Hello, when the user gets authenticated, the Radius will send some confirmation to router about that particular user? How can I check this As per my programmer(CRM application data packet service) any user gets authenticated its values should populate Home Agent router which is not happening. We use Cisco 7206 Mobile Wireless Home Agent. Any clue to see Reply response from the radius server Thanks, Mohammed Ejaz Asst. Operation Director of Systems. Cyberia SAUDI ARABIA P.O.Box: 301079, Riyadh 11372 Phone: (+966) 11 464 7114 Ext. 140 Mobile: (+966) 562311787 Fax: (+966) 11 465 4735 Website: http://www.cyberia.net.sa
On Apr 30, 2017, at 9:16 AM, Ejaz <mejaz@cyberia.net.sa> wrote:
when the user gets authenticated, the Radius will send some confirmation to router about that particular user?
How can I check this
Read the debug output of FreeRADIUS. You can see the reply it's sending to the client. Alan DeKok.
Hello, Here is the debug output. Where I can exactly see reply from radius to NAS, please give me a clue, thanks in advance. ======================================================================================================================= WHERE usergroup.Username = '10.10.92.230' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id (18) sql: Executing select query: SELECT radgroupcheck.id, radgroupcheck.GroupName, radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck, usergroup WHERE usergroup.Username = '10.10.92.230' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id (18) sql: Group "PD": Conditional check items matched (18) sql: Group "PD": Merging assignment check items (18) sql: Service-Type := Framed-User (18) sql: EXPAND SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, radgroupreply.Value, radgroupreply.op FROM radgroupreply, usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id (18) sql: --> SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, radgroupreply.Value, radgroupreply.op FROM radgroupreply, usergroup WHERE usergroup.Username = '10.10.92.230' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id (18) sql: Executing select query: SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, radgroupreply.Value, radgroupreply.op FROM radgroupreply, usergroup WHERE usergroup.Username = '10.10.92.230' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id (18) sql: Group "PD": Merging reply items (18) sql: Service-Type := Framed-User rlm_sql (sql): Released connection (27) rlm_sql (sql): Need 2 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (28), 1 of 31 pending slots used (18) [sql] = ok (18) [expiration] = noop (18) [logintime] = noop (18) [pap] = updated (18) } # authorize = updated (18) Found Auth-Type = PAP (18) # Executing group from file /usr/local/freeradius3/etc/raddb/sites-enabled/default (18) Auth-Type PAP { (18) pap: Login attempt with password (18) pap: Comparing with "known good" Cleartext-Password (18) pap: User authenticated successfully (18) [pap] = ok (18) } # Auth-Type PAP = ok (18) # Executing section post-auth from file /usr/local/freeradius3/etc/raddb/sites-enabled/default (18) post-auth { (18) update { (18) No attributes updated (18) } # update = noop (18) sql: EXPAND .query (18) sql: --> .query (18) sql: WARNING: No such configuration item .query (18) [sql] = noop (18) [exec] = noop (18) policy remove_reply_message_if_eap { (18) if (&reply:EAP-Message && &reply:Reply-Message) { (18) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (18) else { (18) [noop] = noop (18) } # else = noop (18) } # policy remove_reply_message_if_eap = noop (18) } # post-auth = noop (18) Sent Access-Accept Id 188 from 0.0.0.0:1812 to 172.17.40.182:1645 length 0 (18) Cisco-AVPair = "mobileip:spi#0=spi 101 key hex 49BA268AD1D4996AA571071377DE0602" (18) Service-Type = Framed-User (18) Finished request Waking up in 4.9 seconds. (18) Cleaning up request packet ID 188 with timestamp +1543 Ready to process requests =================================================================================================== -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+mejaz=cyberia.net.sa@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Sunday, April 30, 2017 6:02 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Reply-Radius On Apr 30, 2017, at 9:16 AM, Ejaz < <mailto:mejaz@cyberia.net.sa> mejaz@cyberia.net.sa> wrote:
when the user gets authenticated, the Radius will send some
confirmation to router about that particular user?
