Authentication problem-FreeRadius Output
[root@radiusd sbin]# /opt/radiusd/sbin/runradiusd -X + LD_LIBRARY_PATH=/opt/openssl/lib + LD_PRELOAD=/opt/openssl/lib/libcrypto.so + export LD_LIBRARY_PATH + export LD_PRELOAD + /opt/radiusd/sbin/radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /opt/radiusd/etc/raddb/proxy.conf Config: including file: /opt/radiusd/etc/raddb/clients.conf Config: including file: /opt/radiusd/etc/raddb/snmp.conf Config: including file: /opt/radiusd/etc/raddb/eap.conf Config: including file: /opt/radiusd/etc/raddb/sql.conf main: prefix = "/opt/radiusd" main: localstatedir = "/opt/radiusd/var" main: logdir = "/opt/radiusd/var/log/radius" main: libdir = "/opt/radiusd/lib" main: radacctdir = "/opt/radiusd/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/opt/radiusd/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/opt/radiusd/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/opt/radiusd/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /opt/radiusd/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded eap eap: default_eap_type = "tls" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)" tls: pem_file_type = yes tls: private_key_file = "/opt/radiusd/etc/1x/radiusd.ece.neu.edu.pem" tls: certificate_file = "/opt/radiusd/etc/1x/radiusd.ece.neu.edu.pem" tls: CA_file = "/opt/radiusd/etc/1x/root.pem" tls: private_key_password = "serverpwd" tls: dh_file = "/opt/radiusd/etc/1x/dh" tls: random_file = "/opt/radiusd/etc/1x/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" rlm_eap: Loaded and initialized type tls mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/opt/radiusd/etc/raddb/huntgroups" preprocess: hints = "/opt/radiusd/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/opt/radiusd/etc/raddb/users" files: acctusersfile = "/opt/radiusd/etc/raddb/acct_users" files: preproxy_usersfile = "/opt/radiusd/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Addr" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/opt/radiusd/var/log/radius/radacct/%{Client-IP-Address}" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/opt/radiusd/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded radutmp radutmp: filename = "/opt/radiusd/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Listening on proxy *:1814 Ready to process requests. Hamid Salim wrote:
Hi all, i was wondering if anyone has successfully implemented the following setup and/or had any issues. this is my second post. your help will be greatly appreciated.
I have a setup as follows:
Fedora core 3 FreeRadius 1.0.4 openssl .098 Dell TrueMobile 1170 Access Pointv2.3.3 802.11b/g cards for AP and supplicant Windows XP SP2
FreeRadius is not authenticating, there are no messages on the screen or the logfile. The AP does not see the FreeRadius server!
I think this is a configuration issue outside of FreeRadius.
Has anyone had similar problem.
Any help will be greatly appreciated as i have hit a wall here and i am on a deadline!
thanks Hamid.
On Wed, 3 Aug 2005, Hamid Salim wrote:
radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Listening on proxy *:1814 Ready to process requests.
You need to figure out why your NAS is not sending radius packets to the radius server. Check your network connections, your firewall rules, etc..
participants (2)
-
Dusty Doris -
Hamid Salim