Hi, I want to retrieve statistic for particular home server via Status-Server. but server sends empty answer. At the end of debug log you can find request. Help please, thx Debug log: FreeRADIUS Version 3.0.13 Copyright (C) 1999-2017 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Starting - reading configuration files ... including dictionary file /app/radius/freeradius-3.0.13/share/freeradius/dictionary including dictionary file /app/radius/freeradius-3.0.13/share/freeradius/dictionary.dhcp including dictionary file /app/radius/freeradius-3.0.13/share/freeradius/dictionary.vqp including dictionary file /app/radius/conf/auth-test/dictionary including configuration file /app/radius/conf/auth-test/radiusd.conf including configuration file /app/radius/conf/auth-test/templates.conf including configuration file /app/radius/conf/auth-test/proxy.conf including configuration file /app/radius/conf/auth-test/clients.conf including files in directory /app/radius/conf/auth-test/mods-enabled/ including configuration file /app/radius/conf/auth-test/mods-enabled/unpack including configuration file /app/radius/conf/auth-test/mods-enabled/files including configuration file /app/radius/conf/auth-test/mods-enabled/expr including configuration file /app/radius/conf/auth-test/mods-enabled/preprocess including configuration file /app/radius/conf/auth-test/mods-enabled/chap including configuration file /app/radius/conf/auth-test/mods-enabled/attr_filter including configuration file /app/radius/conf/auth-test/mods-enabled/always including configuration file /app/radius/conf/auth-test/mods-enabled/linelog including configuration file /app/radius/conf/auth-test/mods-enabled/perl including configuration file /app/radius/conf/auth-test/mods-enabled/ldap including configuration file /app/radius/conf/auth-test/mods-enabled/realm including configuration file /app/radius/conf/auth-test/mods-enabled/pap including files in directory /app/radius/conf/auth-test/policy-enabled/ including configuration file /app/radius/conf/auth-test/policy-enabled/RAN-BACKUP including configuration file /app/radius/conf/auth-test/policy-enabled/accounting including configuration file /app/radius/conf/auth-test/policy-enabled/SkyToll.new including configuration file /app/radius/conf/auth-test/policy-enabled/huntgroup including configuration file /app/radius/conf/auth-test/policy-enabled/post-proxy including configuration file /app/radius/conf/auth-test/policy-enabled/FixedLTE including configuration file /app/radius/conf/auth-test/policy-enabled/username including configuration file /app/radius/conf/auth-test/policy-enabled/nas including configuration file /app/radius/conf/auth-test/policy-enabled/SkyToll including files in directory /app/radius/conf/auth-test/sites-enabled/ including configuration file /app/radius/conf/auth-test/sites-enabled/control-socket including configuration file /app/radius/conf/auth-test/sites-enabled/default including configuration file /app/radius/conf/auth-test/sites-enabled/status main { name = "auth-test" prefix = "/app/radius/freeradius-v3" localstatedir = "/app_log/radius/auth-test/" sbindir = "/app/radius/freeradius-v3/sbin" logdir = "/app_log/radius/auth-test/" run_dir = "/app_log/radius/auth-test/" libdir = "/app/radius/freeradius-v3/lib" radacctdir = "/app_log/radius/auth-test//radacct" panic_action = "gdb -silent -x /app/radius/conf/auth-test/panic.gdb %e %p 2>&1 | tee /app_log/radius/auth-test//gdb-auth-test-%p.log" hostname_lookups = no max_request_time = 7 cleanup_delay = 2 max_requests = 25600 pidfile = "/app_log/radius/auth-test//radius.pid" checkrad = "/app/radius/freeradius-v3/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = yes auth_badpass = yes auth_goodpass = yes colourise = yes msg_denied = "You are already logged in - access denied" } resources { } security { max_attributes = 200 reject_delay = 0.000000 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } WARNING: Ignoring "response_window = 30.000000", forcing to "response_window = 7.000000" home_server vse_server1_prod { ipaddr = 10.14.135.145 port = 1812 type = "auth" secret = <<< secret >>> response_window = 30.000000 response_timeouts = 1 max_outstanding = 65536 zombie_period = 40 status_check = "request" ping_interval = 30 check_interval = 6 check_timeout = 4 num_answers_to_alive = 3 revive_interval = 300 username = "orange-system" password = "incorrect" limit { max_connections = 16 max_requests = 0 lifetime = 0 idle_timeout = 0 } coa { irt = 2 mrt = 16 mrc = 5 mrd = 30 } } WARNING: Ignoring "response_window = 30.000000", forcing to "response_window = 7.000000" home_server vse_server2_prod { ipaddr = 10.14.135.146 port = 1812 type = "auth" secret = <<< secret >>> response_window = 30.000000 response_timeouts = 1 max_outstanding = 65536 zombie_period = 40 status_check = "request" ping_interval = 30 check_interval = 6 check_timeout = 4 num_answers_to_alive = 3 revive_interval = 300 username = "orange-system" password = "incorrect" limit { max_connections = 16 max_requests = 0 lifetime = 0 idle_timeout = 0 } coa { irt = 2 mrt = 16 mrc = 5 mrd = 30 } } WARNING: Ignoring "response_window = 30.000000", forcing to "response_window = 7.000000" home_server_pool prod_pool_vse { type = load-balance home_server = vse_server1_prod home_server = vse_server2_prod } realm vsetest.sk { auth_pool = prod_pool_vse nostrip } realm vseazd.sk { auth_pool = prod_pool_vse nostrip } realm vseusec.sk { auth_pool = prod_pool_vse nostrip } realm vsegps.sk { auth_pool = prod_pool_vse nostrip } realm vsesec.sk { auth_pool = prod_pool_vse nostrip } realm vseewo.sk { auth_pool = prod_pool_vse nostrip } realm vseims.sk { auth_pool = prod_pool_vse nostrip } realm vsdvip.sk { auth_pool = prod_pool_vse nostrip } realm LOCAL { authhost = LOCAL accthost = LOCAL } realm NULL { authhost = LOCAL accthost = LOCAL } realm DEFAULT { authhost = LOCAL accthost = LOCAL } radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = <<< secret >>> nas_type = "other" proto = "*" limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } Debugger not attached # Creating Auth-Type = PERL # Creating Auth-Type = PAP # Creating Auth-Type = CHAP # Creating Autz-Type = Status-Server # Instantiating module "files" from file /app/radius/conf/auth-test/mods-enabled/files reading pairlist file /app/radius/conf/auth-test/mods-config/files/authorize reading pairlist file /app/radius/conf/auth-test/mods-config/files/authorize reading pairlist file /app/radius/conf/auth-test/mods-config/files/accounting reading pairlist file /app/radius/conf/auth-test/mods-config/files/pre-proxy # Instantiating module "preprocess" from file /app/radius/conf/auth-test/mods-enabled/preprocess # Instantiating module "attr_filter.post-proxy" from file /app/radius/conf/auth-test/mods-enabled/attr_filter reading pairlist file /app/radius/conf/auth-test/mods-config/attr_filter/post-proxy # Instantiating module "attr_filter.pre-proxy" from file /app/radius/conf/auth-test/mods-enabled/attr_filter reading pairlist file /app/radius/conf/auth-test/mods-config/attr_filter/pre-proxy # Instantiating module "attr_filter.access_reject" from file /app/radius/conf/auth-test/mods-enabled/attr_filter reading pairlist file /app/radius/conf/auth-test/mods-config/attr_filter/access_reject # Instantiating module "attr_filter.access_challenge" from file /app/radius/conf/auth-test/mods-enabled/attr_filter reading pairlist file /app/radius/conf/auth-test/mods-config/attr_filter/access_challenge # Instantiating module "attr_filter.accounting_response" from file /app/radius/conf/auth-test/mods-enabled/attr_filter reading pairlist file /app/radius/conf/auth-test/mods-config/attr_filter/accounting_response # Instantiating module "reject" from file /app/radius/conf/auth-test/mods-enabled/always # Instantiating module "fail" from file /app/radius/conf/auth-test/mods-enabled/always # Instantiating module "ok" from file /app/radius/conf/auth-test/mods-enabled/always # Instantiating module "handled" from file /app/radius/conf/auth-test/mods-enabled/always # Instantiating module "invalid" from file /app/radius/conf/auth-test/mods-enabled/always # Instantiating module "userlock" from file /app/radius/conf/auth-test/mods-enabled/always # Instantiating module "notfound" from file /app/radius/conf/auth-test/mods-enabled/always # Instantiating module "noop" from file /app/radius/conf/auth-test/mods-enabled/always # Instantiating module "updated" from file /app/radius/conf/auth-test/mods-enabled/always radiusd: #### Loading Virtual Servers #### server { # from file /app/radius/conf/auth-test/radiusd.conf } # server server default { # from file /app/radius/conf/auth-test/sites-enabled/default # Loading authenticate {...} # Loading authorize {...} # Loading pre-proxy {...} # Loading post-auth {...} } # server default server status { # from file /app/radius/conf/auth-test/sites-enabled/status # Loading authorize {...} } # server status radiusd: #### Opening IP addresses and Ports #### listen { type = "control" listen { socket = "/app/radius/conf/auth-test/control.socket" mode = "rw" peercred = yes } } listen { type = "auth" ipv4addr = * port = 10812 limit { max_pps = 0 max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "auth" ipv4addr = * port = 10645 limit { max_pps = 0 max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "status" ipaddr = 127.0.0.1 port = 28121 client admin { ipaddr = 127.0.0.1 require_message_authenticator = no secret = <<< secret >>> limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } } Listening on command file /app/radius/conf/auth-test/control.socket Listening on auth address * port 10812 bound to server default Listening on auth address * port 10645 bound to server default Listening on status address 127.0.0.1 port 28121 bound to server status Listening on proxy address * port 33049 Ready to process requests (0) Received Status-Server Id 246 from 127.0.0.1:40048 to 127.0.0.1:28121 length 74 (0) Message-Authenticator = 0x4c348183f7bb200825f992012e53b89e (0) FreeRADIUS-Statistics-Type = 131 (0) FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145 (0) FreeRADIUS-Stats-Server-Port = 1812 (0) # Executing group from file /app/radius/conf/auth-test/sites-enabled/status (0) Autz-Type Status-Server { (0) [ok] = ok (0) } # Autz-Type Status-Server = ok (0) Sent Access-Accept Id 246 from 127.0.0.1:28121 to 127.0.0.1:40048 length 0 (0) Finished request Waking up in 1.9 seconds. (0) Cleaning up request packet ID 246 with timestamp +35
is it still blank after a RADIUS packet has been sent to the remote server ? alan
Yes, it is. Of course i have sent debug message from test environment, but the same result under production system On Tue, Oct 24, 2017 at 1:48 PM, Alan Buxey <alan.buxey@gmail.com> wrote:
is it still blank after a RADIUS packet has been sent to the remote server ?
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
Hi, I installed version 3.0.15 few minutes ago.
From my side the problem still persists.