How can I check this
Read the debug output of FreeRADIUS. You can see the reply it's sending to the client. Alan DeKok. - List info/subscribe/unsubscribe? See <http://www.freeradius.org/list/users.html> http://www.freeradius.org/list/users.html
Sent Access-Accept Id 188 from 0.0.0.0:1812 to 172.17.40.182:1645 length 0 (18) Cisco-AVPair = "mobileip:spi#0=spi 101 key hex 49BA268AD1D4996AA571071377DE0602" (18) Service-Type = Framed-User there alan On 4 May 2017 at 06:50, Ejaz <mejaz@cyberia.net.sa> wrote:
Hello,
Here is the debug output. Where I can exactly see reply from radius to NAS, please give me a clue, thanks in advance.
=======================================================================================================================
WHERE usergroup.Username = '10.10.92.230' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id
(18) sql: Executing select query: SELECT radgroupcheck.id, radgroupcheck.GroupName, radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck, usergroup WHERE usergroup.Username = '10.10.92.230' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id
(18) sql: Group "PD": Conditional check items matched
(18) sql: Group "PD": Merging assignment check items
(18) sql: Service-Type := Framed-User
(18) sql: EXPAND SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, radgroupreply.Value, radgroupreply.op FROM radgroupreply, usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id
(18) sql: --> SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, radgroupreply.Value, radgroupreply.op FROM radgroupreply, usergroup WHERE usergroup.Username = '10.10.92.230' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id
(18) sql: Executing select query: SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, radgroupreply.Value, radgroupreply.op FROM radgroupreply, usergroup WHERE usergroup.Username = '10.10.92.230' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id
(18) sql: Group "PD": Merging reply items
(18) sql: Service-Type := Framed-User
rlm_sql (sql): Released connection (27)
rlm_sql (sql): Need 2 more connections to reach 10 spares
rlm_sql (sql): Opening additional connection (28), 1 of 31 pending slots used
(18) [sql] = ok
(18) [expiration] = noop
(18) [logintime] = noop
(18) [pap] = updated
(18) } # authorize = updated
(18) Found Auth-Type = PAP
(18) # Executing group from file /usr/local/freeradius3/etc/raddb/sites-enabled/default
(18) Auth-Type PAP {
(18) pap: Login attempt with password
(18) pap: Comparing with "known good" Cleartext-Password
(18) pap: User authenticated successfully
(18) [pap] = ok
(18) } # Auth-Type PAP = ok
(18) # Executing section post-auth from file /usr/local/freeradius3/etc/raddb/sites-enabled/default
(18) post-auth {
(18) update {
(18) No attributes updated
(18) } # update = noop
(18) sql: EXPAND .query
(18) sql: --> .query
(18) sql: WARNING: No such configuration item .query
(18) [sql] = noop
(18) [exec] = noop
(18) policy remove_reply_message_if_eap {
(18) if (&reply:EAP-Message && &reply:Reply-Message) {
(18) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
(18) else {
(18) [noop] = noop
(18) } # else = noop
(18) } # policy remove_reply_message_if_eap = noop
(18) } # post-auth = noop
(18) Sent Access-Accept Id 188 from 0.0.0.0:1812 to 172.17.40.182:1645 length 0
(18) Cisco-AVPair = "mobileip:spi#0=spi 101 key hex 49BA268AD1D4996AA571071377DE0602"
(18) Service-Type = Framed-User
(18) Finished request
Waking up in 4.9 seconds.
(18) Cleaning up request packet ID 188 with timestamp +1543
Ready to process requests
===================================================================================================
-----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+mejaz=cyberia.net.sa@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Sunday, April 30, 2017 6:02 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Reply-Radius
On Apr 30, 2017, at 9:16 AM, Ejaz < <mailto:mejaz@cyberia.net.sa> mejaz@cyberia.net.sa> wrote:
when the user gets authenticated, the Radius will send some
confirmation to router about that particular user?
How can I check this
Read the debug output of FreeRADIUS. You can see the reply it's sending to the client.
Alan DeKok.
-
List info/subscribe/unsubscribe? See <http://www.freeradius.org/list/users.html> http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan Buxey -
Alan DeKok -
Ejaz