Good Day All, I'm fairly new to FreeRadius and would like some feedback. I'm in the process of adding a realm to one of our existing Radius servers. As a test I have created the following realm in the proxy.conf file: # auth_pool = Added by Steve, June 1st, 2015 for testing. realm "@test.somewhere.bc.ca" { auth_pool = staff_domain } When I reload the radiusd daemon and try to log on I get the following message in the log file: Tue Jun 2 13:19:36 2015 : Auth: Login incorrect (Home Server says so): [username@test.somewhere.bc.ca] (from client Wireless-Lans-WLC4404-1 port 13 cli 38-aa-3c-cb-9e-88) Like I said above, I'm fairly new to this so I may not have configured everything required to make it work properly. We are currently running FreeRADIUS Version 2.1.10 on LINUX. Thanks, Steve Campbell
Hi Stephen, On Tue, Jun 2, 2015 at 4:33 PM, Stephen Campbell <CampbellS@camosun.bc.ca> wrote:
Like I said above, I'm fairly new to this so I may not have configured everything required to make it work properly.
You'll want to run the server in debug mode.
We are currently running FreeRADIUS Version 2.1.10 on LINUX.
Debian Squeeze or something else? Use the -X to run in debug mode. In Debian it'll look like this: sudo service freeradius stop sudo freeradius -X Post the details of "freeradius -X". Cheers! -m
The OS we are running is CentOS 5.11 -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+campbells=camosun.bc.ca@lists.freeradius.org] On Behalf Of Matt Zagrabelny Sent: Tuesday, June 02, 2015 2:41 PM To: FreeRadius users mailing list Subject: Re: FreeRadius and Realms Hi Stephen, On Tue, Jun 2, 2015 at 4:33 PM, Stephen Campbell <CampbellS@camosun.bc.ca> wrote:
Like I said above, I'm fairly new to this so I may not have configured everything required to make it work properly.
You'll want to run the server in debug mode.
We are currently running FreeRADIUS Version 2.1.10 on LINUX.
Debian Squeeze or something else? Use the -X to run in debug mode. In Debian it'll look like this: sudo service freeradius stop sudo freeradius -X Post the details of "freeradius -X". Cheers! -m - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
# auth_pool = Added by Steve, June 1st, 2015 for testing. realm "@test.somewhere.bc.ca" { auth_pool = staff_domain }
Always provide a debug log of what happens. Run FR in debug mode as root by using radiusd -X (since you're on CentOS 5 with 2.1.10). But the realm entry above looks odd. It probably should be "realm test.somewhere.bc.ca" Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.
run in debug mode to see what's going on 'radiusd -X' (after ensuring current raffia server is stopped! ) Your realm doesn't need the @ in it. The log file is saying 'home server says so' - so check the logs on the server requests are being sent to if they are getting there (being sent there. Hence the debug output) Cheers alan
participants (4)
-
Alan Buxey -
Matt Zagrabelny -
Stefan Paetow -
Stephen Campbell