Dear All, I have issue with configure radius. I have one Juniper MX80 for doing as LNS in my lab and FreeRADIUS Version 2.1.12 installed. I can see there is successful connected log to radius but after around 1mn it connect again and again. I have check in MX80 but has no any significant log. Below is the full log in debug mode of radius during connect. Please advice rad_recv: Access-Request packet from host 22.0.0.77 port 51280, id=32, length=237 User-Name = "testuser@intel.com" Service-Type = Framed-User CHAP-Password = 0x6424072271437b7df6f638bd05496fe856 CHAP-Challenge = 0xcf44cbf713aedaac40824ffc535532d96e7b109b025cb2a3b0 Chargeable-User-Identity = "" Acct-Session-Id = "491" ERX-Dhcp-Mac-Addr = "0000.0000.0000" NAS-Identifier = "MX80-LAB-LNS" NAS-Port = 4095 NAS-Port-Id = "Ip:192.168.77.1:192 .168.77.2:55776:38107:10971:4534:2765160448" NAS-Port-Type = Virtual ERX-Attr-162 = 0x05f5e1 ERX-Attr-163 = 0x05f5e1 NAS-IP-Address = 22.0.0.77 # Executing section authorize from file /etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok [chap] Setting 'Auth-Type := CHAP' ++[chap] returns ok ++[mschap] returns noop ++[digest] returns noop [suffix] Looking up realm "eintel.com" for User-Name = "testuser@intel.com" [suffix] No such realm "eintel.com" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[files] returns noop [sql] expand: %{User-Name} -> testuser@intel.com [sql] sql_set_user escaped user --> 'testuser@intel.com' rlm_sql (sql): Reserving sql socket id: 4 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'testuser@intel.com' ORDER BY id [sql] User found in radcheck table [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'testuser@intel.com' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = ' testuser@intel.com' ORDER BY priority rlm_sql (sql): Released sql socket id: 4 ++[sql] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING: Auth-Type already set. Not setting to PAP ++[pap] returns noop Found Auth-Type = CHAP # Executing group from file /etc/raddb/sites-enabled/default +- entering group CHAP {...} [chap] login attempt by "testuser@intel.com" with CHAP password [chap] Using clear text password "saba" for user testuser@intel.comauthentication. [chap] chap user testuser@intel.com authenticated succesfully ++[chap] returns ok # Executing section post-auth from file /etc/raddb/sites-enabled/default +- entering group post-auth {...} [sql] expand: %{User-Name} -> testuser@intel.com [sql] sql_set_user escaped user --> 'testuser@intel.com' [sql] expand: %{User-Password} -> [sql] ... expanding second conditional [sql] expand: %{Chap-Password} -> 0x6424072271437b7df6f638bd05496fe856 [sql] expand: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') -> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( ' testuser@intel.com', '0x6424072271437b7df6f638bd05496fe856', 'Access-Accept', '2013-08-22 15:51:05') rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( ' testuser@intel.com', '0x6424072271437b7df6f638bd05496fe856', 'Access-Accept', '2013-08-22 15:51:05') rlm_sql (sql): Reserving sql socket id: 3 rlm_sql (sql): Released sql socket id: 3 ++[sql] returns ok ++[exec] returns noop Sending Access-Accept of id 32 to 22.0.0.77 port 51280 Framed-IP-Address = 10.1.1.123 Finished request 2. Going to the next request Waking up in 4.9 seconds. Cleaning up request 2 ID 32 with timestamp +177 Ready to process requests. Regards, SP
Sokphak TOUCH wrote:
I have issue with configure radius. I have one Juniper MX80 for doing as LNS in my lab and FreeRADIUS Version 2.1.12 installed. I can see there is successful connected log to radius but after around 1mn it connect again and again. I have check in MX80 but has no any significant log. Below is the full log in debug mode of radius during connect. Please advice
Read your NAS documentation. The NAS is hanging up the connection, not FreeRADIUS. You may need to add a Session-Timeout attribute to the reply. Again, read your NAS documentation to see which attributes it needs in the Access-Accept. Alan DeKok.
participants (2)
-
Alan DeKok -
Sokphak TOUCH