freeradius 1.1.0 with rp-pppoe 3.8 pppoe-server
I have a Red Hat 9.0 system with the following software: - ppp 2.4.4b1 rp-pppoe 3.8 freeradius 1.1.0 I saw the following in /usr/local/share/freeradius/dictionary.roaringpenguin RP-Upstream-Speed-Limit RP-Downstream-Speed-Limit Below is my MySQL result: - mysql> select * from radcheck; +----+----------+-----------+----+-------+ | id | UserName | Attribute | op | Value | +----+----------+-----------+----+-------+ | 1 | guest | Password | == | guest | +----+----------+-----------+----+-------+ mysql> select * from radgroupcheck; +----+--------------+------------------+----+-------+ | id | GroupName | Attribute | op | Value | +----+--------------+------------------+----+-------+ | 1 | customer128k | Simultaneous-Use | := | 1 | | 2 | customer128k | Auth-Type | := | Local | +----+--------------+------------------+----+-------+ mysql> select * from radgroupreply; +----+--------------+---------------------------+----+---------------------+------+ | id | GroupName | Attribute | op | Value | prio | +----+--------------+---------------------------+----+---------------------+------+ | 1 | customer128k | Framed-Protocol | = | PPP | 0 | | 2 | customer128k | Framed-Routing | = | Broadcast-Listen | 0 | | 3 | customer128k | Framed-Compression | = | Van-Jacobson-TCP-IP | 0 | | 4 | customer128k | RP-Upstream-Speed-Limit | = | 64 | 0 | | 5 | customer128k | RP-Downstream-Speed-Limit | = | 128 | 0 | | 6 | customer128k | Service-Type | = | Framed-User | 0 | | 7 | customer128k | Framed-MTU | = | 1500 | 0 | +----+--------------+---------------------------+----+---------------------+------+ mysql> select * from usergroup; +----+----------+--------------+ | id | UserName | GroupName | +----+----------+--------------+ | 1 | guest | customer128k | +----+----------+--------------+ Below is my ppp options: - require-pap login lcp-echo-interval 10 lcp-echo-failure 2 ms-dns x.y.100.8 ms-dns x.y.100.2 plugin radius.so plugin radattr.so Below is the command I run for pppoe-server: - pppoe-server -I eth1 -k -L 10.3.0.1 -R 10.3.1.1 I configure a PPPoE client connecting in my Windows XP desktop and successfully connect to the PPPoE server. I did perform a download speed test and the download speed is not correct. I can't get 128kbits but I get the full speed of 1Mbps, why? Doest the attribute field below works for FreeRADIUS? RP-Upstream-Speed-Limit RP-Downstream-Speed-Limit Regards, rootlinux __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
root linux <rootlinux@yahoo.com> wrote:
Below is the command I run for pppoe-server: -
pppoe-server -I eth1 -k -L 10.3.0.1 -R 10.3.1.1 ... I did perform a download speed test and the download speed is not correct. I can't get 128kbits but I get the full speed of 1Mbps, why?
Did PPPoE send a RADIUS request to the server? Why is it so difficult to run the server in debugging mode?
Doest the attribute field below works for FreeRADIUS?
They work fine in FreeRADIUS. But you have no idea if PPoE is doing RADIUS for authentication, you have no idea if FreeRADIUS is sending those attributes in the reply (if any), and you have no idea if PPPoE is listening to those attributes. Follow the FreeRADIUS documentation, and the PPPoE documentation for configured the servers. Alan DeKok.
