Hey, I'm trying to set up freeradius with our ISP's APN (mobile network) service. I've been using freeradius for sometime,and it works no problems. I'm using the system authentication module, and again,no problems here. My problem occurs when I want to use the 'dhcp' or ippool module. Here's my error; ----------------------------------------------------------------------------------- radiusd -x Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Module: Loaded exec rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP Module: Instantiated mschap (mschap) Module: Loaded System Module: Instantiated unix (unix) Module: Loaded eap rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap rlm_eap: Loaded and initialized type gtc rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess Module: Instantiated preprocess (preprocess) Module: Loaded realm Module: Instantiated realm (suffix) Module: Loaded files Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id Module: Instantiated acct_unique (acct_unique) Module: Loaded detail Module: Instantiated detail (detail) Module: Loaded radutmp Module: Instantiated radutmp (radutmp) Module: Loaded IPPOOL Module: Instantiated ippool (mobile) Initializing the thread pool... Listening on authentication *:1645 Listening on accounting *:1646 Listening on authentication *:1812 Ready to process requests. rad_recv: Access-Request packet from host 172.20.0.1:1812, id=122, length=122 NAS-Identifier = "ggsn3" User-Name = "mobile" User-Password = "xxxxxxxxx" NAS-IP-Address = 172.20.0.1 NAS-Port-Type = Virtual Called-Station-Id = "mdaxxxx" Calling-Station-Id = "474000xxxx" Acct-Session-Id = "d4118d7924abecce" Acct-Multi-Session-Id = "d4118d7900003472" Login OK: [mobile/Bama4ever] (from client ggsn3 port 0 cli 4740008077) rlm_ippool: Could not find Pool-Name attribute. Sending Access-Accept of id 122 to 172.20.0.1 port 1812 -------------------------------------------------------------------------------------- Now as you can see I get the error saying: rlm_ippool: Could not find Pool-Name attribute. Which I can't understand, since it is defined; radiusd.conf: --------------------------------------------------------------------------------------- ippool mobile { name = mobile range-start = 172.20.0.2 range-stop = 172.20.7.250 netmask = 255.255.248.0 cache-size = 800 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex override = no maximum-timeout = 0 #key = "172.20.0.1:1813" } ---------------------------------------------------------------------------------------------- And also in the users file: ----------------------------------------------------------------------------------------------- mobile Auth-Type = System, Pool-Name = mobile Service-Type == Login-User, Framed-Protocol = PPP, Fall-Through = Yes ------------------------------------------------------------------------------------------------ What am I doing wrong? Please advice.. best, Frank James Wilson
Pool-Name := Ivan Kalik Kalik Informatika ISP Dana 17/6/2008, "Frank James Wilson" <frank@xfactor.no> piše:
Hey,
I'm trying to set up freeradius with our ISP's APN (mobile network) service. I've been using freeradius for sometime,and it works no problems.
I'm using the system authentication module, and again,no problems here.
My problem occurs when I want to use the 'dhcp' or ippool module.
Here's my error; ----------------------------------------------------------------------------------- radiusd -x Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Module: Loaded exec rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP Module: Instantiated mschap (mschap) Module: Loaded System Module: Instantiated unix (unix) Module: Loaded eap rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap rlm_eap: Loaded and initialized type gtc rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess Module: Instantiated preprocess (preprocess) Module: Loaded realm Module: Instantiated realm (suffix) Module: Loaded files Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id Module: Instantiated acct_unique (acct_unique) Module: Loaded detail Module: Instantiated detail (detail) Module: Loaded radutmp Module: Instantiated radutmp (radutmp) Module: Loaded IPPOOL Module: Instantiated ippool (mobile) Initializing the thread pool... Listening on authentication *:1645 Listening on accounting *:1646 Listening on authentication *:1812 Ready to process requests. rad_recv: Access-Request packet from host 172.20.0.1:1812, id=122, length=122 NAS-Identifier = "ggsn3" User-Name = "mobile" User-Password = "xxxxxxxxx" NAS-IP-Address = 172.20.0.1 NAS-Port-Type = Virtual Called-Station-Id = "mdaxxxx" Calling-Station-Id = "474000xxxx" Acct-Session-Id = "d4118d7924abecce" Acct-Multi-Session-Id = "d4118d7900003472" Login OK: [mobile/Bama4ever] (from client ggsn3 port 0 cli 4740008077) rlm_ippool: Could not find Pool-Name attribute. Sending Access-Accept of id 122 to 172.20.0.1 port 1812 -------------------------------------------------------------------------------------- Now as you can see I get the error saying:
rlm_ippool: Could not find Pool-Name attribute.
