Alan DeKok a écrit :

freeradius wrote: ...

...

--> when I send a request from a NAC with the IP address 192.168.1.129, it does not work as described in the debug output :

modcall[authorize]: module "files" returns notfound for request 34

Does anymone has an idea why it does not work ?

Read ALL of the debug output.

Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Hello, I have just done another test on a test proxy+server infrastructure on FC5... The freeradius version is : radiusd: FreeRADIUS Version 1.0.5, for host , built on Feb 11 2006 at 12:34:06 The users file contains : john Client-IP-Address == 192.168.2.100/30, Proxy-To-Realm := proxy The Debug Output looks like this now : rad_recv: Access-Request packet from host 192.168.2.102:5299, id=11, length=90 User-Name = "john" Acct-Session-Id = "123456789" NAS-IP-Address = 127.0.0.1 NAS-Identifier = "Localhost" NAS-Port = 0 Calling-Station-Id = "1115551212" User-Password = "testing123" Fri Mar 16 23:47:04 2007 : Debug: Processing the authorize section of radiusd.conf Fri Mar 16 23:47:04 2007 : Debug: modcall: entering group authorize for request 0 Fri Mar 16 23:47:04 2007 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 0 Fri Mar 16 23:47:04 2007 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 0 Fri Mar 16 23:47:04 2007 : Debug: modcall[authorize]: module "preprocess" returns ok for request 0 Fri Mar 16 23:47:04 2007 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 0 Fri Mar 16 23:47:04 2007 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 0 Fri Mar 16 23:47:04 2007 : Debug: modcall[authorize]: module "chap" returns noop for request 0 Fri Mar 16 23:47:04 2007 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 0 Fri Mar 16 23:47:04 2007 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 0 Fri Mar 16 23:47:04 2007 : Debug: modcall[authorize]: module "mschap" returns noop for request 0 Fri Mar 16 23:47:04 2007 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 0 Fri Mar 16 23:47:04 2007 : Debug: rlm_realm: No '@' in User-Name = "john", looking up realm NULL Fri Mar 16 23:47:04 2007 : Debug: rlm_realm: No such realm "NULL" Fri Mar 16 23:47:04 2007 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 0 Fri Mar 16 23:47:04 2007 : Debug: modcall[authorize]: module "suffix" returns noop for request 0 Fri Mar 16 23:47:04 2007 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 0 Fri Mar 16 23:47:04 2007 : Debug: rlm_eap: No EAP-Message, not doing EAP Fri Mar 16 23:47:04 2007 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 0 Fri Mar 16 23:47:04 2007 : Debug: modcall[authorize]: module "eap" returns noop for request 0 Fri Mar 16 23:47:04 2007 : Debug: modsingle[authorize]: calling files (rlm_files) for request 0 Fri Mar 16 23:47:04 2007 : Debug: users: Matched entry DEFAULT at line 152 Fri Mar 16 23:47:04 2007 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 0 Fri Mar 16 23:47:04 2007 : Debug: modcall[authorize]: module "files" returns ok for request 0 Fri Mar 16 23:47:04 2007 : Debug: modcall: group authorize returns ok for request 0 Fri Mar 16 23:47:04 2007 : Debug: rad_check_password: Found Auth-Type System Fri Mar 16 23:47:04 2007 : Debug: auth: type "System" Fri Mar 16 23:47:04 2007 : Debug: Processing the authenticate section of radiusd.conf Fri Mar 16 23:47:04 2007 : Debug: modcall: entering group authenticate for request 0 Fri Mar 16 23:47:04 2007 : Debug: modsingle[authenticate]: calling unix (rlm_unix) for request 0 Fri Mar 16 23:47:04 2007 : Debug: modsingle[authenticate]: returned from unix (rlm_unix) for request 0 Fri Mar 16 23:47:04 2007 : Debug: modcall[authenticate]: module "unix" returns notfound for request 0 Fri Mar 16 23:47:04 2007 : Debug: modcall: group authenticate returns notfound for request 0 Fri Mar 16 23:47:04 2007 : Debug: auth: Failed to validate the user. Fri Mar 16 23:47:04 2007 : Debug: Delaying request 0 for 1 seconds Fri Mar 16 23:47:04 2007 : Debug: Finished request 0 Fri Mar 16 23:47:04 2007 : Debug: Going to