How do I check is PPPoE sending the attribute to FreeRADIUS? Below is the freeradius in debug mode: - rad_recv: Access-Request packet from host 127.0.0.1:32793, id=32, length=88 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "guest" User-Password = "guest" Calling-Station-Id = "00:04:E2:48:7E:D8" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "guest", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 radius_xlat: 'guest' rlm_sql (sql): sql_set_user escaped user --> 'guest' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'guest' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 3 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'guest' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'guest' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'guest' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 3 modcall[authorize]: module "sql" returns ok for request 0 rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair modcall[authorize]: module "noresetcounter" returns noop for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type Local auth: type Local auth: user supplied User-Password matches local User-Password Processing the session section of radiusd.conf modcall: entering group session for request 0 radius_xlat: 'guest' rlm_sql (sql): sql_set_user escaped user --> 'guest' radius_xlat: 'SELECT COUNT(*) FROM radacct WHERE UserName='guest' AND AcctStopTime = 0' rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): Released sql socket id: 2 modcall[session]: module "sql" returns ok for request 0 modcall: leaving group session (returns ok) for request 0 Login OK: [guest/guest] (from client localhost port 0 cli 00:04:E2:48:7E:D8) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 0 rlm_sql (sql): Processing sql_postauth radius_xlat: 'guest' rlm_sql (sql): sql_set_user escaped user --> 'guest' radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values ('', 'guest', 'guest', 'Access-Accept', NOW())' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date) values ('', 'guest', 'guest', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 modcall[post-auth]: module "sql" returns ok for request 0 modcall: leaving group post-auth (returns ok) for request 0 Sending Access-Accept of id 32 to 127.0.0.1 port 32793 Framed-Protocol = PPP Framed-Routing = Broadcast-Listen Framed-Compression = Van-Jacobson-TCP-IP RP-Upstream-Speed-Limit = 64 RP-Downstream-Speed-Limit = 64 Service-Type = Framed-User Framed-MTU = 1500 Idle-Timeout = 60 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Accounting-Request packet from host 127.0.0.1:32793, id=33, length=116 Acct-Session-Id = "446BD2061D7D00" User-Name = "guest" Acct-Status-Type = Start Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "00:04:E2:48:7E:D8" Acct-Authentic = RADIUS NAS-Port-Type = Async Framed-IP-Address = 10.38.1.7 NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Acct-Delay-Time = 0 Processing the preacct section of radiusd.conf modcall: entering group preacct for request 1 modcall[preacct]: module "preprocess" returns noop for request 1 rlm_acct_unique: Hashing 'NAS-Port = 0,Client-IP-Address = 127.0.0.1,NAS-IP-Address = 127.0.0.1,Acct-Session-Id = "446BD2061D7D00",User-Name = "guest"' rlm_acct_unique: Acct-Unique-Session-ID = "0df05a425b9215fd". modcall[preacct]: module "acct_unique" returns ok for request 1 rlm_realm: No '@' in User-Name = "guest", looking up realm NULL rlm_realm: No such realm "NULL" modcall[preacct]: module "suffix" returns noop for request 1 modcall: leaving group preacct (returns ok) for request 1 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 1 radius_xlat: '/usr/local/var/log/radius/radacct/127.0.0.1/detail-20060518' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/127.0.0.1/detail-20060518 modcall[accounting]: module "detail" returns ok for request 1 modcall[accounting]: module "unix" returns ok for request 1 radius_xlat: '/usr/local/var/log/radius/radutmp' radius_xlat: 'guest' modcall[accounting]: module "radutmp" returns ok for request 1 radius_xlat: 'guest' rlm_sql (sql): sql_set_user escaped user --> 'guest' radius_xlat: 'INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('446BD2061D7D00', '0df05a425b9215fd', 'guest', '', '127.0.0.1', '0', 'Async', '2006-05-18 09:46:46', '0', '0', 'RADIUS', '', '', '0', '0', '', '00:04:E2:48:7E:D8', '', 'Framed-User', 'PPP', '10.38.1.7', '0', '0')' rlm_sql (sql): Reserving sql socket id: 0 rlm_sql (sql): Released sql socket id: 0 modcall[accounting]: module "sql" returns ok for request 1 modcall: leaving group accounting (returns ok) for request 1 Sending Accounting-Response of id 33 to 127.0.0.1 port 32793 Finished request 1 Going to the next request --- Walking the entire request list --- Waking up in 5 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 32 with timestamp 446bd205 Waking up in 1 seconds... --- Walking the entire request list --- Cleaning up request 1 ID 33 with timestamp 446bd206 Nothing to do. Sleeping until we see a request. --- Alan DeKok <aland@nitros9.org> wrote:
root linux <rootlinux@yahoo.com> wrote:
Below is the command I run for pppoe-server: -
pppoe-server -I eth1 -k -L 10.3.0.1 -R 10.3.1.1 ... I did perform a download speed test and the download speed is not correct. I can't get 128kbits but I get the full speed of 1Mbps, why?
Did PPPoE send a RADIUS request to the server?
Why is it so difficult to run the server in debugging mode?
Doest the attribute field below works for FreeRADIUS?
They work fine in FreeRADIUS. But you have no idea if PPoE is doing RADIUS for authentication, you have no idea if FreeRADIUS is sending those attributes in the reply (if any), and you have no idea if PPPoE is listening to those attributes.
Follow the FreeRADIUS documentation, and the PPPoE documentation for configured the servers.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
I read the debug log...but I can't understand all of it, :( I am new to FreeRADIUS. What I understand is...the username "guest" is successfully authenticate with the FreeRADIUS. Please help me...thanks. --- Alan DeKok <aland@nitros9.org> wrote:
root linux <rootlinux@yahoo.com> wrote:
How do I check is PPPoE sending the attribute to FreeRADIUS?
