I have just made a switch from Arch Linux to Debian because Arch Linux has started using FR 3.x which does not support my SQL counters. I am running into issues getting CoovaChilli to work with FreeRADIUS I keep getting the following: Ready to process requests. rad_recv: Accounting-Request packet from host 127.0.0.1 port 50139, id=0, length=173 Received Accounting-Request packet from client 127.0.0.1 with invalid signature! (Shared secret is incorrect.) Dropping packet without response. Going to the next request Waking up in 0.9 seconds. Cleaning up request 0 ID 0 with timestamp +7 Ready to process requests. rad_recv: Accounting-Request packet from host 127.0.0.1 port 50139, id=0, length=173 Received Accounting-Request packet from client 127.0.0.1 with invalid signature! (Shared secret is incorrect.) Dropping packet without response. Going to the next request Waking up in 0.9 seconds. Cleaning up request 1 ID 0 with timestamp +18 Ready to process requests. rad_recv: Accounting-Request packet from host 127.0.0.1 port 50139, id=0, length=173 Received Accounting-Request packet from client 127.0.0.1 with invalid signature! (Shared secret is incorrect.) Dropping packet without response. Going to the next request Waking up in 0.9 seconds. Cleaning up request 2 ID 0 with timestamp +28 Ready to process requests. But the shared secret is the same in both the NAS and FR: root@hotspot2:/etc/freeradius# cat clients.conf | grep secret # The shared secret use to "encrypt" and "sign" packets between # the NAS and FreeRADIUS. You MUST change this secret from the # default, otherwise it's not a secret any more! # The secret can be any string, up to 8k characters in length. # depends COMPLETELY on this secret! We recommend using a # shared secret that is composed of: # length. The secret MUST be random, and should not be words, # The default secret below is only for testing, and should secret = z6B3YT1B57rX9Bkwzqc9QSldGQDKXpDS # secret = testing123 # secret = testing123 # secret = testing123 # You can now specify one secret for a network of clients. # secret = testing123-1 # secret = testing123-2 # # secret and password are mapped through the "secrets" file. # secret = testing123 # secret = testing123 root@hotspot2:/etc/freeradius# root@hotspot2:/etc/chilli# cat config | grep HS_RADSECRET HS_RADSECRET=z6B3YT1B57rX9Bkwzqc9QSldGQDKXpDS # HS_RADPROXY_SECRET=$HS_RADSECRET root@hotspot2:/etc/chilli# Any ideas?
Define what you mean about the SQL counters in 3.0 .... If there's a issue then that needs to be looked into. -- Sent from my Android device with K-9 Mail. Please excuse my brevity.
Jed Gainer wrote:
I have just made a switch from Arch Linux to Debian because Arch Linux has started using FR 3.x which does not support my SQL counters.
Grab the v3.0.x branch from git. It should work better.
But the shared secret is the same in both the NAS and FR:
No, it's not. It's not. Really. It's not.
Any ideas?
Fix the shared secret. Ensure you have only ONE client definition for that client, and that you're editing the right file. Alan DeKok.
participants (3)
-
Alan Buxey -
Alan DeKok -
Jed Gainer