[preacct]: module "files" returns noop for request 4 modcall: leaving group preacct (returns ok) for request 4 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 4 radius_xlat: '/var/log/freeradius/radacct/208.64.35.3/detail-20080208' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/208.64.35.3/detail-20080208 modcall[accounting]: module "detail" returns ok for request 4 modcall[accounting]: module "unix" returns ok for request 4 radius_xlat: '/var/log/freeradius/radutmp' radius_xlat: 'skyhawk@k-inc.com' modcall[accounting]: module "radutmp" returns ok for request 4 rlm_ippool: This is not an Accounting-Stop. Return NOOP. modcall[accounting]: module "main_pool" returns noop for request 4 modcall: leaving group accounting (returns ok) for request 4 Sending Accounting-Response of id 41 to 208.64.35.3 port 1646 Finished request 4
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Andrew D Kirch -
Ivan Kalik