FreeRadius 2.0.5... canŽt make it work
Hello world ! I try to set up a new FR-server (v2.0.5). I lost 4 days until now and it still does not work. It just generates amounts of output without accepting anything: terminal 1 : radiusd -X gives me : FreeRADIUS Version 2.0.5, for host i686-pc-linux-gnu, built on Oct 9 2008 at 16:13:43 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /etc/raddb/radiusd.conf including configuration file /etc/raddb/proxy.conf including configuration file /etc/raddb/snmp.conf including files in directory /etc/raddb/modules/ including configuration file /etc/raddb/modules/passwd including configuration file /etc/raddb/modules/attr_filter including configuration file /etc/raddb/modules/detail.log including configuration file /etc/raddb/modules/etc_group including configuration file /etc/raddb/modules/policy including configuration file /etc/raddb/modules/ippool including configuration file /etc/raddb/modules/smbpasswd including configuration file /etc/raddb/modules/logintime including configuration file /etc/raddb/modules/mac2ip including configuration file /etc/raddb/modules/attr_rewrite including configuration file /etc/raddb/modules/sradutmp including configuration file /etc/raddb/modules/expr including configuration file /etc/raddb/modules/mac2vlan including configuration file /etc/raddb/modules/sql_log including configuration file /etc/raddb/modules/preprocess including configuration file /etc/raddb/modules/ldap including configuration file /etc/raddb/modules/always including configuration file /etc/raddb/modules/expiration including configuration file /etc/raddb/modules/pam including configuration file /etc/raddb/modules/files including configuration file /etc/raddb/modules/checkval including configuration file /etc/raddb/modules/digest including configuration file /etc/raddb/modules/exec including configuration file /etc/raddb/modules/realm including configuration file /etc/raddb/modules/radutmp including configuration file /etc/raddb/modules/echo including configuration file /etc/raddb/modules/mschap including configuration file /etc/raddb/modules/chap including configuration file /etc/raddb/modules/krb5 including configuration file /etc/raddb/modules/counter including configuration file /etc/raddb/modules/pap including configuration file /etc/raddb/modules/acct_unique including configuration file /etc/raddb/modules/unix including configuration file /etc/raddb/modules/detail including configuration file /etc/raddb/eap.conf including configuration file /etc/raddb/sql.conf including configuration file /etc/raddb/sql/mysql/dialup.conf including configuration file /etc/raddb/sql/mysql/counter.conf including configuration file /etc/raddb/policy.conf including dictionary file /etc/raddb/dictionary main { prefix = "/usr" localstatedir = "/var" logdir = "/var/log/radius" libdir = "/usr/lib/freeradius" radacctdir = "/var/log/radius/radacct" hostname_lookups = yes max_request_time = 30 cleanup_delay = 5 max_requests = 1024 allow_core_dumps = no pidfile = "/var/run/radiusd/radiusd.pid" checkrad = "/usr/sbin/checkrad" debug_level = 0 proxy_requests = no log { stripped_names = yes auth = yes auth_badpass = yes auth_goodpass = yes } } radiusd: #### Loading Realms and Home Servers #### radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server { modules { } } radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 1812 } listen { type = "acct" ipaddr = * port = 0 } main { snmp = no smux_password = "" snmp_write_access = no } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Ready to process requests. terminal 2 : radtest test test localhost 0 test Sending Access-Request of id 178 to 127.0.0.1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.2 NAS-Port = 0 Sending Access-Request of id 178 to 127.0.0.1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.2 NAS-Port = 0 Sending Access-Request of id 178 to 127.0.0.1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.2 NAS-Port = 0 Sending Access-Request of id 178 to 127.0.0.1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.2 NAS-Port = 0 Sending Access-Request of id 178 to 127.0.0.1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.2 NAS-Port = 0 Sending Access-Request of id 178 to 127.0.0.1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.2 NAS-Port = 0 Sending Access-Request of id 178 to 127.0.0.1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.2 NAS-Port = 0 Sending Access-Request of id 178 to 127.0.0.1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.2 NAS-Port = 0 Sending Access-Request of id 178 to 127.0.0.1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.2 NAS-Port = 0 Sending Access-Request of id 178 to 127.0.0.1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.2 NAS-Port = 0 radclient: no response from server for ID 178 socket 3 Parallel on terminal 1 : Ignoring request to authentication address * port 1812 from unknown client 127.0.0.1 port 59802 Ready to process requests. Ignoring request to authentication address * port 1812 from unknown client 127.0.0.1 port 59802 Ready to process requests. ... ... but 127.0.0.1 is not unknown sql.conf : readclients = yes clients.conf : completely commented out mysql> select * from nas order by id desc limit 1; +----+-----------+-----------+--------+-------+--------+-----------+-------------+ | id | nasname | shortname | type | ports | secret | community | description | +----+-----------+-----------+--------+-------+--------+-----------+-------------+ | 56 | 127.0.0.1 | localhost | MikTik | NULL | test | NULL | NULL | +----+-----------+-----------+--------+-------+--------+-----------+-------------+ 1 row in set (0.00 sec) What do I do wrong ? This thing does not care what I configure, it always does the same, nothing. I have sqltrace = yes, but after days of trying there is no sqltrace.sql on the server (yes I made updatedb) there is nearly nothing in the log, but I configured it to log everything (good-auth, bad-auth, etc) All this worked best with FR 1.x.x. Please help thx _______________________________________________________________________ Aufgepasst: Sind Ihre Daten beim Online-Banking auch optimal geschützt? Jetzt absichern: https://homebanking.web.de/?mc=mail@footer.hb
hi, the magic stuff is here: Listening on authentication address * port 1812 Listening on accounting address * port 1813 Ready to process requests. there you go! its ready and listening. but wait! when you test with radtest you see nothing in that debug output? what can that mean? well, the 2 main suspects are 'selinux' 'iptables' please check both of them - and if necessary turn them off to see if they are to blame. if so, you need to configure them alan
terminal 1 : radiusd -X gives me :
..
radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } .. ... but 127.0.0.1 is not unknown
Yes, it is unknown.
sql.conf : readclients = yes clients.conf : completely commented out
As are many other things. sql among them.
mysql> select * from nas order by id desc limit 1; +----+-----------+-----------+--------+-------+--------+-----------+-------------+ | id | nasname | shortname | type | ports | secret | community | description | +----+-----------+-----------+--------+-------+--------+-----------+-------------+ | 56 | 127.0.0.1 | localhost | MikTik | NULL | test | NULL | NULL | +----+-----------+-----------+--------+-------+--------+-----------+-------------+ 1 row in set (0.00 sec)
What do I do wrong ?
You haven't listed sql anywhere. So, the server is not reading nas table. Even if it did read it - you haven't got any authentication modules enabled. Go back to default configuration, add sql in instantiate in radiusd.conf - and watch it work. Then make *small* changes to configuration files. When you break something you will know what you have done. Butchering configuration blindly like this can end only one way - failure. Ivan Kalik Kalik Informatika ISP
participants (3)
-
A.L.M.Buxey@lboro.ac.uk -
Jan Strauch -
tnt@kalik.net