Which I can't understand, since it is defined;
radiusd.conf: --------------------------------------------------------------------------------------- ippool mobile {
name = mobile range-start = 172.20.0.2 range-stop = 172.20.7.250
netmask = 255.255.248.0
cache-size = 800
session-db = ${raddbdir}/db.ippool
ip-index = ${raddbdir}/db.ipindex
override = no
maximum-timeout = 0
#key = "172.20.0.1:1813" } ----------------------------------------------------------------------------------------------
And also in the users file:
----------------------------------------------------------------------------------------------- mobile Auth-Type = System, Pool-Name = mobile Service-Type == Login-User, Framed-Protocol = PPP, Fall-Through = Yes ------------------------------------------------------------------------------------------------
What am I doing wrong?
Please advice..
best,
Frank James Wilson
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ivan Kalik skrev:
Pool-Name :=
Ivan Kalik Kalik Informatika ISP
Dana 17/6/2008, "Frank James Wilson" <frank@xfactor.no> piše:
No, I've tried that as well, if you mean by that; ----------------------------------------------------------------------------------------------
And also in the users file:
----------------------------------------------------------------------------------------------- mobile Auth-Type = System, Pool-Name := mobile Service-Type == Login-User, Framed-Protocol = PPP, Fall-Through = Yes ------------------------------------------------------------------------------------------------
Best, Frank
Then post the whole debug (radiusd -X). Ivan Kalik Kalik Informatika ISP Dana 18/6/2008, "Frank James Wilson" <frank@xfactor.no> piše:
Ivan Kalik skrev:
Pool-Name :=
Ivan Kalik Kalik Informatika ISP
Dana 17/6/2008, "Frank James Wilson" <frank@xfactor.no> piše:
No, I've tried that as well, if you mean by that;
----------------------------------------------------------------------------------------------
And also in the users file:
----------------------------------------------------------------------------------------------- mobile Auth-Type = System, Pool-Name := mobile Service-Type == Login-User, Framed-Protocol = PPP, Fall-Through = Yes ------------------------------------------------------------------------------------------------
Best,
Frank
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ivan Kalik skrev:
Then post the whole debug (radiusd -X).
Sure.. here it comes; radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/lib/freeradius/" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 1645 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = yes main: log_auth_goodpass = yes main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms listen: port = 1812 listen: type = "auth" radiusd: entering modules setup Module: Library search path is /usr/lib/freeradius Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded System unix: cache = no unix: passwd = "/etc/passwd" unix: shadow = "/etc/shadow" unix: group = "/etc/group" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = yes preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/usr/local/etc/raddb/users" files: acctusersfile = "/usr/local/etc/raddb/acct_users" files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Module: Loaded IPPOOL ippool: session-db = "/usr/local/etc/raddb/db.ippool" ippool: ip-index = "/usr/local/etc/raddb/db.ipindex" ippool: range-start = 172.20.0.2 IP address [172.20.0.2] ippool: range-stop = 172.20.7.250 IP address [172.20.7.250] ippool: netmask = 255.255.248.0 IP address [255.255.248.0] ippool: cache-size = 800 ippool: override = yes ippool: maximum-timeout = 0 Module: Instantiated ippool (mobile) Listening on authentication *:1645 Listening on accounting *:1646 Listening on authentication *:1812 Ready to process requests. rad_recv: Access-Request packet from host 172.20.0.1:1812, id=222, length=122 NAS-Identifier = "ggsn3" User-Name = "mobile" User-Password = "xxxxxxxx" NAS-IP-Address = 172.20.0.1 NAS-Port-Type = Virtual Called-Station-Id = "mdabama" Calling-Station-Id = "474000xxxx" Acct-Session-Id = "d4118d7924b067f1" Acct-Multi-Session-Id = "d4118d79000143ff" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 rlm_realm: No '@' in User-Name = "mobile", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 users: Matched entry DEFAULT at line 153 users: Matched entry mobile at line 217 modcall[authorize]: module "files" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type System auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 modcall[authenticate]: module "unix" returns ok for request 0 modcall: leaving group authenticate (returns ok) for request 0 Login OK: [mobile/Bama4ever] (from client ggsn3 port 0 cli 474000xxxx) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 0 rlm_ippool: Could not find Pool-Name attribute. modcall[post-auth]: module "mobile" returns noop for request 0 modcall: leaving group post-auth (returns noop) for request 0 Sending Access-Accept of id 222 to 172.20.0.1 port 1812 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds...
