radutmp file not created
hi I am not able to do radwho since radutmp is not created, In Radius -X it tells me radutmp module is loaded and file should be /var/log/radius/radutmp Freeradius version is : freeradius-2.2.3-6.el6.x86_64 Module: Linked to module rlm_radutmp Module: Instantiating module "radutmp" from file /etc/raddb/modules/radutmp radutmp { filename = "/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } And, In /var/log/radius/radacct/192.168.1.1/auth-detail-20140430, NAS seem to sending request packet to the server Wed Apr 30 10:58:41 2014 Packet-Type = Access-Request EAP-Message = 0x020900061a03 FreeRADIUS-Proxied-To = 127.0.0.1 User-Name = "testuser@ba.com" State = 0x882dba688924a0df1b204ef3b696b63f Calling-Station-Id = "00215c5b8ef3" Called-Station-Id = "dca5f44de9c0:eduroam-tmp" NAS-Port = 1 Cisco-AVPair = "audit-session-id=82d0a5f700000e5a535fb9e9" NAS-IP-Address = 192.168.1.1 NAS-Identifier = "mywireless1" Airespace-Wlan-Id = 310 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 In /etc/raddb/sites-enabled/default accounting section radutmp is uncommented And, still radutmp file is not created in /var/log/radius directory. When I run the freeradius in debug mode (radiusd -X) and test authenticate user I get following: Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 54636, id=127, length=139 User-Name = "testuser@ba.com" NAS-IP-Address = 192.168.1.1 NAS-Port = 0 Message-Authenticator = 0xee4209c0650849c1f6d60a5f94bf5a9b MS-CHAP-Challenge = 0x3feecd0086804485 MS-CHAP-Response = 0x000100000000000000000000000000000000000000000000000077ac654ce5135ab5f8690098e68c7e403bfcc24bb714d293 # Executing section authorize from file /etc/raddb/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop [mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap' ++[mschap] = ok ++[digest] = noop [suffix] Looking up realm "ba.com" for User-Name = "testuser@ba.com" [suffix] Found realm "ba.com" [suffix] Adding Stripped-User-Name = "testuser" [suffix] Adding Realm = "ba.com" [suffix] Authentication realm is LOCAL. ++[suffix] = ok [eap] No EAP-Message, not doing EAP ++[eap] = noop [files] users: Matched entry DEFAULT at line 3 ++[files] = ok [ldap] performing user authorization for testuser [ldap] expand: %{Stripped-User-Name} -> testuser [ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=testuser) [ldap] expand: ou=People,dc=BA,dc=com -> ou=People,dc=BA,dc=com [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] attempting LDAP reconnection [ldap] (re)connect to ldap.ba.com:389, authentication 0 [ldap] bind as / to ldap.ba.com:389 [ldap] waiting for bind result ... [ldap] Bind was successful [ldap] performing search in ou=People,dc=BA,dc=com, with filter (uid=testuser) [ldap] looking for check items in directory... [ldap] looking for reply items in directory... WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly? [ldap] ldap_release_conn: Release Id: 0 ++[ldap] = ok ++[expiration] = noop ++[logintime] = noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] = noop +} # group authorize = ok Found Auth-Type = MSCHAP # Executing group from file /etc/raddb/sites-enabled/default +group MS-CHAP { [mschap] Client is using MS-CHAPv1 with NT-Password [mschap] expand: %{Stripped-User-Name} -> testuser [mschap] expand: --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} -> --username=testuser [mschap] mschap1: 3f [mschap] expand: %{mschap:Challenge} -> 3feecd0086804485 [mschap] expand: --challenge=%{%{mschap:Challenge}:-00} -> --challenge=3feecd0086804485 [mschap] expand: %{mschap:NT-Response} -> 77ac654ce5135ab5f8690098e68c7e403bfcc24bb714d293 [mschap] expand: --nt-response=%{%{mschap:NT-Response}:-00} -> --nt-response=77ac654ce5135ab5f8690098e68c7e403bfcc24bb714d293 Exec output: NT_KEY: 04066C8C6B0E8CFCABBB0AB6760971F7 Exec plaintext: NT_KEY: 04066C8C6B0E8CFCABBB0AB6760971F7 [mschap] Exec: program returned: 0 [mschap] adding MS-CHAPv1 MPPE keys ++[mschap] = ok +} # group MS-CHAP = ok # Executing section session from file /etc/raddb/sites-enabled/default +group session { [radutmp] expand: /var/log/radius/radutmp -> /var/log/radius/radutmp ++[radutmp] = ok So, even though it says radutmp = ok the file /var/log/radius/radutmp is not created. I must be doing something wrong or my configuration is not correct for radutmp. I appericiate some inputs. Thanks K
Khapare Joshi wrote:
I am not able to do radwho since radutmp is not created, In Radius -X it tells me radutmp module is loaded and file should be /var/log/radius/radutmp
The file is only created when the server receives accounting packets.
