hi, I installed FreeRADIUS Version 2.1.7 from the RPM package that is included with Fedora core 12. The server starts without errors and authentication is working fine. The problem I am having is with the radwatch displays no output and radtest fails. output of the radtest --------------------- [root@dia ~]# radtest rsa hello localhost 1812 testing123 Sending Access-Request of id 42 to ::1 port 1812 User-Name = "rsa" User-Password = "hello" NAS-IP-Address = 127.0.0.1 NAS-Port = 1812 Sending Access-Request of id 42 to ::1 port 1812 User-Name = "rsa" User-Password = "hello" NAS-IP-Address = 127.0.0.1 NAS-Port = 1812 Sending Access-Request of id 42 to ::1 port 1812 User-Name = "rsa" User-Password = "hello" NAS-IP-Address = 127.0.0.1 NAS-Port = 1812 radclient: no response from server for ID 42 socket 3 [root@dia ~]# output of radwho ----------------- [root@dia raddb]# radwho Login Name What TTY When From Location [root@dia raddb]# [root@dia ~]# radwatch A radiusd process already exists [root@dia ~]# I have also attached the output of radiusd -X any help would be greatly appreciated _________________________________________________________________ Windows Live Hotmail: Your friends can get your Facebook updates, right from Hotmail®. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/soc...
ihi, accoridng to your output, it looks like localhost is mapping to ::1 which is the local box IPv6 address (like 127.0.0.1 is in IPv4 world) by default, FreeRADIUS wont be listing to IPv6 interface...if you configure it so that it is then this will work - otherwise change you command to eg radtest rsa hello 127.0.0.1 1812 testing123 or change your hosts file so that localhost maps to 127.0.0.1 first! alan
thank you alan for the quick reply. It worked just fine. Now I am still facing the problem with the radwho and radlast. Any idea Regards, Ramzi
Date: Wed, 9 Dec 2009 20:00:29 +0000 From: A.L.M.Buxey@lboro.ac.uk To: rabdallah@pobox.com; freeradius-users@lists.freeradius.org Subject: Re: radwho and radtest
ihi,
accoridng to your output, it looks like localhost is mapping to ::1
which is the local box IPv6 address (like 127.0.0.1 is in IPv4 world)
by default, FreeRADIUS wont be listing to IPv6 interface...if you configure it so that it is then this will work -
otherwise change you command to eg
radtest rsa hello 127.0.0.1 1812 testing123
or change your hosts file so that localhost maps to 127.0.0.1 first!
alan
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Keep your friends updated—even when you’re not signed in. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/soc...
thank you alan for the quick reply. It worked just fine. Now I am still facing the problem with the radwho and radlast. Any idea
Yes, you have sent an authentication request. No accounting. So there is nothing for radwho to show. It displays accounting information. In case you weren't aware, radius server doesn't generate accounting information. Ivan Kalik
thanks Ivan, when I run in debug mode I get the bellow errors ++[preprocess] returns ok [acct_unique] WARNING: Attribute NAS-Port was not found in request, unique ID MAY be inconsistent [acct_unique] Hashing ',Client-IP-Address = 193.188.129.17,NAS-IP-Address = 193.188.129.17,Acct-Session-Id = "00550003",User-Name = "rsa"' [acct_unique] Acct-Unique-Session-ID = "cc3ac6adce99a1dd". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "rsa", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop ++[files] returns noop [radutmp] expand: /var/log/radius/radutmp -> /var/log/radius/radutmp [radutmp] expand: %{User-Name} -> rsa rlm_radutmp: No NAS-Port seen. Cannot do anything. rlm_radumtp: WARNING: checkrad will probably not work! ++[radutmp] returns noop
Date: Wed, 9 Dec 2009 21:32:55 +0000 Subject: RE: radwho and radtest From: tnt@kalik.net To: rabdallah@pobox.com; freeradius-users@lists.freeradius.org
thank you alan for the quick reply. It worked just fine. Now I am still facing the problem with the radwho and radlast. Any idea
Yes, you have sent an authentication request. No accounting. So there is nothing for radwho to show. It displays accounting information. In case you weren't aware, radius server doesn't generate accounting information.
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Windows Live: Keep your friends up to date with what you do online. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/soc...
great, then I have to contact the fortinet guys to see why this is happening
Date: Wed, 9 Dec 2009 22:08:56 +0000 Subject: RE: radwho and radtest From: tnt@kalik.net To: rabdallah@pobox.com; freeradius-users@lists.freeradius.org
[acct_unique] WARNING: Attribute NAS-Port was not found in request, unique ID MAY be inconsistent ... rlm_radutmp: No NAS-Port seen. Cannot do anything.
Nothing misterious in those messages. NAS is not sending NAS-Port and radutmp needs it to work.
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Windows Live: Keep your friends up to date with what you do online. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/soc...
participants (3)
-
Alan Buxey -
Ramzi Abdallah -
tnt＠kalik.net