Info: No Pool-Name defined. Trying to add new APN
Hi guys, I have been trying to work out why our new APN cannot have any IP addresses allocated. The IP addresses should come from an existing pool already in use by other APNs. I've inherited this from since departed colleagues. I did post this a earlier but thought I should start a fresh thread with debug infomation. FreeRadius package is : freeradius-2.1.12-1.el6.x86_64 / Centos 6 The user name is 0TESTUSER1 The new APN is m2m.vod.trim.com In the users file I added , DEFAULT NAS-IP-Address == 195.123.123.0, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.50, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.51, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.52, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.53, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.54, Pool-Name := vodafone The first line already worked with another APN with IP addresses assigned. When I tried to authenticate with our new SIM and APN log in worked but no pool was defined. Tue Sep 15 09:42:25 2015 : Auth: Login OK: [0TESTUSER1] (from client vodafone-nas-m2m-51 port 511026 cli 882393728079768) Tue Sep 15 09:42:25 2015 : Info: No Pool-Name defined (did m2m.vod.trim.com cli 882393728079768 port 511026 user 0TESTUSER1) Debug: I ran in debug to see if I could get any more info and you'll find thus below. I'd be grateful if somebody would let me know how I mend this, or point me the right direction? Thanks and kind regards, Sophie [sql] expand: UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET acctstoptime = '2015-09-15 09:46:13', acctsessiontime = '510', acctinputoctets = '0' << 32 | '2643', acctoutputoctets = '0' << 32 | rlm_sql (sql): Reserving sql socket id: 0 rlm_sql (sql): Released sql socket id: 0 ++[sql] returns ok ++[exec] returns noop [attr_filter.accounting_response] expand: %{User-Name} -> 000005a8a attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Finished request 128. Going to the next request Thread 4 waiting to be assigned a request Waking up in 0.6 seconds. Thread 5 got semaphore Thread 5 handling request 129, (17 handled so far) [<thread>] # Executing section authorize from file /etc/raddb/sites-enabled/default [<thread>] +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[digest] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [files] users: Matched entry DEFAULT at line 228 ++[files] returns ok [sql] expand: %{User-Name} -> 0TESTUSER1 [sql] sql_set_user escaped user --> '0TESTUSER1' rlm_sql (sql): Reserving sql socket id: 23 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = '0TESTUSER1' ORDER BY id [sql] User found in radcheck table [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = '0TESTUSER1' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = '0TESTUSER1' ORDER BY priority [sql] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'm2m.vod.trim.com' ORDER BY id [sql] User found in group m2m.vod.trim.com [sql] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'm2m.vod.trim.com' ORDER BY id rlm_sql (sql): Released sql socket id: 23 ++[sql] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated Found Auth-Type = PAP # Executing group from file /etc/raddb/sites-enabled/default +- entering group PAP {...} [pap] login attempt with password "F8BB45FCDC59995EE2C12A96E10B1091" [pap] Using clear text password "F8BB45FCDC59995EE2C12A96E10B1091" [pap] User authenticated successfully ++[pap] returns ok Login OK: [0TESTUSER1] (from client vodafone-nas-m2m-51 port 443593 cli 882393728079768) # Executing section post-auth from file /etc/raddb/sites-enabled/default +- entering group post-auth {...} [sqlippool] No Pool-Name defined. [sqlippool] expand: No Pool-Name defined (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name}) -> No Pool-Name defined (did m2m.vod.trim.com cli 882393728079768 port 443593 user 0TESTUSER1) No Pool-Name defined (did m2m.vod.trim.com cli 882393728079768 port 443593 user 0TESTUSER1) ++[sqlippool] returns noop [sql] expand: %{User-Name} -> 0TESTUSER1 [sql] sql_set_user escaped user --> '0TESTUSER1' [sql] expand: %{User-Password} -> F8BB45FCDC59995EE2C12A96E10B1091 [sql] expand: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') -> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '0TESTUSER1', 'F8BB45FCDC59995EE2C12A96E10B1091', 'Access-Accept', '2015-09-15 09:46:13') rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '0TESTUSER1', 'F8BB45FCDC59995EE2C12A96E10B1091', 'Access-Accept', '2015-09-15 09:46:13') rlm_sql (sql): Reserving sql socket id: 22 rlm_sql (sql): Released sql socket id: 22 ++[sql] returns ok ++[exec] returns noop Finished request 129. Going to the next request Thread 5 waiting to be assigned a request Waking up in 0.5 seconds. Thread 6 got semaphore Thread 6 handling request 130, (17 handled so far) [<thread>] # Executing section authorize from file /etc/raddb/sites-enabled/default [<thread>] +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[digest] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [files] users: Matched entry DEFAULT at line 207 ++[files] returns ok [sql] expand: %{User-Name} -> 357541001195173 [sql] sql_set_user escaped user --> '357541001195173' rlm_sql (sql): Reserving sql socket id: 21 ------------------------------------- END OF EMAIL ---------------------------------------------------
On Sep 15, 2015, at 4:02 AM, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
I have been trying to work out why our new APN cannot have any IP addresses allocated. The IP addresses should come from an existing pool already in use by other APNs. I've inherited this from since departed colleagues. I did post this a earlier but thought I should start a fresh thread with debug infomation.