And, In /var/log/radius/radacct/192.168.1.1/auth-detail-20140430 <http://192.168.1.1/auth-detail-20140430>, NAS seem to sending request packet to the server
Wed Apr 30 10:58:41 2014 Packet-Type = Access-Request
That's not an accounting packet.
In /etc/raddb/sites-enabled/default accounting section radutmp is uncommented
That section is run only when the server receives accounting packets.
And, still radutmp file is not created in /var/log/radius directory.
Because the server isn't receiving accounting packets.
When I run the freeradius in debug mode (radiusd -X) and test authenticate user I get following:
Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 54636, id=127,
That's not an accounting packet. Alan DeKok.
okay, I have following file in my /var/log/radius/radacct/192.168.1.1 directory reply-detail-20140430 auth-detail-20140430 in reply-detail-20140430 Packet-Type says Accept-Accept Wed Apr 30 14:08:40 2014 Packet-Type = Access-Accept MS-MPPE-Encryption-Policy = 0x00000002 MS-MPPE-Encryption-Types = 0x00000004 MS-MPPE-Send-Key = 0x263ee9279fd3d514c1d61592037f0f3b MS-MPPE-Recv-Key = 0x3e0f78cd3468dd822693b9864bf6a60d EAP-Message = 0x03090004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "testuser" and in auth-detail-20140430 Packet-Type=Accept-Request Wed Apr 30 14:08:40 2014 Packet-Type = Access-Request EAP-Message = 0x020900061a03 FreeRADIUS-Proxied-To = 127.0.0.1 User-Name = "testuser@ba.com" State = 0x15308db9143997fbbf8015e30f10d43e Calling-Station-Id = "206432616d2d" Called-Station-Id = "dca5f44de9c0:eduroam-temp" NAS-Port = 1 Cisco-AVPair = "audit-session-id=82d0a5f700000ecd536103d3" NAS-IP-Address = 192.168.1.1 NAS-Identifier = "mywireless1" Airespace-Wlan-Id = 310 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 if Packet-Type=Accept-Request is not accounting packets then Packet-Type = Access-Accept must the one or not ? if Packet-Type = Access-Accept then why it is not creating those file so that I can use the Simultaneous-Use := 2 for users. K On Wed, Apr 30, 2014 at 12:23 PM, Alan DeKok <aland@deployingradius.com>wrote:
Khapare Joshi wrote:
I am not able to do radwho since radutmp is not created, In Radius -X it tells me radutmp module is loaded and file should be /var/log/radius/radutmp
The file is only created when the server receives accounting packets.
And, In /var/log/radius/radacct/192.168.1.1/auth-detail-20140430 <http://192.168.1.1/auth-detail-20140430>, NAS seem to sending request packet to the server
Wed Apr 30 10:58:41 2014 Packet-Type = Access-Request
That's not an accounting packet.
In /etc/raddb/sites-enabled/default accounting section radutmp is uncommented
That section is run only when the server receives accounting packets.
And, still radutmp file is not created in /var/log/radius directory.
Because the server isn't receiving accounting packets.
When I run the freeradius in debug mode (radiusd -X) and test authenticate user I get following:
Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 54636, id=127,
That's not an accounting packet.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Khapare Joshi wrote:
I have following file in my /var/log/radius/radacct/192.168.1.1 directory
That doesn't matter. Those are AUTHENTICATION packets. Authentication is not accounting.
if Packet-Type=Accept-Request is not accounting packets then Packet-Type = Access-Accept must the one or not ?
