Ignoring request to auth address *
Hello everyone, I am newbie with Freeradius so hopefully, you could extend your patience with my question I setup FreeRadius server on Ubuntu 18.04. Update and everything went OK. Setup the client and user all OK But when I try to connect to the network from my iPhone, it keep saying password is incorrect. In the sudo freeradius -X, the status keeps saying ----Ignoring request to auth address * port 1812 bound to server default from unknown client 192.168.x.xxx port xxxxx ---- I have allowed the ufw as sudo ufw allow 1812/tcp sudo ufw allow 1813/tcp sudo ufw allow 1812/udp sudo ufw allow 1813/udp My user setup format is as in the "users" file username Cleartext := "password123" My Client is the Access point, as in the "client.conf" file Client AP { ipaddr = 192.168.x.xxx secret = test111 } Any idea what I am missing in here?
On Jan 22, 2020, at 2:48 AM, James Ngo <james.ngobui@gmail.com> wrote:
I am newbie with Freeradius so hopefully, you could extend your patience with my question
I setup FreeRadius server on Ubuntu 18.04. Update and everything went OK.
Setup the client and user all OK
That's good.
In the sudo freeradius -X, the status keeps saying
----Ignoring request to auth address * port 1812 bound to server default from unknown client 192.168.x.xxx port xxxxx ----
The client isn't listed in the clients.conf file.
I have allowed the ufw as
If the server says "unknown client", then the firewall is passing packets correctly.
My Client is the Access point, as in the "client.conf" file
Client AP { ipaddr = 192.168.x.xxx secret = test111 }
Any idea what I am missing in here?
Either you're editing the wrong file, or the IP addresses don't match. Run the server in debugging mode, and read ALL of the output. It will print out the client configuration, including IP addresses of all clients. Alan DeKok.
Hello Alan, Thank you for your advice. I just have some findings, hopefully it's useful for anyone in the similar settings We have total of 5 UAP-AC-Pro (Access Point) which is controlled by a CloudKey software system Each of the 5 AP above has different IP address. The Cloudkey has different IP address than the above 5 APs In the Clients.conf file (/etc/freeradius/3.0/clients.conf) You must add ALL of the Access Points's IP address and the Cloudkey's IP address. This will make the Freeradius work without saying some "Ignoring from auth address..." problem. DONE! Could I now ask for your instruction again: I heard there is LAMP stack that install PHP, MYSQL, APACHE2 to control Freeradius with user interface. Or there is something call Dolaradius as well? Could you please recommend me one guide, step-by-step how to install and config those to work with Freeradius? Thank you all of your support, you guys have been great! James -----Original Message----- From: Freeradius-Users <freeradius-users-bounces+james.ngobui=gmail.com@lists.freeradius.org> On Behalf Of Alan DeKok Sent: January 22, 2020 4:32 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Ignoring request to auth address * On Jan 22, 2020, at 2:48 AM, James Ngo <james.ngobui@gmail.com> wrote:
I am newbie with Freeradius so hopefully, you could extend your patience with my question
I setup FreeRadius server on Ubuntu 18.04. Update and everything went OK.
Setup the client and user all OK
That's good.
In the sudo freeradius -X, the status keeps saying
----Ignoring request to auth address * port 1812 bound to server default from unknown client 192.168.x.xxx port xxxxx ----
The client isn't listed in the clients.conf file.
I have allowed the ufw as
If the server says "unknown client", then the firewall is passing packets correctly.
My Client is the Access point, as in the "client.conf" file
Client AP { ipaddr = 192.168.x.xxx secret = test111 }
Any idea what I am missing in here?
Either you're editing the wrong file, or the IP addresses don't match. Run the server in debugging mode, and read ALL of the output. It will print out the client configuration, including IP addresses of all clients. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Thu, 2020-01-23 at 08:30 -0800, James Ngo wrote:
You must add ALL of the Access Points's IP address and the Cloudkey's IP address. This will make the Freeradius work without saying some "Ignoring from auth address..." problem. DONE!
Yes, the Ubiquiti way is for the controller to manage the APs, but the APs are independent, so each operates as a NAS. Contrast, e.g. the Cisco way, where the controller is central and all traffic/RADIUS/etc comes from the controller.
I heard there is LAMP stack that install PHP, MYSQL, APACHE2 to control Freeradius with user interface. Or there is something call Dolaradius as well? Could you please recommend me one guide, step-by-step how to install and config those to work with Freeradius?
Daloradius isn't a FreeRADIUS project, you'll need to look at their instructions or ask on their lists to find out how it works. It's not something we develop, know about or use. -- Matthew
Hello Matthew, Thank you for your reply. I heard there is the web-interface called "phpMyAdmin" which work with PHP, APACHE2 and MYSQL. Would you know any source with the instruction how to do this? Thank you James -----Original Message----- From: Freeradius-Users <freeradius-users-bounces+james.ngobui=gmail.com@lists.freeradius.org> On Behalf Of Matthew Newton Sent: January 23, 2020 8:35 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Ignoring request to auth address * On Thu, 2020-01-23 at 08:30 -0800, James Ngo wrote:
You must add ALL of the Access Points's IP address and the Cloudkey's IP address. This will make the Freeradius work without saying some "Ignoring from auth address..." problem. DONE!
Yes, the Ubiquiti way is for the controller to manage the APs, but the APs are independent, so each operates as a NAS. Contrast, e.g. the Cisco way, where the controller is central and all traffic/RADIUS/etc comes from the controller.
I heard there is LAMP stack that install PHP, MYSQL, APACHE2 to control Freeradius with user interface. Or there is something call Dolaradius as well? Could you please recommend me one guide, step-by-step how to install and config those to work with Freeradius?
Daloradius isn't a FreeRADIUS project, you'll need to look at their instructions or ask on their lists to find out how it works. It's not something we develop, know about or use. -- Matthew - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Thu, 2020-01-23 at 08:41 -0800, James Ngo wrote:
I heard there is the web-interface called "phpMyAdmin" which work with PHP, APACHE2 and MYSQL. Would you know any source with the instruction how to do this?
Similarly, phpMyAdmin isn't a FreeRADIUS project. You need to ask them how you install and use their software. -- Matthew
participants (3)
-
Alan DeKok -
James Ngo -
Matthew Newton