the next request Fri Mar 16 23:47:04 2007 : Debug: --- Walking the entire request list --- Fri Mar 16 23:47:04 2007 : Debug: Waking up in 1 seconds... Fri Mar 16 23:47:05 2007 : Debug: --- Walking the entire request list --- Fri Mar 16 23:47:05 2007 : Debug: Waking up in 1 seconds... rad_recv: Access-Request packet from host 192.168.2.102:5299, id=11, length=90 Sending Access-Reject of id 11 to 192.168.2.102:5299 Fri Mar 16 23:47:06 2007 : Debug: --- Walking the entire request list --- Fri Mar 16 23:47:06 2007 : Debug: Waking up in 4 seconds... Fri Mar 16 23:47:10 2007 : Debug: --- Walking the entire request list --- Fri Mar 16 23:47:10 2007 : Debug: Cleaning up request 0 ID 11 with timestamp 45fb64b8 Fri Mar 16 23:47:10 2007 : Debug: Nothing to do. Sleeping until we see a request. It does work when the users file contains : john Client-IP-Address == 192.168.2.102, Proxy-To-Realm := proxy .... Fri Mar 16 23:51:52 2007 : Debug: Config: including file: /etc/raddb/eap.conf Fri Mar 16 23:51:52 2007 : Debug: Config: including file: /etc/raddb/sql.conf Fri Mar 16 23:51:52 2007 : Debug: main: prefix = "/usr" Fri Mar 16 23:51:52 2007 : Debug: main: localstatedir = "/var" Fri Mar 16 23:51:52 2007 : Debug: main: logdir = "/var/log/radius" Fri Mar 16 23:51:52 2007 : Debug: main: libdir = "/usr/lib" Fri Mar 16 23:51:52 2007 : Debug: main: radacctdir = "/var/log/radius/radacct" Fri Mar 16 23:51:52 2007 : Debug: main: hostname_lookups = no Fri Mar 16 23:51:52 2007 : Debug: main: max_request_time = 30 Fri Mar 16 23:51:52 2007 : Debug: main: cleanup_delay = 5 Fri Mar 16 23:51:52 2007 : Debug: main: max_requests = 1024 Fri Mar 16 23:51:52 2007 : Debug: main: delete_blocked_requests = 0 Fri Mar 16 23:51:52 2007 : Debug: main: port = 0 Fri Mar 16 23:51:52 2007 : Debug: main: allow_core_dumps = no Fri Mar 16 23:51:52 2007 : Debug: main: log_stripped_names = no Fri Mar 16 23:51:52 2007 : Debug: main: log_file = "/var/log/radius/radius.log" Fri Mar 16 23:51:52 2007 : Debug: main: log_auth = no Fri Mar 16 23:51:52 2007 : Debug: main: log_auth_badpass = no Fri Mar 16 23:51:52 2007 : Debug: main: log_auth_goodpass = no Fri Mar 16 23:51:52 2007 : Debug: main: pidfile = "/var/run/radiusd/radiusd.pid" Fri Mar 16 23:51:52 2007 : Debug: main: user = "radiusd" Fri Mar 16 23:51:52 2007 : Debug: main: group = "radiusd" Fri Mar 16 23:51:52 2007 : Debug: main: usercollide = no Fri Mar 16 23:51:52 2007 : Debug: main: lower_user = "no" Fri Mar 16 23:51:52 2007 : Debug: main: lower_pass = "no" Fri Mar 16 23:51:52 2007 : Debug: main: nospace_user = "no" Fri Mar 16 23:51:52 2007 : Debug: main: nospace_pass = "no" Fri Mar 16 23:51:52 2007 : Debug: main: checkrad = "/usr/sbin/checkrad" Fri Mar 16 23:51:52 2007 : Debug: main: proxy_requests = yes Fri Mar 16 23:51:52 2007 : Debug: proxy: retry_delay = 5 Fri Mar 16 23:51:52 2007 : Debug: proxy: retry_count = 3 Fri Mar 16 23:51:52 2007 : Debug: proxy: synchronous = no Fri Mar 16 23:51:52 2007 : Debug: proxy: default_fallback = yes Fri Mar 16 23:51:52 2007 : Debug: proxy: dead_time = 120 Fri Mar 16 23:51:52 2007 : Debug: proxy: post_proxy_authorize = yes Fri Mar 16 23:51:52 2007 : Debug: proxy: wake_all_if_all_dead = no Fri Mar 16 23:51:52 2007 : Debug: security: max_attributes = 200 Fri Mar 16 23:51:52 2007 : Debug: security: reject_delay = 1 Fri Mar 16 23:51:52 2007 : Debug: security: status_server = no Fri Mar 16 23:51:52 2007 : Debug: main: debug_level = 0 Fri Mar 16 23:51:52 2007 : Debug: read_config_files: reading dictionary Fri Mar 16 23:51:52 2007 : Debug: read_config_files: reading naslist Fri Mar 16 23:51:52 2007 : Info: Using deprecated naslist file. Support for this will go away soon. Fri Mar 16 23:51:52 2007 : Debug: read_config_files: reading clients Fri Mar 16 23:51:52 2007 : Debug: read_config_files: reading realms Fri Mar 16 23:51:52 2007 : Debug: radiusd: entering modules setup Fri Mar 16 23:51:52 2007 : Debug: Module: Library search path is /usr/lib Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded exec Fri Mar 