The user name is 0TESTUSER1 The new APN is m2m.vod.trim.com
What is the IP?
In the users file I added , DEFAULT NAS-IP-Address == 195.123.123.0, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.50, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.51, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.52, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.53, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.54, Pool-Name := vodafone
Is the IP for that APN listed there?
The first line already worked with another APN with IP addresses assigned.
When I tried to authenticate with our new SIM and APN log in worked but no pool was defined.
Tue Sep 15 09:42:25 2015 : Auth: Login OK: [0TESTUSER1] (from client vodafone-nas-m2m-51 port 511026 cli 882393728079768) Tue Sep 15 09:42:25 2015 : Info: No Pool-Name defined (did m2m.vod.trim.com cli 882393728079768 port 511026 user 0TESTUSER1)
Debug: I ran in debug to see if I could get any more info and you'll find thus below.
I'd be grateful if somebody would let me know how I mend this, or point me the right direction?
Thanks and kind regards, Sophie
[sql] expand: UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET acctstoptime = '2015-09-15 09:46:13', acctsessiontime = '510', acctinputoctets = '0' << 32 | '2643', acctoutputoctets = '0' << 32 |
It would help to show the debug output from when the server receives a packet. And not some random piece from the middle of processing a packet.
[files] users: Matched entry DEFAULT at line 228
So... what's on line 228? Alan DeKok.
Hi Alan,
Is the IP for that APN listed there?
We don't have IP addresses for our private APNs assigned initially. Our Radius assigns the IP address not the mobile provider. The connection comes in over from Vodafone and their Radius proxies the request to our Radius server, which then DHCP an IP addresses.
What is the IP?
Radius has to assign the IP address, but cannot because it did not find a matching Pool-Name. This is the problem.
So... what's on line 228?
Line 228 in /etc/raddb/users has this entry: DEFAULT Framed-IP-Netmask = 255.255.255.255 The entire /etc/raddb/users contains this, DEFAULT NAS-IP-Address == 172.100.200.1, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.0, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.50, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.51, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.52, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.53, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.54, Pool-Name := vodafone DEFAULT NAS-IP-Address == 10.123.255.254, Pool-Name := proximus-carli DEFAULT NAS-IP-Address == 10.124.255.254, Pool-Name := proximus-mechelen DEFAULT Framed-IP-Netmask = 255.255.255.255 ( IP address obfuscated a bit ) Sophie. On 9/15/2015 5:46 PM, Alan DeKok wrote:
On Sep 15, 2015, at 4:02 AM, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
I have been trying to work out why our new APN cannot have any IP addresses allocated. The IP addresses should come from an existing pool already in use by other APNs. I've inherited this from since departed colleagues. I did post this a earlier but thought I should start a fresh thread with debug infomation.
The user name is 0TESTUSER1 The new APN is m2m.vod.trim.com
What is the IP?
In the users file I added , DEFAULT NAS-IP-Address == 195.123.123.0, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.50, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.51, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.52, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.53, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.54, Pool-Name := vodafone Is the IP for that APN listed there?
