Hi I have configured the Free Radius Server to work as proxy radius server with the following in the proxy.conf realm NULL { type = radius authhost = 100.100.0.2:1812 accthost = 100.100.0.2:1813 secret = testing123 } All the other conf files are configured properly. AM getting the following problem. For authentication of user, the Access Request packet is transferred to the ip address 100.100.0.2. But for Accounting Request the packet is transfered locally Am getting log as sending Accounting Request to 127.0.0.1:4445 What can be the solution ? -- Regards Balu
You haven't posted the debug output. Post one that has both access and accounting requests for the same user. Ivan Kalik Kalik Informatika ISP Dana 10/1/2008, "Jayaraman Balasubramanian" <balasubramanian.j.s@gmail.com> piše:
Hi
I have configured the Free Radius Server to work as proxy radius server with the following in the proxy.conf
realm NULL { type = radius authhost = 100.100.0.2:1812 accthost = 100.100.0.2:1813 secret = testing123 }
All the other conf files are configured properly. AM getting the following problem.
For authentication of user, the Access Request packet is transferred to the ip address 100.100.0.2. But for Accounting Request the packet is transfered locally
Am getting log as sending Accounting Request to 127.0.0.1:4445
What can be the solution ?
-- Regards Balu
The logs are given below for access request and accounting request. *Proxy Radius Server Logs:* *Access Request Logs * Sending Access-Request of id 0 to 100.100.0.2 port 1812 Framed-IP-Address = 10.0.0.178 Calling-Station-Id = "00:0F:66:EE:BE:3A" User-Name = "steve" User-Password = "testing" Service-Type = Authenticate-Only Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x32 NAS-IP-Address := 10.0.0.1 Called-Station-Id := "00:19:D1:21:12:12" NAS-Identifier := "N123" Acct-Session-Id := "N123-1200037051188-1" NAS-Port-Type := Wireless-802.11 rad_recv: Access-Accept packet from host 100.100.0.2:1812, id=0, length=49 Session-Timeout = 300 Acct-Interim-Interval = 10 Reply-Message = "Hello, steve" Proxy-State = 0x32 Sending Access-Accept of id 2 to 127.0.0.1 port 34075 Session-Timeout = 300 Acct-Interim-Interval = 10 Reply-Message = "Hello, steve" Class := 0x4a5241444955532d434c4153533a3730326265616339333933373133656332623731613234353239383666616265 rad_recv: Access-Request packet from host 127.0.0.1:34076, id=3, length=128 Vendor-28382-Attr-8 = 0xac1e01b2 Framed-IP-Address = 10.0.0.178 Calling-Station-Id = "00:0F:66:EE:BE:3A" Acct-Session-Id = "N123-1200037051098-1" User-Name = "steve" User-Password = "testing" Service-Type = Login-User Message-Authenticator = 0x1fa6d6da9becb06a7f850f10041ecb1e *Accounting Request* *Logs* are Sending Accounting-Response of id 4 to 127.0.0.1 port 34076 rad_recv: Accounting-Request packet from host 127.0.0.1:34076, id=5, length=85 Vendor-28382-Attr-8 = 0xac1e01b2 Framed-IP-Address = 10.0.0.178 Calling-Station-Id = "00:0F:66:EE:BE:3A" Acct-Session-Id = "N123-1200037051098-1" Acct-Status-Type = Interim-Update Sending