My steps: 1. simulate request from client (my server acts as proxy) 2. try to gather statistic for home-server (proxy server) [radiusd@tdrad1 auth-test]$ echo "Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 131, FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145,FreeRADIUS-Stats-Server-Port = 1812" | /app/radius/freeradius-3.0.15/bin/radclient -x -t 90 -r 1 -d . 127.0.0.1:28121 status adminsecret Sent Status-Server Id 104 from 0.0.0.0:52166 to 127.0.0.1:28121 length 74 Message-Authenticator = 0x00 FreeRADIUS-Statistics-Type = 131 FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145 FreeRADIUS-Stats-Server-Port = 1812 Received Access-Accept Id 104 from 127.0.0.1:28121 to 0.0.0.0:0 length 20 Debug log message (I have deleted some data -> security reason): Ready to process requests (0) Received Access-Request Id 141 from 127.0.0.1:53685 to 127.0.0.1:10812 length 335 (0) NAS-Port-Type = Virtual (0) Tunnel-Max-Sessions = 65535 (0) Service-Type = Framed-User (0) Tunnel-Type:0 = L2TP (0) Called-Station-Id = "" (0) Tunnel-Client-Endpoint:0 = "" (0) Tunnel-Client-Auth-Id:0 = "" (0) Platform-Type = 6 (0) Connect-Info = "64000/57600" (0) LAC-Port = 141314377 (0) NAS-IP-Address = 213.151.237.212 (0) NAS-Port-Id = "L2TP LNS 218025" (0) OS-Version = "12.1.1.12p5" (0) Tunnel-Server-Endpoint:0 = "10.42.254.12" (0) Tunnel-Server-Auth-Id:0 = "N-101-BA-BAS-11" (0) Tunnel-Medium-Type:0 = IPv4 (0) Calling-Station-Id = "" (0) Medium-Type = DSL (0) Tunnel-Function = LNS-Only (0) Framed-Protocol = PPP (0) Tunnel-Max-Tunnels = 32767 (0) User-Name = "" (0) NAS-Identifier = "N-101-BA-BAS-11" (0) User-Password = "" (0) Acct-Tunnel-Connection = "" (0) NAS-Port = 2432914345 (0) # Executing section authorize from file /app/radius/conf/auth-test/sites-enabled/default (0) authorize { (0) policy username { (0) if (!&User-Name || &User-Name == '') { (0) if (!&User-Name || &User-Name == '') -> FALSE (0) elsif (&User-Name =~ /^[0-9]+$/) { (0) elsif (&User-Name =~ /^[0-9]+$/) -> FALSE (0) } # policy username = noop (0) [preprocess] = ok (0) suffix: Checking for suffix after "@" (0) suffix: Looking up realm "" for User-Name = "" (0) suffix: Found realm "" (0) suffix: Adding Realm = "" (0) suffix: Proxying request from user to realm vseazd.sk (0) suffix: Preparing to proxy authentication request to realm "vseazd.sk" (0) [suffix] = updated (0) update { (0) EXPAND %{Client-Shortname} (0) --> localhost (0) &Huntgroup-Name := localhost (0) } # update = noop (0) if ( &control:Proxy-To-Realm ) { (0) if ( &control:Proxy-To-Realm ) -> TRUE (0) if ( &control:Proxy-To-Realm ) { (0) return (0) } # if ( &control:Proxy-To-Realm ) = updated (0) } # authorize = updated (0) Starting proxy to home server 10.14.135.145 port 1812 (0) # Executing section pre-proxy from file /app/radius/conf/auth-test/sites-enabled/default (0) pre-proxy { (0) } # pre-proxy = ok (0) Proxying request to home server 10.14.135.145 port 1812 timeout 7.000000 (0) Sent Access-Request Id 207 from 0.0.0.0:58214 to 10.14.135.145:1812 length 364 (0) NAS-Port-Type = Virtual (0) Tunnel-Max-Sessions = 65535 (0) Service-Type = Framed-User (0) Tunnel-Type:0 = L2TP (0) Called-Station-Id = "" (0) Tunnel-Client-Endpoint:0 = "" (0) Tunnel-Client-Auth-Id:0 = "" (0) Platform-Type = 6 (0) Connect-Info = "64000/57600" (0) LAC-Port = 141314377 (0) NAS-IP-Address = 213.151.237.212 (0) NAS-Port-Id = "L2TP LNS 218025" (0) OS-Version = "12.1.1.12p5" (0) Tunnel-Server-Endpoint:0 = "" (0) Tunnel-Server-Auth-Id:0 = "N-101-BA-BAS-11" (0) Tunnel-Medium-Type:0 = IPv4 (0) Calling-Station-Id := "" (0) Medium-Type = DSL (0) Tunnel-Function = LNS-Only (0) Framed-Protocol = PPP (0) Tunnel-Max-Tunnels = 32767 (0) User-Name := "" (0) NAS-Identifier = "N-101-BA-BAS-11" (0) User-Password = "" (0) Acct-Tunnel-Connection = "" (0) NAS-Port = 2432914345 (0) Event-Timestamp = "Oct 25 2017 12:24:45 CEST" (0) Message-Authenticator := 0x00 (0) Proxy-State = 0x313431 Waking up in 0.3 seconds. (0) Marking home server 10.14.135.145 port 1812 alive (0) Clearing existing &reply: attributes (0) Received Access-Accept Id 207 from 10.14.135.145:1812 to 10.14.131.103:58214 length 73 (0) Framed-IP-Netmask = 255.255.255.255 (0) Framed-IP-Address = 10.106.122.79 (0) Framed-Protocol = PPP (0) Service-Type = Framed-User (0) Client-DNS-Pri = 10.106.77.101 (0) Client-DNS-Sec = 10.106.77.102 (0) Proxy-State = 0x313431 (0) Found