The first line already worked with another APN with IP addresses assigned.
When I tried to authenticate with our new SIM and APN log in worked but no pool was defined.
Tue Sep 15 09:42:25 2015 : Auth: Login OK: [0TESTUSER1] (from client vodafone-nas-m2m-51 port 511026 cli 882393728079768) Tue Sep 15 09:42:25 2015 : Info: No Pool-Name defined (did m2m.vod.trim.com cli 882393728079768 port 511026 user 0TESTUSER1)
Debug: I ran in debug to see if I could get any more info and you'll find thus below.
I'd be grateful if somebody would let me know how I mend this, or point me the right direction?
Thanks and kind regards, Sophie
[sql] expand: UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET acctstoptime = '2015-09-15 09:46:13', acctsessiontime = '510', acctinputoctets = '0' << 32 | '2643', acctoutputoctets = '0' << 32 | It would help to show the debug output from when the server receives a packet. And not some random piece from the middle of processing a packet. [files] users: Matched entry DEFAULT at line 228 So... what's on line 228?
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 16 Sep 2015, at 09:03, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
Hi Alan,
Is the IP for that APN listed there?
We don't have IP addresses for our private APNs assigned initially. Our Radius assigns the IP address not the mobile provider. The connection comes in over from Vodafone and their Radius proxies the request to our Radius server, which then DHCP an IP addresses.
What is the IP?
Radius has to assign the IP address, but cannot because it did not find a matching Pool-Name. This is the problem.
So... what's on line 228?
Line 228 in /etc/raddb/users has this entry: DEFAULT Framed-IP-Netmask = 255.255.255.255
The entire /etc/raddb/users contains this, DEFAULT NAS-IP-Address == 172.100.200.1, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.0, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.50, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.51, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.52, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.53, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.54, Pool-Name := vodafone DEFAULT NAS-IP-Address == 10.123.255.254, Pool-Name := proximus-carli DEFAULT NAS-IP-Address == 10.124.255.254, Pool-Name := proximus-mechelen DEFAULT Framed-IP-Netmask = 255.255.255.255
( IP address obfuscated a bit )
= '%{NAS-IP-Address}' ->
Your NAS isn't sending the NAS-IP-Address attribute Add this to authorize update request { NAS-IP-Address = "%{Packet-Src-IP-Address}" } That will add the attribute if not already present, with the value of the src IP field in the IP header. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Hi Arran, Thanks I'll try this. Our previous requests arrive directly from the mobile network, but this new APN is proxied by Vodafone's NAS. Perhaps this was not included because requests sent by proxy.
Add this to authorize Just checking if this should this be set in sites-enabled/default in the authorize section or should this be placed in another file?
e.g with the update request appended, authorize { preprocess chap digest eap { ok = return } files sql expiration logintime pap update request { NAS-IP-Address = "%{Packet-Src-IP-Address}" } } Sophie. On 9/16/2015 10:28 AM, Arran Cudbard-Bell wrote:
On 16 Sep 2015, at 09:03, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
Hi Alan,
Is the IP for that APN listed there? We don't have IP addresses for our private APNs assigned initially. Our Radius assigns the IP address not the mobile provider. The connection comes in over from Vodafone and their Radius proxies the request to our Radius server, which then DHCP an IP addresses.
What is the IP? Radius has to assign the IP address, but cannot because it did not find a matching Pool-Name. This is the problem.
So... what's on line 228? Line 228 in /etc/raddb/users has this entry: DEFAULT Framed-IP-Netmask = 255.255.255.255
The entire /etc/raddb/users contains this, DEFAULT NAS-IP-Address == 172.100.200.1, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.0, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.50, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.51, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.52, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.53, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.54, Pool-Name := vodafone DEFAULT NAS-IP-Address == 10.123.255.254, Pool-Name := proximus-carli DEFAULT NAS-IP-Address == 10.124.255.254, Pool-Name := proximus-mechelen DEFAULT Framed-IP-Netmask = 255.255.255.255
( IP address obfuscated a bit )
= '%{NAS-IP-Address}' -> Your NAS isn't sending the NAS-IP-Address attribute
Add this to authorize
update request { NAS-IP-Address = "%{Packet-Src-IP-Address}" }
That will add the attribute if not already present, with the value of the src IP field in the IP header.
-Arran
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sep 16, 2015, at 4:03 AM, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
Is the IP for that APN listed there?
We don't have IP addresses for our private APNs assigned initially.
You don't seem to understand my question. Or, you're not explaining things properly. Your "users" file is assigning Pool-Name *conditionally*. The condition checks the NAS-IP-Address. And in your tests, the Pool-Name isn't being assigned. Why? Because the NAS-IP-Address check doesn't match. Why doesn't it match? Because the NAS-IP-Address isn't listed there.
So... what's on line 228?
Line 228 in /etc/raddb/users has this entry: DEFAULT Framed-IP-Netmask = 255.255.255.255
The entire /etc/raddb/users contains this, DEFAULT NAS-IP-Address == 172.100.200.1, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.0, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.50, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.51, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.52, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.53, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.1231.54, Pool-Name := vodafone DEFAULT NAS-IP-Address == 10.123.255.254, Pool-Name := proximus-carli DEFAULT NAS-IP-Address == 10.124.255.254, Pool-Name := proximus-mechelen DEFAULT Framed-IP-Netmask = 255.255.255.255
No, that isn't the "entire" users file. That doesn't contain 228 lines of text. The larger problem is you're not clear on what the server is supposed to do. You're not reading the full debug log, to educate yourself. You're not posting the full debug log here, so we can't help you. I have no idea why people ask for help, and then try *hard* to prevent people from helping them. Alan DeKok.
Hi, Yes, I did not understand when you asked for the IP address. The incoming NAS IP was from vodafone-nas-m2m-53 which has been set in mysql table radius.nas with an IP address of +----+------------------+-----------------------+-------+-------+---------------------------+--------+-----------+-----------------------+ | id | nasname | shortname | type | ports | secret | server | community | description | +----+------------------+-----------------------+-------+-------+---------------------------+--------+-----------+-----------------------+ | 13 | 195.123.123.53 | vodafone-nas-m2m-53 | other | NULL | xxxxxxxxxxxxxxxxxxxxxxxx | NULL | NULL | Vodafone NAS M2M 53 |
No, that isn't the "entire" users file. That doesn't contain 228 lines of text. Sorry I was unclear. By entire contents I meant I removed all the # and empty lines for legibility.
Line 228 was: DEFAULT Framed-IP-Netmask = 255.255.255.255. The debug from radius is 39 mb and I did not think the list would accept this. Of course I could post this if you like, but would obfuscate lots before. -rw-r----- 1 radiusd radiusd 39M Sep 16 14:52 /var/log/radius/radius.log I shall try and reduce this in size and send again in a moment.
Your "users" file is assigning Pool-Name *conditionally*. The condition checks the NAS-IP-Address. And in your tests, the Pool-Name isn't being assigned.
Because I don't understand how incoming NAS IP addresses link to Pool-Names that link back to IP address allocation in radius.radippool table. On 9/16/2015 2:41 PM, Alan DeKok wrote:
On Sep 16, 2015, at 4:03 AM, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
Is the IP for that APN listed there? We don't have IP addresses for our private APNs assigned initially. You don't seem to understand my question. Or, you're not explaining things properly.
Your "users" file is assigning Pool-Name *conditionally*. The condition checks the NAS-IP-Address. And in your tests, the Pool-Name isn't being assigned.
Why? Because the NAS-IP-Address check doesn't match. Why doesn't it match? Because the NAS-IP-Address isn't listed there.
So... what's on line 228? Line 228 in /etc/raddb/users has this entry: DEFAULT Framed-IP-Netmask = 255.255.255.255
The entire /etc/raddb/users contains this, DEFAULT NAS-IP-Address == 172.100.200.1, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.0, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.50, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.51, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.121.52, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.53, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.54, Pool-Name := vodafone DEFAULT NAS-IP-Address == 10.123.255.254, Pool-Name := proximus-carli DEFAULT NAS-IP-Address == 10.124.255.254, Pool-Name := proximus-mechelen DEFAULT Framed-IP-Netmask = 255.255.255.255 No, that isn't the "entire" users file. That doesn't contain 228 lines of text.
The larger problem is you're not clear on what the server is supposed to do. You're not reading the full debug log, to educate yourself. You're not posting the full debug log here, so we can't help you.
I have no idea why people ask for help, and then try *hard* to prevent people from helping them.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, Here is the log file on this URL, http://www.filedropper.com/radiusdebugobfuscatedlog Sophie. On 9/16/2015 2:57 PM, Sophie Loewenthal wrote:
Hi,
Yes, I did not understand when you asked for the IP address. The incoming NAS IP was from vodafone-nas-m2m-53 which has been set in mysql table radius.nas with an IP address of
+----+------------------+-----------------------+-------+-------+---------------------------+--------+-----------+-----------------------+
| id | nasname | shortname | type | ports | secret | server | community | description | +----+------------------+-----------------------+-------+-------+---------------------------+--------+-----------+-----------------------+
| 13 | 195.123.123.53 | vodafone-nas-m2m-53 | other | NULL | xxxxxxxxxxxxxxxxxxxxxxxx | NULL | NULL | Vodafone NAS M2M 53 |
No, that isn't the "entire" users file. That doesn't contain 228 lines of text. Sorry I was unclear. By entire contents I meant I removed all the # and empty lines for legibility.
Line 228 was: DEFAULT Framed-IP-Netmask = 255.255.255.255.
The debug from radius is 39 mb and I did not think the list would accept this. Of course I could post this if you like, but would obfuscate lots before. -rw-r----- 1 radiusd radiusd 39M Sep 16 14:52 /var/log/radius/radius.log
I shall try and reduce this in size and send again in a moment.
Your "users" file is assigning Pool-Name *conditionally*. The condition checks the NAS-IP-Address. And in your tests, the Pool-Name isn't being assigned.
Because I don't understand how incoming NAS IP addresses link to Pool-Names that link back to IP address allocation in radius.radippool table.
On 9/16/2015 2:41 PM, Alan DeKok wrote:
On Sep 16, 2015, at 4:03 AM, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
Is the IP for that APN listed there? We don't have IP addresses for our private APNs assigned initially. You don't seem to understand my question. Or, you're not explaining things properly.
Your "users" file is assigning Pool-Name *conditionally*. The condition checks the NAS-IP-Address. And in your tests, the Pool-Name isn't being assigned.
Why? Because the NAS-IP-Address check doesn't match. Why doesn't it match? Because the NAS-IP-Address isn't listed there.
So... what's on line 228? Line 228 in /etc/raddb/users has this entry: DEFAULT Framed-IP-Netmask = 255.255.255.255
The entire /etc/raddb/users contains this, DEFAULT NAS-IP-Address == 172.100.200.1, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.0, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.50, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.51, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.121.52, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.53, Pool-Name := vodafone DEFAULT NAS-IP-Address == 195.123.123.54, Pool-Name := vodafone DEFAULT NAS-IP-Address == 10.123.255.254, Pool-Name := proximus-carli DEFAULT NAS-IP-Address == 10.124.255.254, Pool-Name := proximus-mechelen DEFAULT Framed-IP-Netmask = 255.255.255.255 No, that isn't the "entire" users file. That doesn't contain 228 lines of text.
The larger problem is you're not clear on what the server is supposed to do. You're not reading the full debug log, to educate yourself. You're not posting the full debug log here, so we can't help you.
I have no idea why people ask for help, and then try *hard* to prevent people from helping them.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sep 17, 2015, at 7:05 AM, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
Here is the log file on this URL,
A 21M file? Really? And given a ".gz" extension, while the file itself is just text? That's ridiculous. Everyone else posts the debug output, showing one or two packets. That's sufficient. And what's in the file? ... Wed Sep 16 16:13:58 2015 : Auth: Login incorrect: [357541000390577] (from client proxi-nas-carli port 47822 cli 997700010065395) Wed Sep 16 16:13:59 2015 : Info: Released IP 10.123.42.3 (did m2m.vod.trim.com cli 98627040209 user 110006d2b) ... It's not the debug output. I know you're capable of creating the debug output, because you've posted pieces of it before. So... why aren't you following instructions? Why are you working HARD to make it impossible for us to help you? Alan DeKok.
Alen, Debug started at line 718 of 244222 Kind regards, Sophie -- Sophie Loewenthal System Engineer ITOPS / Trimble Transport & Logistics GSM:+32.471.900703 On 9/17/2015 2:01 PM, Alan DeKok wrote:
On Sep 17, 2015, at 7:05 AM, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
Here is the log file on this URL,
A 21M file? Really? And given a ".gz" extension, while the file itself is just text?
That's ridiculous.
Everyone else posts the debug output, showing one or two packets. That's sufficient.
And what's in the file?
... Wed Sep 16 16:13:58 2015 : Auth: Login incorrect: [357541000390577] (from client proxi-nas-carli port 47822 cli 997700010065395) Wed Sep 16 16:13:59 2015 : Info: Released IP 10.123.42.3 (did m2m.vod.trim.com cli 98627040209 user 110006d2b) ...
It's not the debug output. I know you're capable of creating the debug output, because you've posted pieces of it before.
So... why aren't you following instructions? Why are you working HARD to make it impossible for us to help you?
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sep 17, 2015, at 8:07 AM, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
Debug started at line 718 of 244222
No. If you can't be bothered to post a *short* debug output to the list like EVERYONE ELSE does, I can't be bothered to do any work, either. Again, you're asking for my help, and then going out of your way to make it as difficult as possible for me to help you. This is anti-social. Stop it. Alan DeKok.
On 9/17/2015 2:10 PM, Alan DeKok wrote:
If you can't be bothered to post a *short* debug output to the list like EVERYONE ELSE does, I can't be bothered to do any work, either.
I posted a snip-it to the group showing debugging information earlier and you rejected this because you could not see the short debug output I was interested. You asked for a full debug so I sent the whole lot. Since I was unfamiliar with this I had thought that the extra information at the start could have helped you, but clearly not. On 9/15/2015 5:46 PM, Alan DeKok wrote:
It would help to show the debug output from when the server receives a packet. And not some random piece from the middle of processing a packet.
This is anti-social. Stop it. Anti-social acts are violent acts. Stop using hyperbole.
Kind regards, Sophie On 9/17/2015 2:10 PM, Alan DeKok wrote:
On Sep 17, 2015, at 8:07 AM, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
Debug started at line 718 of 244222 No.
If you can't be bothered to post a *short* debug output to the list like EVERYONE ELSE does, I can't be bothered to do any work, either.
Again, you're asking for my help, and then going out of your way to make it as difficult as possible for me to help you. This is anti-social. Stop it.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sep 17, 2015, at 8:22 AM, Sophie Loewenthal <sophie.loewenthal@trimbletl.com> wrote:
I posted a snip-it to the group showing debugging information earlier and you rejected this because you could not see the short debug output I was interested.
That sentence is not grammatically correct. From what I can understand of the meaning, it's also wrong.
You asked for a full debug so I sent the whole lot.
Bullshit. You sent a file with hundreds of lines of NON DEBUG output. And then didn't explain what it was. And expected me to wade through hundreds of lines of useless crap before (somehow) magically discovering the *real* debug output. That's anti-social. You expect *me* to do work that you refuse to do.
Since I was unfamiliar with this I had thought that the extra information at the start could have helped you, but clearly not.
Since you're unfamiliar with it, you should FOLLOW INSTRUCTIONS. Like everyone else does.
On 9/15/2015 5:46 PM, Alan DeKok wrote:
It would help to show the debug output from when the server receives a packet. And not some random piece from the middle of processing a packet.
This is anti-social. Stop it. Anti-social acts are violent acts. Stop using hyperbole.
Bullshit. Anti-social acts can also be acting like an asshole. This list is for helping people with FreeRADIUS problems. You need to (a) follow instructions, and (b) stop arguing If you keep complaining, you will be unsubscribed from the list, and permanently banned. Anti-social whiners are not allowed on this list. Alan DeKok.
participants (3)
-
Alan DeKok -
Arran Cudbard-Bell -
Sophie Loewenthal