Accounting-Response of id 5 to 127.0.0.1 port 34076 rad_recv: Accounting-Request packet from host 127.0.0.1:34076, id=6, length=85 Vendor-28382-Attr-8 = 0xac1e01b2 Framed-IP-Address = 10.0.0.178 Calling-Station-Id = "00:0F:66:EE:BE:3A" Acct-Session-Id = "N123-1200037051098-1" Acct-Status-Type = Interim-Update Sending Accounting-Response of id 6 to 127.0.0.1 port 34076 rad_recv: Accounting-Request packet from host 127.0.0.1:34076, id=7, length=91 Vendor-28382-Attr-8 = 0xac1e01b2 Framed-IP-Address = 10.0.0.178 Calling-Station-Id = "00:0F:66:EE:BE:3A" Acct-Session-Id = "N123-1200037051098-1" Acct-Terminate-Cause = User-Request Acct-Status-Type = Stop *Radius Server Logs* rad_recv: Access-Request packet from host 10.0.0.1:1814, id=0, length=257 Framed-IP-Address = 10.0.0.178 Calling-Station-Id = "00:0F:66:EE:BE:3A" User-Name = "steve" User-Password = "testing" Service-Type = Authenticate-Only Message-Authenticator = 0xbfc958eb3215db3e00890a6b4633b062 Proxy-State = 0x32 NAS-IP-Address = 10.0.0.1 Called-Station-Id = "00:19:D1:21:12:12" NAS-Identifier = "N123" Acct-Session-Id = "N123-1200037051188-1" NAS-Port-Type = Wireless-802.11 Sending Access-Accept of id 0 to 10.0.0.1 port 1814 Session-Timeout = 300 Acct-Interim-Interval = 10 Reply-Message = "Hello, steve" Proxy-State = 0x32. What can be the problem?? How to solve this? On 1/10/08, tnt@kalik.co.yu <tnt@kalik.co.yu> wrote:
You haven't posted the debug output. Post one that has both access and accounting requests for the same user.
Ivan Kalik Kalik Informatika ISP
Dana 10/1/2008, "Jayaraman Balasubramanian" <balasubramanian.j.s@gmail.com> piše:
Hi
I have configured the Free Radius Server to work as proxy radius server with the following in the proxy.conf
realm NULL { type = radius authhost = 100.100.0.2:1812 accthost = 100.100.0.2:1813 secret = testing123 }
All the other conf files are configured properly. AM getting the following problem.
For authentication of user, the Access Request packet is transferred to the ip address 100.100.0.2. But for Accounting Request the packet is transfered locally
Am getting log as sending Accounting Request to 127.0.0.1:4445
What can be the solution ?
-- Regards Balu
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards Balu
Let's try again: you haven't posted the debug output. From this I can see that access request are proxied but accounting one aren't. Post the debug so we can see why. On first glance there is a lot missing (Acct-Session-Time, number of octets ...) from this accounting stop packet:
rad_recv: Accounting-Request packet from host 127.0.0.1:34076, id=7, length=91
Vendor-28382-Attr-8 = 0xac1e01b2 Framed-IP-Address = 10.0.0.178 Calling-Station-Id = "00:0F:66:EE:BE:3A" Acct-Session-Id = "N123-1200037051098-1" Acct-Terminate-Cause = User-Request Acct-Status-Type = Stop
And I don't see Start packet at all. Ivan Kalik Kalik Informatika ISP Dana 11/1/2008, "Jayaraman Balasubramanian" <balasubramanian.j.s@gmail.com> piše:
The logs are given below for access request and accounting request.