Auth-Type = Accept (0) Auth-Type = Accept, accepting the user (0) # Executing section post-auth from file /app/radius/conf/auth-test/sites-enabled/default (0) post-auth { (0) if ( &control:Module-Return-Code == "handled" ) { (0) EXPAND &control:Module-Return-Code (0) --> ok (0) if ( &control:Module-Return-Code == "handled" ) -> FALSE (0) policy post-proxy { (0) if ( &control:Proxy-To-Realm ) { (0) if ( &control:Proxy-To-Realm ) -> TRUE (0) if ( &control:Proxy-To-Realm ) { (0) if ( &control:Proxy-To-Realm =~ /^vse/ ) { (0) if ( &control:Proxy-To-Realm =~ /^vse/ ) -> TRUE (0) if ( &control:Proxy-To-Realm =~ /^vse/ ) { (0) switch &control:Proxy-To-Realm { (0) case vseazd.sk { (0) update { (0) &reply:Context-Name := "vse_001" (0) } # update = noop (0) [ok] = ok (0) } # case vseazd.sk = ok (0) } # switch &control:Proxy-To-Realm = ok (0) } # if ( &control:Proxy-To-Realm =~ /^vse/ ) = ok (0) ... skipping elsif: Preceding "if" was taken (0) ... skipping elsif: Preceding "if" was taken (0) ... skipping else: Preceding "if" was taken (0) } # if ( &control:Proxy-To-Realm ) = ok (0) } # policy post-proxy = ok (0) if (! ok) { (0) if (! ok) -> FALSE (0) } # post-auth = ok (0) Login OK: [] (from client localhost port 2432914345 cli 421905594019) (0) Sent Access-Accept Id 141 from 127.0.0.1:10812 to 127.0.0.1:53685 length 0 (0) Framed-IP-Netmask = 255.255.255.255 (0) Framed-IP-Address = 10.106.122.79 (0) Framed-Protocol = PPP (0) Service-Type = Framed-User (0) Client-DNS-Pri = 10.106.77.101 (0) Client-DNS-Sec = 10.106.77.102 (0) Context-Name := "" (0) Finished request Waking up in 1.9 seconds. (0) Cleaning up request packet ID 141 with timestamp +238 Ready to process requests (1) Received Status-Server Id 200 from 127.0.0.1:44902 to 127.0.0.1:28121 length 62 (1) Message-Authenticator = 0x5206af4c70fcf7b8ea096b7abdaec199 (1) FreeRADIUS-Statistics-Type = 131 (1) FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145 (1) # Executing group from file /app/radius/conf/auth-test/sites-enabled/status (1) Autz-Type Status-Server { (1) [ok] = ok (1) } # Autz-Type Status-Server = ok (1) Sent Access-Accept Id 200 from 127.0.0.1:28121 to 127.0.0.1:44902 length 0 (1) Finished request Waking up in 1.9 seconds. (1) Cleaning up request packet ID 200 with timestamp +295 Ready to process requests (2) Received Status-Server Id 104 from 127.0.0.1:52166 to 127.0.0.1:28121 length 74 (2) Message-Authenticator = 0x834c1949bfcc9eb9752eeb202a2b3ef0 (2) FreeRADIUS-Statistics-Type = 131 (2) FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145 (2) FreeRADIUS-Stats-Server-Port = 1812 (2) # Executing group from file /app/radius/conf/auth-test/sites-enabled/status (2) Autz-Type Status-Server { (2) [ok] = ok (2) } # Autz-Type Status-Server = ok (2) Sent Access-Accept Id 104 from 127.0.0.1:28121 to 127.0.0.1:52166 length 0 (2) Finished request Waking up in 1.9 seconds. (2) Cleaning up request packet ID 104 with timestamp +968 Ready to process requests On Tue, Oct 24, 2017 at 8:31 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Oct 24, 2017, at 7:18 AM, Peter Balsianok <balsianok.peter@gmail.com> wrote:
I want to retrieve statistic for particular home server via
Status-Server.
but server sends empty answer. At the end of debug log you can find request.
It works for me with 3.0.15.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
On Oct 25, 2017, at 6:46 AM, Peter Balsianok <balsianok.peter@gmail.com> wrote:
I installed version 3.0.15 few minutes ago. From my side the problem still persists.
What did you do? I used the default configuration, enabled raddb/sites-available/status, and sent it a packet. I got the expected response. So... you did something els.e The only time it doesn't return any statistics is when it can't find the home server. i.e. it returns no statistics, because no statistics exist. Alan DeKok.