16 23:51:52 2007 : Debug: exec: wait = yes Fri Mar 16 23:51:52 2007 : Debug: exec: program = "(null)" Fri Mar 16 23:51:52 2007 : Debug: exec: input_pairs = "request" Fri Mar 16 23:51:52 2007 : Debug: exec: output_pairs = "(null)" Fri Mar 16 23:51:52 2007 : Debug: exec: packet_type = "(null)" Fri Mar 16 23:51:52 2007 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated exec (exec) Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded expr Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated expr (expr) Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded PAP Fri Mar 16 23:51:52 2007 : Debug: pap: encryption_scheme = "crypt" Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated pap (pap) Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded CHAP Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated chap (chap) Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded MS-CHAP Fri Mar 16 23:51:52 2007 : Debug: mschap: use_mppe = yes Fri Mar 16 23:51:52 2007 : Debug: mschap: require_encryption = no Fri Mar 16 23:51:52 2007 : Debug: mschap: require_strong = no Fri Mar 16 23:51:52 2007 : Debug: mschap: with_ntdomain_hack = no Fri Mar 16 23:51:52 2007 : Debug: mschap: passwd = "(null)" Fri Mar 16 23:51:52 2007 : Debug: mschap: authtype = "MS-CHAP" Fri Mar 16 23:51:52 2007 : Debug: mschap: ntlm_auth = "(null)" Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated mschap (mschap) Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded System Fri Mar 16 23:51:52 2007 : Debug: unix: cache = no Fri Mar 16 23:51:52 2007 : Debug: unix: passwd = "(null)" Fri Mar 16 23:51:52 2007 : Debug: unix: shadow = "/etc/shadow" Fri Mar 16 23:51:52 2007 : Debug: unix: group = "(null)" Fri Mar 16 23:51:52 2007 : Debug: unix: radwtmp = "/var/log/radius/radwtmp" Fri Mar 16 23:51:52 2007 : Debug: unix: usegroup = no Fri Mar 16 23:51:52 2007 : Debug: unix: cache_reload = 600 Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated unix (unix) Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded eap Fri Mar 16 23:51:52 2007 : Debug: eap: default_eap_type = "md5" Fri Mar 16 23:51:52 2007 : Debug: eap: timer_expire = 60 Fri Mar 16 23:51:52 2007 : Debug: eap: ignore_unknown_eap_types = no Fri Mar 16 23:51:52 2007 : Debug: eap: cisco_accounting_username_bug = no Fri Mar 16 23:51:52 2007 : Debug: rlm_eap: Loaded and initialized type md5 Fri Mar 16 23:51:52 2007 : Debug: rlm_eap: Loaded and initialized type leap Fri Mar 16 23:51:52 2007 : Debug: gtc: challenge = "Password: " Fri Mar 16 23:51:52 2007 : Debug: gtc: auth_type = "PAP" Fri Mar 16 23:51:52 2007 : Debug: rlm_eap: Loaded and initialized type gtc Fri Mar 16 23:51:52 2007 : Debug: mschapv2: with_ntdomain_hack = no Fri Mar 16 23:51:52 2007 : Debug: rlm_eap: Loaded and initialized type mschapv2 Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated eap (eap) Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded preprocess Fri Mar 16 23:51:52 2007 : Debug: preprocess: huntgroups = "/etc/raddb/huntgroups" Fri Mar 16 23:51:52 2007 : Debug: preprocess: hints = "/etc/raddb/hints" Fri Mar 16 23:51:52 2007 : Debug: preprocess: with_ascend_hack = no Fri Mar 16 23:51:52 2007 : Debug: preprocess: ascend_channels_per_line = 23 Fri Mar 16 23:51:52 2007 : Debug: preprocess: with_ntdomain_hack = no Fri Mar 16 23:51:52 2007 : Debug: preprocess: with_specialix_jetstream_hack = no Fri Mar 16 23:51:52 2007 : Debug: preprocess: with_cisco_vsa_hack = no Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated preprocess (preprocess) Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded realm Fri Mar 16 23:51:52 2007 : Debug: realm: format = "suffix" Fri Mar 16 23:51:52 2007 : Debug: realm: delimiter = "@" Fri Mar 16 23:51:52 2007 : Debug: realm: ignore_default = no Fri Mar 16 23:51:52 2007 : Debug: realm: ignore_null = no Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated realm (suffix) Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded files Fri Mar 16 23:51:52 2007 : Debug: files: usersfile = "/etc/raddb/users" Fri Mar 16 23:51:52 2007 : Debug: files: acctusersfile = "/etc/raddb/acct_users" Fri Mar 16 23:51:52 2007 : Debug: files: preproxy_usersfile = "/etc/raddb/preproxy_users" Fri Mar 16 23:51:52 2007 : Debug: files: compat = "no" Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated files (files) Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded Acct-Unique-Session-Id Fri Mar 16 23:51:52 2007 : Debug: acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated acct_unique (acct_unique) Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded detail Fri Mar 16 23:51:52 2007 : Debug: detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" Fri Mar 16 23:51:52 2007 : Debug: detail: detailperm = 384 Fri Mar 16 23:51:52 2007 : Debug: detail: dirperm = 493 Fri Mar 16 23:51:52 2007 : Debug: detail: locking = no Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated detail (detail) Fri Mar 16 23:51:52 2007 : Debug: Module: Loaded radutmp Fri Mar 16 23:51:52 2007 : Debug: radutmp: filename = "/var/log/radius/radutmp" Fri Mar 16 23:51:52 2007 : Debug: radutmp: username = "%{User-Name}" Fri Mar 16 23:51:52 2007 : Debug: radutmp: case_sensitive = yes Fri Mar 16 23:51:52 2007 : Debug: radutmp: check_with_nas = yes Fri Mar 16 23:51:52 2007 : Debug: radutmp: perm = 384 Fri Mar 16 23:51:52 2007 : Debug: radutmp: callerid = yes Fri Mar 16 23:51:52 2007 : Debug: Module: Instantiated radutmp (radutmp) Fri Mar 16 23:51:52 2007 : Debug: Listening on authentication *:1812 Fri Mar 16 23:51:52 2007 : Debug: Listening on accounting *:1813 Fri Mar 16 23:51:52 2007 : Debug: Listening on proxy *:1814 Fri Mar 16 23:51:52 2007 : Info: Ready to process requests. rad_recv: Access-Request packet from host 192.168.2.102:5350, id=12, length=90 User-Name = "john" Acct-Session-Id = "123456789" NAS-IP-Address = 127.0.0.1 NAS-Identifier = "Localhost" NAS-Port = 0 Calling-Station-Id = "1115551212" User-Password = "testing123" Fri Mar 16 23:51:57 2007 : Debug: Processing the authorize section of radiusd.conf Fri Mar 16 23:51:57 2007 : Debug: modcall: entering group authorize for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[authorize]: module "preprocess" returns ok for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[authorize]: module "chap" returns noop for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[authorize]: module "mschap" returns noop for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 0 Fri Mar 16 23:51:57 2007 : Debug: rlm_realm: No '@' in User-Name = "john", looking up realm NULL Fri Mar 16 23:51:57 2007 : Debug: rlm_realm: No such realm "NULL" Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[authorize]: module "suffix" returns noop for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: rlm_eap: No EAP-Message, not doing EAP Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[authorize]: module "eap" returns noop for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: calling files (rlm_files) for request 0 Fri Mar 16 23:51:57 2007 : Debug: users: Matched entry DEFAULT at line 152 Fri Mar 16 23:51:57 2007 : Debug: users: Matched entry john at line 156 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[authorize]: module "files" returns ok for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall: group authorize returns ok for request 0 Fri Mar 16 23:51:57 2007 : Debug: proxy: creating 1102a8c0:1812 Fri Mar 16 23:51:57 2007 : Debug: proxy: allocating 1102a8c0:1812 0 Sending Access-Request of id 0 to 192.168.2.17:1812 User-Name = "john" Acct-Session-Id = "123456789" NAS-IP-Address = 127.0.0.1 NAS-Identifier = "Localhost" NAS-Port = 0 Calling-Station-Id = "1115551212" User-Password = "testing123" Proxy-State = 0x3132 Fri Mar 16 23:51:57 2007 : Debug: --- Walking the entire request list --- Fri Mar 16 23:51:57 2007 : Debug: Waking up in 6 seconds... rad_recv: Access-Accept packet from host 192.168.2.17:1812, id=0, length=75 Fri Mar 16 23:51:57 2007 : Debug: proxy: de-allocating 1102a8c0:1812 0 