*Proxy Radius Server Logs:*
*Access Request Logs *
Sending Access-Request of id 0 to 100.100.0.2 port 1812
Framed-IP-Address = 10.0.0.178
Calling-Station-Id = "00:0F:66:EE:BE:3A"
User-Name = "steve"
User-Password = "testing"
Service-Type = Authenticate-Only
Message-Authenticator = 0x00000000000000000000000000000000
Proxy-State = 0x32
NAS-IP-Address := 10.0.0.1
Called-Station-Id := "00:19:D1:21:12:12"
NAS-Identifier := "N123"
Acct-Session-Id := "N123-1200037051188-1"
NAS-Port-Type := Wireless-802.11
rad_recv: Access-Accept packet from host 100.100.0.2:1812, id=0, length=49
Session-Timeout = 300
Acct-Interim-Interval = 10
Reply-Message = "Hello, steve"
Proxy-State = 0x32
Sending Access-Accept of id 2 to 127.0.0.1 port 34075
Session-Timeout = 300
Acct-Interim-Interval = 10
Reply-Message = "Hello, steve"
Class := 0x4a5241444955532d434c4153533a3730326265616339333933373133656332623731613234353239383666616265
rad_recv: Access-Request packet from host 127.0.0.1:34076, id=3, length=128
Vendor-28382-Attr-8 = 0xac1e01b2
Framed-IP-Address = 10.0.0.178
Calling-Station-Id = "00:0F:66:EE:BE:3A"
Acct-Session-Id = "N123-1200037051098-1"
User-Name = "steve"
User-Password = "testing"
Service-Type = Login-User
Message-Authenticator = 0x1fa6d6da9becb06a7f850f10041ecb1e
*Accounting Request* *Logs* are
Sending Accounting-Response of id 4 to 127.0.0.1 port 34076
rad_recv: Accounting-Request packet from host 127.0.0.1:34076, id=5, length=85
Vendor-28382-Attr-8 = 0xac1e01b2
Framed-IP-Address = 10.0.0.178
Calling-Station-Id = "00:0F:66:EE:BE:3A"
Acct-Session-Id = "N123-1200037051098-1"
Acct-Status-Type = Interim-Update
Sending Accounting-Response of id 5 to 127.0.0.1 port 34076
rad_recv: Accounting-Request packet from host 127.0.0.1:34076, id=6, length=85
Vendor-28382-Attr-8 = 0xac1e01b2
Framed-IP-Address = 10.0.0.178
Calling-Station-Id = "00:0F:66:EE:BE:3A"
Acct-Session-Id = "N123-1200037051098-1"
Acct-Status-Type = Interim-Update
Sending Accounting-Response of id 6 to 127.0.0.1 port 34076
rad_recv: Accounting-Request packet from host 127.0.0.1:34076, id=7, length=91
Vendor-28382-Attr-8 = 0xac1e01b2
Framed-IP-Address = 10.0.0.178
Calling-Station-Id = "00:0F:66:EE:BE:3A"
Acct-Session-Id = "N123-1200037051098-1"
Acct-Terminate-Cause = User-Request
Acct-Status-Type = Stop *Radius Server Logs*
rad_recv: Access-Request packet from host 10.0.0.1:1814, id=0, length=257
Framed-IP-Address = 10.0.0.178
Calling-Station-Id = "00:0F:66:EE:BE:3A"
User-Name = "steve"
User-Password = "testing"
Service-Type = Authenticate-Only
Message-Authenticator = 0xbfc958eb3215db3e00890a6b4633b062
Proxy-State = 0x32
NAS-IP-Address = 10.0.0.1
Called-Station-Id = "00:19:D1:21:12:12"
NAS-Identifier = "N123"
Acct-Session-Id = "N123-1200037051188-1"
NAS-Port-Type = Wireless-802.11
Sending Access-Accept of id 0 to 10.0.0.1 port 1814
Session-Timeout = 300
Acct-Interim-Interval = 10
Reply-Message = "Hello, steve"
Proxy-State = 0x32.
What can be the problem?? How to solve this? On 1/10/08, tnt@kalik.co.yu <tnt@kalik.co.yu> wrote:
You haven't posted the debug output. Post one that has both access and accounting requests for the same user.
Ivan Kalik Kalik Informatika ISP
Dana 10/1/2008, "Jayaraman Balasubramanian" <balasubramanian.j.s@gmail.com> piše:
Hi
I have configured the Free Radius Server to work as proxy radius server with the following in the proxy.conf
realm NULL { type = radius authhost = 100.100.0.2:1812 accthost = 100.100.0.2:1813 secret = testing123 }
All the other conf files are configured properly. AM getting the following problem.
For authentication of user, the Access Request packet is transferred to the ip address 100.100.0.2. But for Accounting Request the packet is transfered locally
Am getting log as sending Accounting Request to 127.0.0.1:4445
What can be the solution ?
-- Regards Balu
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards Balu
participants (2)
-
Jayaraman Balasubramanian -
tnt@kalik.co.yu