You read the debug log?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
I have a Red Hat 9.0 system with the following software: -
ppp 2.4.4b1 rp-pppoe 3.8 freeradius 1.1.0
I saw the following in /usr/local/share/freeradius/dictionary.roaringpenguin
RP-Upstream-Speed-Limit RP-Downstream-Speed-Limit
I did perform a download speed test and the download speed is not correct. I can't get 128kbits but I get the full speed of 1Mbps, why?
rp-pppoe + pppd don't support those Radius attributes. to limit the user you'll need to create an "/etc/ppp/ip-up" script that will parse /var/run/radattr.ppp0 for those attributes, and then you can apply tc rules to limit the traffic. -- damjan | дамјан This is my jabber ID --> damjan@bagra.net.mk -- not my mail address, it's a Jabber ID --^ :)
Below is the output from the /var/run/radattr.ppp0 :- Idle-Timeout 300 Below is the output from "radiusd -X" :- Sending Access-Accept of id 74 to 127.0.0.1 port 32797 Idle-Timeout = 300 RP-Upstream-Speed-Limit = 64 RP-Downstream-Speed-Limit = 128 Finished request 8 I don't see any RP-Upstream-Speed-Limit or RP-Downstream-Speed-Limit...why? --- Damjan <gdamjan@mail.net.mk> wrote:
I have a Red Hat 9.0 system with the following software: -
ppp 2.4.4b1 rp-pppoe 3.8 freeradius 1.1.0
I saw the following in
/usr/local/share/freeradius/dictionary.roaringpenguin
RP-Upstream-Speed-Limit RP-Downstream-Speed-Limit
I did perform a download speed test and the download speed is not correct. I can't get 128kbits but I get the full speed of 1Mbps, why?
rp-pppoe + pppd don't support those Radius attributes.
to limit the user you'll need to create an "/etc/ppp/ip-up" script that will parse /var/run/radattr.ppp0 for those attributes, and then you can apply tc rules to limit the traffic.
-- damjan | дамÑан This is my jabber ID --> damjan@bagra.net.mk
-- not my mail address, it's a Jabber ID --^ :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Below is the output from the /var/run/radattr.ppp0 :-
Idle-Timeout 300
Below is the output from "radiusd -X" :-
Sending Access-Accept of id 74 to 127.0.0.1 port 32797 Idle-Timeout = 300 RP-Upstream-Speed-Limit = 64 RP-Downstream-Speed-Limit = 128 Finished request 8
I don't see any RP-Upstream-Speed-Limit or RP-Downstream-Speed-Limit...why?
You need to have the dictionary with RP-Upstream-Speed-Limit and RP-Downstream-Speed-Limit installed in /etc/radiusclient/ and /etc/radiusclient/radiusclient.conf . -- damjan | дамјан This is my jabber ID --> damjan@bagra.net.mk -- not my mail address, it's a Jabber ID --^ :)
I included the below into /etc/radiusclient/dictionary: - ATTRIBUTE RP-Upstream-Speed-Limit 81 integer ATTRIBUTE RP-Downstream-Speed-Limit 82 integer But it doesn't help... the output from the /var/run/radattr.ppp0 still shows the below: - Idle-Timeout 300 Below is the output from radtest command: - [root@gw01 run]# radtest testuser testpass 127.0.0.1 10 glsbb2005 Sending Access-Request of id 194 to 127.0.0.1 port 1812 User-Name = "testuser" User-Password = "testpass" NAS-IP-Address = 255.255.255.255 NAS-Port = 10 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=194, length=50 Idle-Timeout = 300 RP-Upstream-Speed-Limit = 64 RP-Downstream-Speed-Limit = 128 --- Damjan <gdamjan@mail.net.mk> wrote:
Below is the output from the /var/run/radattr.ppp0 :-
Idle-Timeout 300
Below is the output from "radiusd -X" :-
Sending Access-Accept of id 74 to 127.0.0.1 port 32797 Idle-Timeout = 300 RP-Upstream-Speed-Limit = 64 RP-Downstream-Speed-Limit = 128 Finished request 8
I don't see any RP-Upstream-Speed-Limit or RP-Downstream-Speed-Limit...why?
You need to have the dictionary with RP-Upstream-Speed-Limit and RP-Downstream-Speed-Limit installed in /etc/radiusclient/ and /etc/radiusclient/radiusclient.conf .
