Hi there, The radutmp file is still empty. The radwho command does not return any user... The radlast command is empty... I don't use MySQL. Here is the configuration I use for radutmp : /etc/freeradius/3.0/sites-available/default authorize { ... files ... accounting { ... radutmp ... session { ... radutmp ... I use NTRadPing to perform tests, the Radius server accepts my Authentication request without error... How to activate the logs ? Thanks
On Oct 4, 2022, at 4:43 AM, Sébastien 65 <sebastien-65@live.fr> wrote:
The radutmp file is still empty. The radwho command does not return any user... The radlast command is empty...
Is the server receiving accounting packets? Have you tried running the server in debug mode, as suggested in all of the documentation?
I use NTRadPing to perform tests, the Radius server accepts my Authentication request without error...
Authentication is not accounting.
How to activate the logs ?
Configure the NAS to send accounting packets. Read the FreeRADIUS debug output to verify that the NAS is sending accounting packets. Alan DeKok.
Alan,
Is the server receiving accounting packets? With NTRadPing and the port 1813, the type of request "Accounting Start" I get this:
(3) radutmp: WARNING: No NAS-Port seen. Cannot do anything. Checkrad will probably not work!
Configure the NAS to send accounting packets. I just don't know how to do that...
On Oct 4, 2022, at 10:00 AM, Sébastien 65 <sebastien-65@live.fr> wrote:
Is the server receiving accounting packets? With NTRadPing and the port 1813, the type of request "Accounting Start" I get this:
(3) radutmp: WARNING: No NAS-Port seen. Cannot do anything. Checkrad will probably not work!
Yes... the accounting packets have to contain information. You can't send empty packets.
Configure the NAS to send accounting packets. I just don't know how to do that...
The NAS has documentation. Read it. The FreeRADIUS project does not document NAS configurations. There are just too many NAS vendors. Alan DeKok.
Hello Alan, I am using a Cisco router with the following configuration : aaa new-model ! aaa group server radius radius-grp server-private 10.0.1.100 auth-port 1812 acct-port 1813 key 7 XXXXXXX ip radius source-interface GigabitEthernet0/0/1 ! aaa authentication ppp ppp-auth group radius-grp aaa authorization network network-radius group radius-grp aaa accounting delay-start aaa accounting update newinfo aaa accounting network ppp-auth start-stop group radius-grp ! On the radius server (10.0.1.100) the radwho command is always empty... What is my mistake ? Thank you for your help. ________________________________ De : Freeradius-Users <freeradius-users-bounces+sebastien-65=live.fr@lists.freeradius.org> de la part de Alan DeKok <aland@deployingradius.com> Envoyé : mardi 4 octobre 2022 16:02 À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Objet : Re: Radutmp is empty On Oct 4, 2022, at 10:00 AM, Sébastien 65 <sebastien-65@live.fr> wrote:
Is the server receiving accounting packets? With NTRadPing and the port 1813, the type of request "Accounting Start" I get this:
(3) radutmp: WARNING: No NAS-Port seen. Cannot do anything. Checkrad will probably not work!
Yes... the accounting packets have to contain information. You can't send empty packets.
Configure the NAS to send accounting packets. I just don't know how to do that...
The NAS has documentation. Read it. The FreeRADIUS project does not document NAS configurations. There are just too many NAS vendors. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Nov 16, 2022, at 4:56 AM, Sébastien 65 <sebastien-65@live.fr> wrote:
I am using a Cisco router with the following configuration :
That's nice, but we're not going to help debug Cisco configuration. Cisco has support programs for that.
On the radius server (10.0.1.100) the radwho command is always empty...
If only there was some kind of debug output which let you see what the server was receiving.
What is my mistake ?
Right now, your approach is "I tried a bunch of stuff, some things happened, and the result wasn't what I wanted". OK... WHAT did you try? WHAT happened? WHY did that happen? You need to take a slow and methodical approach to understanding what's going on, and understanding how RADIUS works. Look at each piece in isolation, and test it. Nothing else will help you understand and fix the problem. Alan DeKok.
participants (2)
-
Alan DeKok -
Sébastien 65