GIVEN: I can use both the test account and a laptop with an access point to access our wireless network via freeradius. However, I can not see who is currently online through radlast and radwho. Authentication Style: MAC address using the ${sysconfdir}/raddb/users file DETAILS Server OS: Mac OS X - 10.4.2 Darwin (fully qualified domain name) 8.2.0 Darwin Kernel Version 8.2.0: Fri Jun 24 17:46:54 PDT 2005; root:xnu-792.2.4.obj~3/RELEASE_PPC Power Macintosh powerpc radiusd - version 1.0.5 NAS: Netgear - Prosafe Wireless Access Point WG102 Firmware Version V1.0.31 ==Accounting is ON== Primary Accounting Server IP Address (suppressed) Port Number 1813 Shared Secret (suppressed) $ radlast last: /usr/local/var/log/radius/radwtmp: No such file or directory $ radwho radwho: Error reading /usr/local/var/log/radius/radutmp: No such file or directory $ /usr/local/sbin/radiusd -X ... Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = no radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. from /usr/local/etc/raddb/radiusd.conf ... radutmp { filename = ${logdir}/radutmp username = %{User-Name} case_sensitive = no check_with_nas = yes perm = 0600 callerid = "yes" } ... radutmp sradutmp { filename = ${logdir}/sradutmp perm = 0644 callerid = "no" } ... accounting { detail unix radutmp } ... session { radutmp } ----------------------------------------- The views, opinions and statements contained in this transmission are not necessarily the views, opinions and statements of the School District of Onalaska. http://www.onalaska.k12.wi.us/ This e-mail, and any files transmitted with it may contain confidential material and is intended solely for the use of the individual to whom it is addressed. If you have received this e-mail in error, please discard the message and notify the sender directly.
Kevin Capwell <capke@webmail.onalaska.k12.wi.us> wrote:
GIVEN: I can use both the test account and a laptop with an access point to access our wireless network via freeradius. However, I can not see who is currently online through radlast and radwho.
The data in radwho & radlast come from accounting packets. If the server doesn't get accounting packets, no information can go into radlast and radwho.
NAS: Netgear - Prosafe Wireless Access Point WG102 Firmware Version V1.0.31 ==Accounting is ON==
<shrug> No accounting packets are being sent to the server.
$ /usr/local/sbin/radiusd -X ... Listening on accounting *:1813 Ready to process requests.
The server starts. That's nice. Is it receiving accounting packets? Nope. Alan DeKok.
... Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = no radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests.
You cut it short. Debug output will tell you why radutmp is not being written if you look at what happens when a user logs in. Zoltan Ori
OK, so here is the _full_ story: Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = no radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 192.168.zz.zz:1239, id=46, length=68 Service-Type = Framed-User User-Name = "003065xxxxxx" Called-Station-Id = "000FB5yyyyyy" Calling-Station-Id = "003065xxxxxx" rad_lowerpair: User-Name now '003065xxxxxx' rad_rmspace_pair: User-Name now '003065xxxxxx' Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 radius_xlat: '-' rlm_attr_rewrite: No match found for attribute User-Name with value '003065xxxxxx' modcall[authorize]: module "mac_hyphen" returns ok for request 0 radius_xlat: ':' rlm_attr_rewrite: No match found for attribute User-Name with value '003065xxxxxx' modcall[authorize]: module "mac_colons" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "003065xxxxxx", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 171 users: Matched entry 003065xxxxxx at line 217 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type Accept rad_check_password: Auth-Type = Accept, accepting the user Login OK: [003065xxxxxx/<no User-Password attribute>] (from client do_ap1 port 0 cli 003065xxxxxx) Sending Access-Accept of id 46 to 192.168.zz.zz:1239 Framed-IP-Address = 255.255.255.254 Framed-MTU = 576 Service-Type = Framed-User Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 46 with timestamp 4359537c Nothing to do. Sleeping until we see a request. What do you see? I must be missing something. Thank you ----------------------------------------- The views, opinions and statements contained in this transmission are not necessarily the views, opinions and statements of the School District of Onalaska. http://www.onalaska.k12.wi.us/ This e-mail, and any files transmitted with it may contain confidential material and is intended solely for the use of the individual to whom it is addressed. If you have received this e-mail in error, please discard the message and notify the sender directly.
Kevin Capwell <capke@webmail.onalaska.k12.wi.us> wrote:
OK, so here is the _full_ story: ... rad_recv: Access-Request packet from host 192.168.zz.zz:1239, id=46, length=68
That's not an accounting packet. See my previous response. If you're not going to read it, then there's no point in continuing to ask questions. Alan DeKok.
Mr. DeKok I give you my sincere apologies, I was replying to Mr. Ori's message - I saw his first and relied to that _before_ I saw your message. I did not mean to give offence. ----------------------------------------- The views, opinions and statements contained in this transmission are not necessarily the views, opinions and statements of the School District of Onalaska. http://www.onalaska.k12.wi.us/ This e-mail, and any files transmitted with it may contain confidential material and is intended solely for the use of the individual to whom it is addressed. If you have received this e-mail in error, please discard the message and notify the sender directly.
participants (3)
-
Alan DeKok -
Kevin Capwell -
Zoltan Ori