What i did is in the attached debug log. I sent request to the local RADIUS server. The local RADIUS server sent request (proxy) to third party RADIUS server (it also means that configuration for home-server exists and its correct). Then i contacted Status sever (to retrieve statistic for mentioned home-server), the answer was empty instead of statistic for 1 request. On Wed, Oct 25, 2017 at 12:53 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Oct 25, 2017, at 6:46 AM, Peter Balsianok <balsianok.peter@gmail.com> wrote:
I installed version 3.0.15 few minutes ago. From my side the problem still persists.
What did you do?
I used the default configuration, enabled raddb/sites-available/status, and sent it a packet.
I got the expected response.
So... you did something els.e The only time it doesn't return any statistics is when it can't find the home server.
i.e. it returns no statistics, because no statistics exist.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
On Oct 25, 2017, at 9:00 AM, Peter Balsianok <balsianok.peter@gmail.com> wrote:
What i did is in the attached debug log. I sent request to the local RADIUS server. The local RADIUS server sent request (proxy) to third party RADIUS server (it also means that configuration for home-server exists and its correct). Then i contacted Status sever (to retrieve statistic for mentioned home-server), the answer was empty instead of statistic for 1 request.
That all was clear from the debug output. I've pushed patches to the v3.0.x branch which should give some more information. https://github.com/FreeRADIUS/freeradius-server/archive/v3.0.x.zip Please try that. Alan DeKok.
I have installed patched version. The result is little bit different (result is not empty, but counters are 0) (0) Login OK: [] (from client localhost port 2432914345 cli ) (0) Sent Access-Accept Id 233 from 127.0.0.1:10812 to 127.0.0.1:34815 length 0 (0) Framed-IP-Netmask = 255.255.255.255 (0) Framed-IP-Address = 10.106.122.79 (0) Framed-Protocol = PPP (0) Service-Type = Framed-User (0) Client-DNS-Pri = 10.106.77.101 (0) Client-DNS-Sec = 10.106.77.102 (0) Context-Name := "" (0) Finished request Waking up in 1.9 seconds. (0) Cleaning up request packet ID 233 with timestamp +8 Ready to process requests (1) Received Status-Server Id 102 from 127.0.0.1:51899 to 127.0.0.1:28121 length 74 (1) Message-Authenticator = 0xc21b4a2a8be7507276cb8e75b04cf891 (1) FreeRADIUS-Statistics-Type = 131 (1) FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145 (1) FreeRADIUS-Stats-Server-Port = 1812 (1) # Executing group from file /app/radius/conf/auth-test/sites-enabled/status (1) Autz-Type Status-Server { (1) [ok] = ok (1) } # Autz-Type Status-Server = ok (1) Sent Access-Accept Id 102 from 127.0.0.1:28121 to 127.0.0.1:51899 length 0 (1) FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145 (1) FreeRADIUS-Stats-Server-Port = 1812 (1) FreeRADIUS-Stats-Server-Outstanding-Requests = 0 (1) FreeRADIUS-Stats-Server-State = Idle (1) FreeRADIUS-Stats-Last-Packet-Recv = "Jan 1 1970 01:00:00 CET" (1) FreeRADIUS-Stats-Last-Packet-Sent = "Jan 1 1970 01:00:00 CET" (1) FreeRADIUS-Total-Proxy-Access-Requests = 0 (1) FreeRADIUS-Total-Proxy-Access-Accepts = 0 (1) FreeRADIUS-Total-Proxy-Access-Rejects = 0 (1) FreeRADIUS-Total-Proxy-Access-Challenges = 0 (1) FreeRADIUS-Total-Proxy-Auth-Responses = 0 (1) FreeRADIUS-Total-Proxy-Auth-Duplicate-Requests = 0 (1) FreeRADIUS-Total-Proxy-Auth-Malformed-Requests = 0 (1) FreeRADIUS-Total-Proxy-Auth-Invalid-Requests = 0 (1) FreeRADIUS-Total-Proxy-Auth-Dropped-Requests = 0 (1) FreeRADIUS-Total-Proxy-Auth-Unknown-Types = 0 (1) FreeRADIUS-Stats-Error = "Home server is not acct" (1) Finished request Waking up in 1.9 seconds. (1) Cleaning up request packet ID 102 with timestamp +18 On Wed, Oct 25, 2017 at 3:09 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Oct 25, 2017, at 9:00 AM, Peter Balsianok <balsianok.peter@gmail.com> wrote:
What i did is in the attached debug log. I sent request to the local
RADIUS
server. The local RADIUS server sent request (proxy) to third party RADIUS server (it also means that configuration for home-server exists and its correct). Then i contacted Status sever (to retrieve statistic for mentioned home-server), the answer was empty instead of statistic for 1 request.