Try removing Auth-Type System from user entry: mobile Pool-Name:="mobile" What version is this? Ivan Kalik Kalik Informatika ISP Dana 18/6/2008, "Frank James Wilson" <frank@xfactor.no> piše:
Ivan Kalik skrev:
users: Matched entry DEFAULT at line 153 users: Matched entry mobile at line 217
Line 153 of users:
L 153: DEFAULT Auth-Type = System L 154: Fall-Through = 1
Line 217 of users:
L 217: mobile Auth-Type = System, Pool-Name := "mobile" L 218: Fall-Through = Yes
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ivan Kalik skrev:
Try removing Auth-Type System from user entry:
mobile Pool-Name:="mobile"
What version is this?
Removed that from the users file at line 217, and still nothing. It's version: 1.1.3 --- Walking the entire request list --- Cleaning up request 0 ID 115 with timestamp 485a02e4 Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 172.20.0.1:1812, id=53, length=122 NAS-Identifier = "ggsn3" User-Name = "mobile" User-Password = "Bamaxxxxx" NAS-IP-Address = 172.20.0.1 NAS-Port-Type = Virtual Called-Station-Id = "mdabama" Calling-Station-Id = "4791171382" Acct-Session-Id = "d4118d7924b1f42f" Acct-Multi-Session-Id = "d4118d790000d4e2" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 rlm_realm: No '@' in User-Name = "mobile", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 users: Matched entry DEFAULT at line 153 users: Matched entry mobile at line 217 modcall[authorize]: module "files" returns ok for request 1 modcall: leaving group authorize (returns ok) for request 1 rad_check_password: Found Auth-Type System auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 modcall[authenticate]: module "unix" returns ok for request 1 modcall: leaving group authenticate (returns ok) for request 1 Login OK: [mobile/xxxxxx] (from client ggsn3 port 0 cli 479117xxxxx) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 1 rlm_ippool: Could not find Pool-Name attribute. modcall[post-auth]: module "mobile" returns noop for request 1 modcall: leaving group post-auth (returns noop) for request 1 Sending Access-Accept of id 53 to 172.20.0.1 port 1812 Finished request 1 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 1 ID 53 with timestamp 485a02f9 Nothing to do. Sleeping until we see a request. Frank
Ivan Kalik skrev:
Try removing Auth-Type System from user entry:
mobile Pool-Name:="mobile"
What version is this?
I'm almost ashamed to say it, but I just downloaded and compiled version 2.0.5 and presto; Listening on authentication address * port 1812 Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 172.20.0.1 port 1812, id=210, length=122 NAS-Identifier = "ggsn3" User-Name = "mobile" User-Password = "Bamaxxxx" NAS-IP-Address = 172.20.0.1 NAS-Port-Type = Virtual Called-Station-Id = "mdaxxxx" Calling-Station-Id = "4740008077" Acct-Session-Id = "d4118d7924b2077e" Acct-Multi-Session-Id = "d4118d79000010d9" +- entering group authorize ++[preprocess] returns ok rlm_realm: No '@' in User-Name = "mobile", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop users: Matched entry DEFAULT at line 153 users: Matched entry mobile at line 217 ++[files] returns ok rad_check_password: Found Auth-Type System auth: type "System" +- entering group authenticate ++[unix] returns ok Login OK: [mobile/Bamaxxxx] (from client ggsn3 port 0 cli 4740008077) +- entering group post-auth expand: 172.20.0.1:1813 -> 172.20.0.1:1813 rlm_ippool: MD5 on 'key' directive maps to: 038a19de87e4edea9bfd9120f3c162ee rlm_ippool: Searching for an entry for key: '038a19de87e4edea9bfd9120f3c162ee' rlm_ippool: Allocating ip to key: '038a19de87e4edea9bfd9120f3c162ee' rlm_ippool: num: 1 rlm_ippool: Allocated ip 172.20.4.240 to client key: 038a19de87e4edea9bfd9120f3c162ee ++[mobile] returns ok Sending Access-Accept of id 210 to 172.20.0.1 port 1812 Framed-IP-Address = 172.20.4.240 Framed-IP-Netmask = 255.255.248.0 Finished request 0. Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 210 with timestamp +20 Ready to process requests.
Ivan Kalik skrev:
Try removing Auth-Type System from user entry:
mobile Pool-Name:="mobile"
What version is this?
Just wanted to extend my many thanks Ivan for making me realize that I was infact running an old version with new config files. Not sure how it happend, but I've just completed a series of tests and the system now works flawless. Many thanks! best, Frank James Wilson
participants (2)
-
Frank James Wilson -
Ivan Kalik