No. That's a reply to an Access-Request. It helps to understand a little bit about RADIUS.
if Packet-Type = Access-Accept then why it is not creating those file so that I can use the Simultaneous-Use := 2 for users.
I have no idea what that means. Make the NAS send Accounting-Request packets. NOTHING else will work. There is NOTHING you can do to FreeRADIUS to make it work. You MUST change the configuration on the NAS. Alan DeKok.
okay, radutmp file is created, it seem that radutmp file relies on detail log file. Fri May 2 12:07:10 2014 Acct-Session-Id = "00000336" Called-Station-Id = "c8f9.f917.bd91" Calling-Station-Id = "0021.5c5b.8ef3" User-Name = "testuser" Acct-Authentic = RADIUS Acct-Session-Time = 97 Acct-Input-Octets = 22387 Acct-Output-Octets = 20126 Acct-Input-Packets = 252 Acct-Output-Packets = 120 Acct-Terminate-Cause = Lost-Carrier Acct-Status-Type = Stop NAS-Port-Type = Wireless-802.11 NAS-Port = 1069 NAS-Port-Id = "1069" Service-Type = Framed-User NAS-IP-Address = 192.168.1.1 Acct-Delay-Time = 0 Acct-Unique-Session-Id = "20e5c440d3d1355a" Stripped-User-Name = "testuser" Realm = "NULL" Timestamp = 1399032430 Fri May 2 12:07:12 2014 Acct-Session-Id = "00000338" Called-Station-Id = "c8f9.f917.bd91" Calling-Station-Id = "0021.5c5b.8ef3" User-Name = "testuser" Acct-Authentic = RADIUS Acct-Status-Type = Start NAS-Port-Type = Wireless-802.11 NAS-Port = 1070 NAS-Port-Id = "1070" Service-Type = Framed-User NAS-IP-Address = 192.168.1.1 Acct-Delay-Time = 0 Acct-Unique-Session-Id = "4a04d32328d2b261" Stripped-User-Name = "testuser" Realm = "NULL" Timestamp = 1399032432 but , if i do radwho in the radius server I still get : radwho: No configuration information in radutmp section of radiusd.conf! radutmp file is created under /var/log/radius directory. On Wed, Apr 30, 2014 at 2:29 PM, Alan DeKok <aland@deployingradius.com>wrote:
Khapare Joshi wrote:
I have following file in my /var/log/radius/radacct/192.168.1.1 directory
That doesn't matter. Those are AUTHENTICATION packets. Authentication is not accounting.
if Packet-Type=Accept-Request is not accounting packets then Packet-Type = Access-Accept must the one or not ?
No. That's a reply to an Access-Request.
It helps to understand a little bit about RADIUS.
if Packet-Type = Access-Accept then why it is not creating those file so that I can use the Simultaneous-Use := 2 for users.
I have no idea what that means.
Make the NAS send Accounting-Request packets.
NOTHING else will work. There is NOTHING you can do to FreeRADIUS to make it work. You MUST change the configuration on the NAS.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello Alan, Now, my radutmp is created and rawho is working. Two things needed to changes at least in my environment. 1) access point was not sending the Accounting packets properly, network guys has fixed this for me. 2. I changed nas = other in client.conf file instead of cisco (this worked) Since all working, I have one small issue regarding radwho output. test1 test1 shell S325 Tue 11:13 192.168.1.252 test2 test2 shell >999 Wed 10:38 192.168.1.160 00376df47b 00376df47b95 shell >999 Wed 13:39 192.168.1.245 70188bccdb 70188bccdb53 shell >999 Wed 13:40 192.168.1.245 00376df47b 00376df47b95 shell >999 Wed 13:59 192.168.1.241 test3 test3 shell S138 Thu 03:30 192.168.1.161 those test1 ---test3 actual users but other numbers are actually the macaddress of the actual client which should be the username like test4 and test5, It will be nice to know what causes that K On Fri, May 2, 2014 at 1:05 PM, Alan DeKok <aland@deployingradius.com> wrote:
Khapare Joshi wrote:
okay, radutmp file is created, it seem that radutmp file relies on detail log file.
No. It depends on receiving accounting packets, like I said.
Please don't mislead people.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Khapare Joshi