That all was clear from the debug output.
I've pushed patches to the v3.0.x branch which should give some more information.
https://github.com/FreeRADIUS/freeradius-server/archive/v3.0.x.zip
Please try that.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
On Oct 25, 2017, at 9:51 AM, Peter Balsianok <balsianok.peter@gmail.com> wrote:
I have installed patched version. The result is little bit different (result is not empty, but counters are 0)
That's to be expected, TBH.
(1) FreeRADIUS-Statistics-Type = 131
i.e. Home-Server, Auth + Acct
(1) FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145 (1) FreeRADIUS-Stats-Server-Port = 1812
Which you've defined only as home server of type "auth". And then queried it for "acct" statistics.
(1) Sent Access-Accept Id 102 from 127.0.0.1:28121 to 127.0.0.1:51899 length 0 (1) FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145 (1) FreeRADIUS-Stats-Server-Port = 1812 (1) FreeRADIUS-Stats-Server-Outstanding-Requests = 0 (1) FreeRADIUS-Stats-Server-State = Idle
The home server has received no packets. Which isn't surprising, given that you just started FreeRADIUS. It hasn't had any packets proxied to it.
(1) FreeRADIUS-Stats-Error = "Home server is not acct"
Because it's not accepting accounting packets. Send: FreeRADIUS-Statistics-Type = 130 And ensure that FreeRADIUS is actually proxying packets, before you expect the statistics to be non-zero. Alan DeKok.
Thank you for the answer. I was following description in the etc/raddb/sites-available/status. There is only mentioned # All packets for a home server IP / port # FreeRADIUS-Statistics-Type = 131 # FreeRADIUS-Stats-Server-IP-Address = 192.0.2.2 # FreeRADIUS-Stats-Server-Port = 1812 Therefore i've expected: does not matter if home server is defined as auth or acct or combination In my last email i didnt include debug messages for test proxy request, but there was one correct proxy request in the RADIUS & then i want to retrieve stats Result: [radiusd@tdrad1 auth-test]$ echo "Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 130, FreeRADIUS-Stats-Server-IP-Address = 10.14.135.146, FreeRADIUS-Stats-Server-Port = 1812" | /app/radius/freeradius-3.0.15/bin/radclient -x -t 90 -r 1 -d . 127.0.0.1:28121 status adminsecret Sent Status-Server Id 2 from 0.0.0.0:46764 to 127.0.0.1:28121 length 74 Message-Authenticator = 0x00 FreeRADIUS-Statistics-Type = 130 FreeRADIUS-Stats-Server-IP-Address = 10.14.135.146 FreeRADIUS-Stats-Server-Port = 1812 Received Access-Accept Id 2 from 127.0.0.1:28121 to 0.0.0.0:0 length 135 FreeRADIUS-Stats-Server-IP-Address = 10.14.135.146 FreeRADIUS-Stats-Server-Port = 1812 FreeRADIUS-Stats-Server-Outstanding-Requests = 0 FreeRADIUS-Stats-Server-State = Alive FreeRADIUS-Stats-Server-Time-Of-Life = "Oct 26 2017 06:58:25 CEST" FreeRADIUS-Stats-Last-Packet-Recv = "Oct 26 2017 06:58:25 CEST" FreeRADIUS-Stats-Last-Packet-Sent = "Oct 26 2017 06:58:25 CEST" FreeRADIUS-Stats-Error = "Home server is not acct" Is it correct answer? For me it will great to have also following stats: 1. number of send requests 2. number of received answer for requests 3. average delay Here is debug log (not whole): (0) Proxying request to home server 10.14.135.146 port 1812 timeout 7.000000 (0) Sent Access-Request Id 160 from 0.0.0.0:43118 to 10.14.135.146:1812 length 364 ... Waking up in 0.3 seconds. (0) Marking home server 10.14.135.146 port 1812 alive (0) Clearing existing &reply: attributes (0) Received Access-Accept Id 160 from 10.14.135.146:1812 to 10.14.131.103:43118 length 73 ... (0) Login OK: [m586@vseazd.sk/] (from client localhost port 2432914345 cli ) (0) Sent Access-Accept Id 250 from 127.0.0.1:10812 to 127.0.0.1:59550 length 0 ... Ready to process requests (3) Received Status-Server Id 2 from 127.0.0.1:46764 