Debian Stretch: No radutmp file though seeing Accounting message at network level
Hello, I'm currently testing SimultaneousUse setting in WPA2 Enterprise WiFi environment. I'm quite new to Radius (both concepts and implementations). After reading this (very interesting) document [1], I assigned myself a first step: seeing useful data through radwho command, no matter if Freeradius relied on a completely different source on input to implement SimultaneousUse feature. In my testing, I'm having: # radwho Fri Sep 14 12:28:55 2018 : Error: Unable to check file "/var/log/freeradius/radutmp": No such file or directory radwho: Error reading /var/log/freeradius/radutmp: No such file or directory 1. I read in [2] then that /var/log/freeradius/radutmp is created by Freeradius whenever it receives accounting data. Is it correct on Debian Stretch when package's config is mostly left unchanged ? 2. At network level, I see that my WiFi AP are sending Account-Request and receiving back Account-Response. Does it prove Freeradius's Accounting is turned on and running or shall I for instance, read this Response content ? Is there a better way to look at Freeradius "running features" ? [1] https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/doc/configuratio... [2] http://lists.freeradius.org/pipermail/freeradius-users/2014-April/071808.htm... Best regards
On Sep 14, 2018, at 6:45 AM, Olivier <oza.4h07@gmail.com> wrote:
I'm currently testing SimultaneousUse setting in WPA2 Enterprise WiFi environment. I'm quite new to Radius (both concepts and implementations).
After reading this (very interesting) document [1], I assigned myself a first step: seeing useful data through radwho command, no matter if Freeradius relied on a completely different source on input to implement SimultaneousUse feature.
In my testing, I'm having: # radwho Fri Sep 14 12:28:55 2018 : Error: Unable to check file "/var/log/freeradius/radutmp": No such file or directory radwho: Error reading /var/log/freeradius/radutmp: No such file or directory
Then the server isn't (a) receiving account requests, or maybe (b) it isn't writing those packets to the radutmp file.
1. I read in [2] then that /var/log/freeradius/radutmp is created by Freeradius whenever it receives accounting data. Is it correct on Debian Stretch when package's config is mostly left unchanged ?
I have no idea what Debian has done to their packages. Ideally, as little as possible. But...
2. At network level, I see that my WiFi AP are sending Account-Request and receiving back Account-Response. Does it prove Freeradius's Accounting is turned on and running or shall I for instance, read this Response content ? Is there a better way to look at Freeradius "running features" ?
There's the debug output. All of the documentation says to look at this. Including the message you get when you join the list. http://wiki.freeradius.org/list-help Alan DeKok.
I have no idea what Debian has done to their packages. Ideally, as little as possible. But...
I've got a freeradius install on debian stretch and can confirm the presence of /var/log/freeradius/radutmp and radwtmp.
Alan DeKok.
-- Rens - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Le ven. 14 sept. 2018 à 13:03, Rens Houben via Freeradius-Users < freeradius-users@lists.freeradius.org> a écrit :
I have no idea what Debian has done to their packages. Ideally, as little as possible. But...
I've got a freeradius install on debian stretch and can confirm the presence of /var/log/freeradius/radutmp and radwtmp.
Thanks to both answers, I read in /var/log/freeradius/radius.log, the lines: (65) Received Accounting-Request Id 153 from 192.168.1.153:34306 to 192.168.1.243:1813 length 169 (65) Acct-Session-Id = "0000000E-00000009" (65) Acct-Status-Type = Start (65) Acct-Authentic = RADIUS (65) User-Name = "999_0001" (65) NAS-IP-Address = 192.168.1.153 (65) Framed-IP-Address = 10.201.2.11 (65) NAS-Identifier = "0418d6c093bf" (65) NAS-Port = 0 (65) Called-Station-Id = "04-18-D6-C2-93-BF:Foobar" (65) Calling-Station-Id = "48-5A-B6-04-C2-BF" (65) NAS-Port-Type = Wireless-802.11 (65) Connect-Info = "CONNECT 0Mbps 802.11b" (65) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/default (65) Tmp-String-9 := "ai:" (65) &Acct-Unique-Session-Id := 8ff563640edb7a60c06bc5e9d4c70aa5 (65) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/default (65) Sent Accounting-Response Id 153 from 192.168.1.243:1813 to 192.168.1.153:34306 length 0 Then I checked /etc/freeradius/3.0/sites-enabled/default content to learn that its radutmp line was commented out (Debian's default, it seems). I un-commented it, restarted and I got my first live entry in radwho ! For reference, here are some file permissions: # ls -al /var/log/freeradius/ total 188 drwxr-xr-x 3 freerad adm 4096 sept. 14 14:03 . drwxr-xr-x 11 root root 4096 sept. 14 13:37 .. drwx------ 6 freerad freerad 4096 sept. 14 11:30 radacct -rw-r--r-- 1 freerad freerad 157627 sept. 14 14:03 radius.log -rw------- 1 freerad freerad 112 sept. 14 14:03 radutmp -rw-r--r-- 1 freerad adm 9216 sept. 14 14:03 radwtmp Also, data from/var/log/syslog: Sep 14 13:20:32 foobar freeradius[6812]: # Loading module "radutmp" from file /etc/freeradius/3.0/mods-enabled/radutmp Sep 14 13:20:32 foobar freeradius[6812]: radutmp { Sep 14 13:20:32 foobar freeradius[6812]: #011filename = "/var/log/freeradius/radutmp" Sep 14 13:20:32 foobar freeradius[6812]: #011username = "%{User-Name}" Sep 14 13:20:32 foobar freeradius[6812]: #011case_sensitive = yes Sep 14 13:20:32 foobar freeradius[6812]: #011check_with_nas = yes Sep 14 13:20:32 foobar freeradius[6812]: #011permissions = 384 Sep 14 13:20:32 foobar freeradius[6812]: #011caller_id = yes Sep 14 13:20:32 foobar freeradius[6812]: } Thank you very much for helping
Alan DeKok.
-- Rens
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
All good until this bites you in half a year's time. You really want to be putting entries into a DB and using a query to find live sessions alan On Fri, 14 Sep 2018, 13:15 Olivier, <oza.4h07@gmail.com> wrote:
Le ven. 14 sept. 2018 à 13:03, Rens Houben via Freeradius-Users < freeradius-users@lists.freeradius.org> a écrit :
I have no idea what Debian has done to their packages. Ideally, as little as possible. But...
I've got a freeradius install on debian stretch and can confirm the presence of /var/log/freeradius/radutmp and radwtmp.
Thanks to both answers, I read in /var/log/freeradius/radius.log, the lines:
(65) Received Accounting-Request Id 153 from 192.168.1.153:34306 to 192.168.1.243:1813 length 169 (65) Acct-Session-Id = "0000000E-00000009" (65) Acct-Status-Type = Start (65) Acct-Authentic = RADIUS (65) User-Name = "999_0001" (65) NAS-IP-Address = 192.168.1.153 (65) Framed-IP-Address = 10.201.2.11 (65) NAS-Identifier = "0418d6c093bf" (65) NAS-Port = 0 (65) Called-Station-Id = "04-18-D6-C2-93-BF:Foobar" (65) Calling-Station-Id = "48-5A-B6-04-C2-BF" (65) NAS-Port-Type = Wireless-802.11 (65) Connect-Info = "CONNECT 0Mbps 802.11b" (65) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/default (65) Tmp-String-9 := "ai:" (65) &Acct-Unique-Session-Id := 8ff563640edb7a60c06bc5e9d4c70aa5 (65) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/default (65) Sent Accounting-Response Id 153 from 192.168.1.243:1813 to 192.168.1.153:34306 length 0
Then I checked /etc/freeradius/3.0/sites-enabled/default content to learn that its radutmp line was commented out (Debian's default, it seems). I un-commented it, restarted and I got my first live entry in radwho !
For reference, here are some file permissions:
# ls -al /var/log/freeradius/ total 188 drwxr-xr-x 3 freerad adm 4096 sept. 14 14:03 . drwxr-xr-x 11 root root 4096 sept. 14 13:37 .. drwx------ 6 freerad freerad 4096 sept. 14 11:30 radacct -rw-r--r-- 1 freerad freerad 157627 sept. 14 14:03 radius.log -rw------- 1 freerad freerad 112 sept. 14 14:03 radutmp -rw-r--r-- 1 freerad adm 9216 sept. 14 14:03 radwtmp
Also, data from/var/log/syslog:
Sep 14 13:20:32 foobar freeradius[6812]: # Loading module "radutmp" from file /etc/freeradius/3.0/mods-enabled/radutmp Sep 14 13:20:32 foobar freeradius[6812]: radutmp { Sep 14 13:20:32 foobar freeradius[6812]: #011filename = "/var/log/freeradius/radutmp" Sep 14 13:20:32 foobar freeradius[6812]: #011username = "%{User-Name}" Sep 14 13:20:32 foobar freeradius[6812]: #011case_sensitive = yes Sep 14 13:20:32 foobar freeradius[6812]: #011check_with_nas = yes Sep 14 13:20:32 foobar freeradius[6812]: #011permissions = 384 Sep 14 13:20:32 foobar freeradius[6812]: #011caller_id = yes Sep 14 13:20:32 foobar freeradius[6812]: }
Thank you very much for helping
Alan DeKok.
-- Rens
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan Buxey -
Alan DeKok -
Olivier -
Rens Houben