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 172.16.3.33 Framed-IP-Netmask = 255.255.255.0 Framed-Routing = Broadcast-Listen Filter-Id = "std.ppp" Framed-MTU = 1500 Framed-Compression = Van-Jacobson-TCP-IP Proxy-State = 0x3132 Fri Mar 16 23:51:57 2007 : Debug: Processing the post-proxy section of radiusd.conf Fri Mar 16 23:51:57 2007 : Debug: modcall: entering group post-proxy for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[post-proxy]: calling eap (rlm_eap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[post-proxy]: returned from eap (rlm_eap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[post-proxy]: module "eap" returns noop for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall: group post-proxy returns noop for request 0 Fri Mar 16 23:51:57 2007 : Debug: Processing the authorize section of radiusd.conf Fri Mar 16 23:51:57 2007 : Debug: modcall: entering group authorize for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[authorize]: module "preprocess" returns ok for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[authorize]: module "chap" returns noop for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[authorize]: module "mschap" returns noop for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 0 Fri Mar 16 23:51:57 2007 : Debug: rlm_realm: Proxy reply, or no User-Name. Ignoring. Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[authorize]: module "suffix" returns noop for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[authorize]: module "eap" returns noop for request 0 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: calling files (rlm_files) for request 0 Fri Mar 16 23:51:57 2007 : Debug: users: Matched entry DEFAULT at line 152 Fri Mar 16 23:51:57 2007 : Debug: users: Matched entry john at line 156 Fri Mar 16 23:51:57 2007 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall[authorize]: module "files" returns ok for request 0 Fri Mar 16 23:51:57 2007 : Debug: modcall: group authorize returns ok for request 0 Fri Mar 16 23:51:57 2007 : Debug: rad_check_password: Found Auth-Type Fri Mar 16 23:51:57 2007 : Debug: rad_check_password: Auth-Type = Accept, accepting the user Sending Access-Accept of id 12 to 192.168.2.102:5350 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 172.16.3.33 Framed-IP-Netmask = 255.255.255.0 Framed-Routing = Broadcast-Listen Filter-Id = "std.ppp" Framed-MTU = 1500 Framed-Compression = Van-Jacobson-TCP-IP Fri Mar 16 23:51:57 2007 : Debug: Finished request 0 Fri Mar 16 23:51:57 2007 : Debug: Going to the next request Fri Mar 16 23:51:57 2007 : Debug: rl_next: returning NULL Fri Mar 16 23:51:57 2007 : Debug: Waking up in 6 seconds... Fri Mar 16 23:52:03 2007 : Debug: --- Walking the entire request list --- Fri Mar 16 23:52:03 2007 : Debug: Cleaning up request 0 ID 12 with timestamp 45fb65dd Fri Mar 16 23:52:03 2007 : Debug: Nothing to do. Sleeping until we see a request. Sincerely, Philippe

Yes you're right, I saw this wrong information in a non official radius forum, Is there a way or another to check on a network basis like 192.168.2.100/30 ? In our productive architecture, the number of ip addresses should be a /21 subnet (2046 hosts)... I can write one line per ip but maybe there is a better way to configure it ? Thanks, Philippe Bacquaert Alan DeKok a écrit :

freeradius wrote: ...

...

The users file contains : john Client-IP-Address == 192.168.2.100/30, Proxy-To-Realm := proxy

Nothing in the documentation or examples says that the "IP/mask" format is valid. It's not. The server won't understand it.

Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeradius wrote:

Is there a way or another to check on a network basis like 192.168.2.100/30 ?

Yes and no. Regular expressions work, but they're ugly.

In our productive architecture, the number of ip addresses should be a /21 subnet (2046 hosts)... I can write one line per ip but maybe there is a better way to configure it ?

Regular expressions. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog