How to configure freeradius client?
Hi, We use freeradius to authenticate some Network Equipment, wie Router, Switches, usw.. and all run well! # radiusd -v radiusd: FreeRADIUS Version 2.1.8, for host x86_64-suse-linux-gnu, built on Sep 2 2010 at 13:07:57 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. Now, I'm using "nagios" to check servers and network and I want to check up the freeradius server. So, I've install freeradius on a Linux machine and try to connect to the freeradius Server but It doesn't run : # radtest nagios nagios 10.28.8.133:1812 1812 outrider Sending Access-Request of id 120 to 10.28.x.133 port 1812 User-Name = "nagios" User-Password = "nagios" NAS-IP-Address = 127.0.0.2 NAS-Port = 1812 Sending Access-Request of id 120 to 10.28.x.133 port 1812 User-Name = "nagios" User-Password = "nagios" NAS-IP-Address = 127.0.0.2 NAS-Port = 1812 Sending Access-Request of id 120 to 10.28.x.133 port 1812 User-Name = "nagios" User-Password = "nagios" NAS-IP-Address = 127.0.0.2 NAS-Port = 1812 radclient: no response from server for ID 120 socket 3 1) I don't know what's the NAS-IP-Address? 2) I don't find any right document about "how to configure the client"? 3) How should I configure the client? Should some deamon to be start? Any help would be appreciated and thanks in advance, Best regards Freundliche Grüsse _________________ Jérôme M. Meyer Network Engineer IWB Telekom, Margarethenstrasse 40, 4002 Basel Telefon 061 275 52 66 Fax 061 275 59 40 E-Mail jerome.meyer@iwbtelekom.ch <mailto:vorname.name@iwbtelekom.ch> www.iwbtelekom.ch <http://www.iwbtelekom.ch/> Partner von Swisspower www.swisspower.ch <http://www.swisspower.ch/> (Bitte bedenken Sie die Folgen für die Umwelt, bevor Sie diese E-Mail ausdrucken.)
Meyer Jerome wrote:
# radiusd -v
What about "radiusd -X", as suggested in the FAQ, README, "man" page, web pages, and daily on this list?
radclient: no response from server for ID 120 socket 3
1) I don’t know what’s the NAS-IP-Address?
2) I don’t find any right document about „how to configure the client“?
See raddb/clients.conf.
3) How should I configure the client? Should some deamon to be start?
This is documented. Alan DeKok.
Thanks for reply!
Meyer Jerome wrote:
# radiusd -v
What about "radiusd -X", as suggested in the FAQ, README, "man" page, web pages, and daily on this list?
Should the client start the radiusd daemon too?
radclient: no response from server for ID 120 socket 3
1) I don’t know what’s the NAS-IP-Address?
2) I don’t find any right document about „how to configure the client“?
See raddb/clients.conf.
This file it is on the server to check which clients will be connected! Is it on the client too? Because the client should connect to the server and not the reverse!
3) How should I configure the client? Should some deamon to be start?
This is documented.
You means on the MAN pages?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Jérôme Meyer
On Fri, May 6, 2011 at 5:01 PM, Meyer Jerome <Jerome.Meyer@iwbtelekom.ch>wrote:
Thanks for reply!
Meyer Jerome wrote:
# radiusd -v
What about "radiusd -X", as suggested in the FAQ, README, "man" page, web pages, and daily on this list?
Should the client start the radiusd daemon too?
radclient: no response from server for ID 120 socket 3
1) I don’t know what’s the NAS-IP-Address?
2) I don’t find any right document about „how to configure the client“?
See raddb/clients.conf.
This file it is on the server to check which clients will be connected! Is it on the client too? Because the client should connect to the server and not the reverse!
3) How should I configure the client? Should some deamon to be start?
This is documented.
You means on the MAN pages?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Jérôme Meyer
Jérome, Please, before alan freaks out :-), read the documentation. (the wiki is a nice place to start) The things you're saying clearly show that you don't understand the concept at all. Kind regards Y
Ok! I'll read the complete documentation... and hope that ok. Because I've read some things and many about configuration and installation for server and don't find many thing about client... Thanks for your help! Jérôme M. On Fri, May 6, 2011 at 5:01 PM, Meyer Jerome <Jerome.Meyer@iwbtelekom.ch> wrote: Thanks for reply!
Meyer Jerome wrote:
# radiusd -v
What about "radiusd -X", as suggested in the FAQ, README, "man" page, web pages, and daily on this list?
Should the client start the radiusd daemon too?
radclient: no response from server for ID 120 socket 3
1) I don't know what's the NAS-IP-Address?
2) I don't find any right document about "how to configure the client"?
See raddb/clients.conf.
This file it is on the server to check which clients will be connected! Is it on the client too? Because the client should connect to the server and not the reverse!
3) How should I configure the client? Should some deamon to be start?
This is documented.
You means on the MAN pages?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Jérôme Meyer Jérome, Please, before alan freaks out :-), read the documentation. (the wiki is a nice place to start) The things you're saying clearly show that you don't understand the concept at all. Kind regards Y
Meyer Jerome wrote:
Should the client start the radiusd daemon too?
I have no idea what thinking resulted in that question.
This file it is on the server to check which clients will be connected! Is it on the client too?
Uh... no.
Because the client should connect to the server and not the reverse!
Really?
3) How should I configure the client? Should some deamon to be start?
This is documented.
You means on the MAN pages?
The existing documentation includes more than just the "man" pages. Go read it. Alan DeKok.
Meyer Jerome wrote:
Should the client start the radiusd daemon too?
I have no idea what thinking resulted in that question.
This file it is on the server to check which clients will be connected! Is it on the client too?
Uh... no.
Because the client should connect to the server and not the reverse!
Really?
3) How should I configure the client? Should some deamon to be start?
This is documented.
You means on the MAN pages?
The existing documentation includes more than just the "man" pages. Go read it.
You means... from wiki pages?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Best regards, Jérôme
On Fri, May 6, 2011 at 10:01 PM, Meyer Jerome <Jerome.Meyer@iwbtelekom.ch> wrote:
Should the client start the radiusd daemon too?
radclient: no response from server for ID 120 socket 3
1) I don’t know what’s the NAS-IP-Address?
2) I don’t find any right document about „how to configure the client“?
See raddb/clients.conf.
This file it is on the server to check which clients will be connected! Is it on the client too? Because the client should connect to the server and not the reverse!
Let's try a different approach, to see if you can understand this better. You said you "use freeradius to authenticate some Network Equipment, wie Router, Switches, usw.. and all run well!". So I assume you KNOW what to do when you need to add a new router/switch/whatever to use radius authentication, right? One of the proces includes configuring freeradius to recognize the new switch/whatever as a valid radius client (i.e. NAS).
From freeradius perspective, the "radtest" program (or whatever mechanism your nagios will use to test radius functionality) is just another NAS. And you need to configure the server to recognize the new NAS just like you usually do if you add another switch/whatever.
Does this make sense so far? -- Fajar
Hi Fajar, Thanks you very much for your explanation! Yeah, now it's make sense... and I understood where I should look for. Best regards, Jérôme -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+jerome.meyer=iwbtelekom.ch@lists.freeradius.org [mailto:freeradius-users-bounces+jerome.meyer=iwbtelekom.ch@lists.freeradius.org] Im Auftrag von Fajar A. Nugraha Gesendet: Freitag, 6. Mai 2011 17:23 An: FreeRadius users mailing list Betreff: Re: How to configure freeradius client? On Fri, May 6, 2011 at 10:01 PM, Meyer Jerome <Jerome.Meyer@iwbtelekom.ch> wrote:
Should the client start the radiusd daemon too?
radclient: no response from server for ID 120 socket 3
1) I don't know what's the NAS-IP-Address?
2) I don't find any right document about "how to configure the client"?
See raddb/clients.conf.
This file it is on the server to check which clients will be connected! Is it on the client too? Because the client should connect to the server and not the reverse!
Let's try a different approach, to see if you can understand this better. You said you "use freeradius to authenticate some Network Equipment, wie Router, Switches, usw.. and all run well!". So I assume you KNOW what to do when you need to add a new router/switch/whatever to use radius authentication, right? One of the proces includes configuring freeradius to recognize the new switch/whatever as a valid radius client (i.e. NAS).
From freeradius perspective, the "radtest" program (or whatever mechanism your nagios will use to test radius functionality) is just another NAS. And you need to configure the server to recognize the new NAS just like you usually do if you add another switch/whatever.
Does this make sense so far? -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Fajar A. Nugraha -
Meyer Jerome -
YvesDM