-- damjan | дамÑан This is my jabber ID --> damjan@bagra.net.mk
-- not my mail address, it's a Jabber ID --^ :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Again ! As far as FreeRADIUS returns the attributes and values which are expected to be returned. The mistake in system is out of FreeRADIUS range. And this list is not a support hotline for misconfiguration on the rest of the system ;) Your PPPoE server should load radius.so and then radattr.so ! Ive just tested the radattr.so module on my Poptop server ( without any special config - just added the module ) and it is working as it should. Have you entered the attributes in both dictionaries? Server & client dictionary ?? Regards, Edvin -----Original Message----- From: freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.org [mailto:freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.or g] On Behalf Of root linux Sent: Mittwoch, 31. Mai 2006 04:22 To: FreeRadius users mailing list Subject: Re: freeradius 1.1.0 with rp-pppoe 3.8 pppoe-server I included the below into /etc/radiusclient/dictionary: - ATTRIBUTE RP-Upstream-Speed-Limit 81 integer ATTRIBUTE RP-Downstream-Speed-Limit 82 integer But it doesn't help... the output from the /var/run/radattr.ppp0 still shows the below: - Idle-Timeout 300 Below is the output from radtest command: - [root@gw01 run]# radtest testuser testpass 127.0.0.1 10 glsbb2005 Sending Access-Request of id 194 to 127.0.0.1 port 1812 User-Name = "testuser" User-Password = "testpass" NAS-IP-Address = 255.255.255.255 NAS-Port = 10 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=194, length=50 Idle-Timeout = 300 RP-Upstream-Speed-Limit = 64 RP-Downstream-Speed-Limit = 128 --- Damjan <gdamjan@mail.net.mk> wrote:
Below is the output from the /var/run/radattr.ppp0 :-
Idle-Timeout 300
Below is the output from "radiusd -X" :-
Sending Access-Accept of id 74 to 127.0.0.1 port 32797 Idle-Timeout = 300 RP-Upstream-Speed-Limit = 64 RP-Downstream-Speed-Limit = 128 Finished request 8
I don't see any RP-Upstream-Speed-Limit or RP-Downstream-Speed-Limit...why?
You need to have the dictionary with RP-Upstream-Speed-Limit and RP-Downstream-Speed-Limit installed in /etc/radiusclient/ and /etc/radiusclient/radiusclient.conf .
-- damjan | дамÑан This is my jabber ID --> damjan@bagra.net.mk
-- not my mail address, it's a Jabber ID --^ :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yes, the radius.so is loaded first and then radattr.so in the /etc/ppp/options require-pap login lcp-echo-interval 10 lcp-echo-failure 2 ms-dns 192.168.1.1 ms-dns 192.168.1.2 plugin radius.so plugin radattr.so Is this the radius client dictionary - /etc/radiusclient/dictionary? Is this the radius server dictionary - /usr/local/share/freeradius/dictionary.roaringpenguin? --- Seferovic Edvin <edvin.seferovic@kolp.at> wrote:
Again !
As far as FreeRADIUS returns the attributes and values which are expected to be returned. The mistake in system is out of FreeRADIUS range. And this list is not a support hotline for misconfiguration on the rest of the system ;)
Your PPPoE server should load radius.so and then radattr.so !
Ive just tested the radattr.so module on my Poptop server ( without any special config - just added the module ) and it is working as it should.
Have you entered the attributes in both dictionaries? Server & client dictionary ??
Regards,
Edvin
-----Original Message----- From:
freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.org
[mailto:freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.or
g] On Behalf Of root linux Sent: Mittwoch, 31. Mai 2006 04:22 To: FreeRadius users mailing list Subject: Re: freeradius 1.1.0 with rp-pppoe 3.8 pppoe-server
I included the below into /etc/radiusclient/dictionary: -
ATTRIBUTE RP-Upstream-Speed-Limit 81 integer ATTRIBUTE RP-Downstream-Speed-Limit 82
integer
But it doesn't help... the output from the /var/run/radattr.ppp0 still shows the below: -
Idle-Timeout 300
Below is the output from radtest command: -
[root@gw01 run]# radtest testuser testpass 127.0.0.1 10 glsbb2005 Sending Access-Request of id 194 to 127.0.0.1 port 1812 User-Name = "testuser" User-Password = "testpass" NAS-IP-Address = 255.255.255.255 NAS-Port = 10 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=194, length=50 Idle-Timeout = 300 RP-Upstream-Speed-Limit = 64 RP-Downstream-Speed-Limit = 128
--- Damjan <gdamjan@mail.net.mk> wrote:
Below is the output from the /var/run/radattr.ppp0 :-
Idle-Timeout 300
Below is the output from "radiusd -X" :-
Sending Access-Accept of id 74 to 127.0.0.1 port 32797 Idle-Timeout = 300 RP-Upstream-Speed-Limit = 64 RP-Downstream-Speed-Limit = 128 Finished request 8
I don't see any RP-Upstream-Speed-Limit or RP-Downstream-Speed-Limit...why?
You need to have the dictionary with RP-Upstream-Speed-Limit and RP-Downstream-Speed-Limit installed in /etc/radiusclient/ and /etc/radiusclient/radiusclient.conf .
-- damjan | дамÑан This is my jabber ID --> damjan@bagra.net.mk
-- not my mail address, it's a Jabber ID --^ :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
participants (4)
-
Alan DeKok -
Damjan -
root linux -
Seferovic Edvin