to 127.0.0.1:28121 length 74 (3) Message-Authenticator = 0x8bb8b59a0ffdc491c547031fdfc737ba (3) FreeRADIUS-Statistics-Type = 130 (3) FreeRADIUS-Stats-Server-IP-Address = 10.14.135.146 (3) FreeRADIUS-Stats-Server-Port = 1812 (3) # Executing group from file /app/radius/conf/auth-test/sites-enabled/status (3) Autz-Type Status-Server { (3) [ok] = ok (3) } # Autz-Type Status-Server = ok (3) Sent Access-Accept Id 2 from 127.0.0.1:28121 to 127.0.0.1:46764 length 0 (3) FreeRADIUS-Stats-Server-IP-Address = 10.14.135.146 (3) FreeRADIUS-Stats-Server-Port = 1812 (3) FreeRADIUS-Stats-Server-Outstanding-Requests = 0 (3) FreeRADIUS-Stats-Server-State = Alive (3) FreeRADIUS-Stats-Server-Time-Of-Life = "Oct 26 2017 06:58:25 CEST" (3) FreeRADIUS-Stats-Last-Packet-Recv = "Oct 26 2017 06:58:25 CEST" (3) FreeRADIUS-Stats-Last-Packet-Sent = "Oct 26 2017 06:58:25 CEST" (3) FreeRADIUS-Stats-Error = "Home server is not acct" (3) Finished request Waking up in 1.9 seconds. (3) Cleaning up request packet ID 2 with timestamp +637 Ready to process requests On Wed, Oct 25, 2017 at 4:02 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Oct 25, 2017, at 9:51 AM, Peter Balsianok <balsianok.peter@gmail.com> wrote:
I have installed patched version. The result is little bit different (result is not empty, but counters
are 0)
That's to be expected, TBH.
(1) FreeRADIUS-Statistics-Type = 131
i.e. Home-Server, Auth + Acct
(1) FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145 (1) FreeRADIUS-Stats-Server-Port = 1812
Which you've defined only as home server of type "auth". And then queried it for "acct" statistics.
(1) Sent Access-Accept Id 102 from 127.0.0.1:28121 to 127.0.0.1:51899 length 0 (1) FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145 (1) FreeRADIUS-Stats-Server-Port = 1812 (1) FreeRADIUS-Stats-Server-Outstanding-Requests = 0 (1) FreeRADIUS-Stats-Server-State = Idle
The home server has received no packets. Which isn't surprising, given that you just started FreeRADIUS. It hasn't had any packets proxied to it.
(1) FreeRADIUS-Stats-Error = "Home server is not acct"
Because it's not accepting accounting packets.
Send: FreeRADIUS-Statistics-Type = 130
And ensure that FreeRADIUS is actually proxying packets, before you expect the statistics to be non-zero.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
On Oct 26, 2017, at 1:17 AM, Peter Balsianok <balsianok.peter@gmail.com> wrote:
Thank you for the answer.
I was following description in the etc/raddb/sites-available/status. There is only mentioned
# All packets for a home server IP / port # FreeRADIUS-Statistics-Type = 131 # FreeRADIUS-Stats-Server-IP-Address = 192.0.2.2 # FreeRADIUS-Stats-Server-Port = 1812
Yes. See also dictionary.freeradius for a full description of the various statistics types.
Therefore i've expected: does not matter if home server is defined as auth or acct or combination
Yes, it should work.
In my last email i didnt include debug messages for test proxy request, but there was one correct proxy request in the RADIUS & then i want to retrieve stats
Result: [radiusd@tdrad1 auth-test]$ echo "Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 130, FreeRADIUS-Stats-Server-IP-Address = 10.14.135.146, FreeRADIUS-Stats-Server-Port = 1812" | /app/radius/freeradius-3.0.15/bin/radclient -x -t 90 -r 1 -d . 127.0.0.1:28121 status adminsecret
Sorry, that's asking for accounting statistics. See dictionary.freeradius. You want to send FreeRADIUS-Statistics-Type = 129.
Is it correct answer? For me it will great to have also following stats: 1. number of send requests 2. number of received answer for requests 3. average delay
See dictionary.freeradius for the kind of statistics it will return. Alan DeKok.
participants (3)
-
Alan Buxey -
Alan DeKok -
Peter Balsianok