Maybe I'm missing something, but is this shown while you do use the radtest command? If so, then it's normal that you get nothing on radwho. If you get nothing on radwho when using the NAS (and you didn't went so far from the default freeradius configuration), then indeed you still need to configure it to send accounting data to radius. On Wednesday 09 December 2009 02:58:13 pm Ramzi Abdallah wrote:
thanks Ivan, when I run in debug mode I get the bellow errors
++[preprocess] returns ok [acct_unique] WARNING: Attribute NAS-Port was not found in request, unique ID MAY be inconsistent [acct_unique] Hashing ',Client-IP-Address = 193.188.129.17,NAS-IP-Address = 193.188.129.17,Acct-Session-Id = "00550003",User-Name = "rsa"' [acct_unique] Acct-Unique-Session-ID = "cc3ac6adce99a1dd". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "rsa", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop ++[files] returns noop
[radutmp] expand: /var/log/radius/radutmp -> /var/log/radius/radutmp [radutmp] expand: %{User-Name} -> rsa rlm_radutmp: No NAS-Port seen. Cannot do anything. rlm_radumtp: WARNING: checkrad will probably not work! ++[radutmp] returns noop
Date: Wed, 9 Dec 2009 21:32:55 +0000 Subject: RE: radwho and radtest From: tnt@kalik.net To: rabdallah@pobox.com; freeradius-users@lists.freeradius.org
thank you alan for the quick reply. It worked just fine. Now I am still facing the problem with the radwho and radlast. Any idea
Yes, you have sent an authentication request. No accounting. So there is nothing for radwho to show. It displays accounting information. In case you weren't aware, radius server doesn't generate accounting information.
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Windows Live: Keep your friends up to date with what you do online. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/so cial-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_1:09201 0
I get this when I login to the firewall
To: rabdallah@pobox.com; freeradius-users@lists.freeradius.org Subject: Re: radwho and radtest From: gera@gera.me Date: Wed, 9 Dec 2009 15:28:30 -0700
Maybe I'm missing something, but is this shown while you do use the radtest command? If so, then it's normal that you get nothing on radwho.
If you get nothing on radwho when using the NAS (and you didn't went so far from the default freeradius configuration), then indeed you still need to configure it to send accounting data to radius.
On Wednesday 09 December 2009 02:58:13 pm Ramzi Abdallah wrote:
thanks Ivan, when I run in debug mode I get the bellow errors
++[preprocess] returns ok [acct_unique] WARNING: Attribute NAS-Port was not found in request, unique ID MAY be inconsistent [acct_unique] Hashing ',Client-IP-Address = 193.188.129.17,NAS-IP-Address = 193.188.129.17,Acct-Session-Id = "00550003",User-Name = "rsa"' [acct_unique] Acct-Unique-Session-ID = "cc3ac6adce99a1dd". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "rsa", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop ++[files] returns noop
[radutmp] expand: /var/log/radius/radutmp -> /var/log/radius/radutmp [radutmp] expand: %{User-Name} -> rsa rlm_radutmp: No NAS-Port seen. Cannot do anything. rlm_radumtp: WARNING: checkrad will probably not work! ++[radutmp] returns noop
Date: Wed, 9 Dec 2009 21:32:55 +0000 Subject: RE: radwho and radtest From: tnt@kalik.net To: rabdallah@pobox.com; freeradius-users@lists.freeradius.org
thank you alan for the quick reply. It worked just fine. Now I am still facing the problem with the radwho and radlast. Any idea
Yes, you have sent an authentication request. No accounting. So there is nothing for radwho to show. It displays accounting information. In case you weren't aware, radius server doesn't generate accounting information.
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Windows Live: Keep your friends up to date with what you do online. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/so cial-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_1:09201 0
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Windows Live: Keep your friends up to date with what you do online. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/soc...
hello Ivan attached is the complete debug log
Date: Wed, 9 Dec 2009 23:28:49 +0000 Subject: RE: radwho and radtest From: tnt@kalik.net To: rabdallah@pobox.com; freeradius-users@lists.freeradius.org
I get this when I login to the firewall
It would help if you wouldn't edit the debug. Post the whole thing request + processing (both for authentication and accounting).
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Windows Live: Keep your friends up to date with what you do online. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/soc...
Please do the rest of us a favor and configure your mail client to use the correct data type when attaching files. Your log file came through as: Content-Type: application/octet-stream Which means mail clients think this is binary data and won't display it nor do they even know they can open a text editor on it. The Content-Type should have been text. -- John Dennis <jdennis@redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/
attached is the complete debug log
Try using Calling-Station-Id instead of NAS-Port for accounting. Alter (raddb/modules/)acct_unique to use Calling-Station-Id. And use sql for session and accounting. It's quicker and queries can be configured to use Calling-Station-Id instead of NAS-Port. Ivan Kalik
Date: Wed, 9 Dec 2009 23:28:49 +0000 Subject: RE: radwho and radtest From: tnt@kalik.net To: rabdallah@pobox.com; freeradius-users@lists.freeradius.org
I get this when I login to the firewall
It would help if you wouldn't edit the debug. Post the whole thing request + processing (both for authentication and accounting).
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Windows Live: Keep your friends up to date with what you do online. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/soc... List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
gera -
John Dennis -
Ramzi Abdallah -
tnt＠kalik.net