SNMP apparently not working with FreeRadius 1.0.1 and above on Centos 4.2

klkbranch at hotmail.com klkbranch at hotmail.com
Wed Jan 25 17:50:11 CET 2006


Hi,

I am new to this list, though I've been using FreeRadius 0.9.3 for a few
years now.  My present
goal is to get a newer version of FreeRadius (running on Centos 4.2) to
work with snmp. 
Though I have carefully followed the snmp setup instructions as
documented in radiusd.conf and
snmp.conf, I have yet to get radiusd to attempt SMUX initialization
(from output of radiusd -X).
Net-snmp is already working (stock Centos rpm net-snmp-5.1.2-11.EL4.6). 
I have tried
the stock Centos freeradius rpm (freeradius-1.0.1-3.RHEL4.i386.rpm).  I
have also tried
tarball installs of freeradius 1.0.1, 1.0.2, 1.0.5, and 1.1.0, with the
"--with-snmp" option, with
no success.  Nothing results in any SMUX-related output from radiusd -X.

After reading this thread,
  
http://lists.freeradius.org/mailman/htdig/freeradius-users/2005-April/042864.html
it appeared I needed some kind of patch.

Near the end of that thread, Kevin Bonner gave this solution:

You're using Net-SNMP in RHAS4.  FreeRADIUS 1.0.2 doesn't have the net-snmp
compatibility fix.  You can find the patch at
http://lists.freeradius.org/archives/freeradius-users/2004/10/frm00210.html
Apply that patch, rebuild, and it should work.

Unfortunately this  link is now broken.  However, after some more
digging it appeared Kevin was
probably referring to:
    freeradius-0.9.3-net-snmp.patch
which I was able to download from another source.

I was able to successfully apply this patch to FreeRadius 1.0.1, 1.0.2,
1.0.5, and 1.1.0, and the
subsequent compiles were successful, but still radiusd -X makes no
references to SMUX and
snmp queries for freeradius OIDs fail as before.  I'm at my wit's end
about what to try next, and
would sincerely appreciate any light you all might be able to shed on
this issue.

My /usr/local/etc/radiusd.conf file contains
    snmp    = yes
    $INCLUDE  ${confdir}/snmp.conf

My /usr/local/etc/snmp.conf file contains
    smux_password = verysecret

My /etc/snmp/snmpd.conf file contains
    rocommunity public
    smuxpeer .1.3.6.1.4.1.3317.1.3.1 verysecret

But every time I run this on the server
    snmpwalk -v2c -cpublic 127.0.0.1 .1.3.6.1.2.1.67
I get this result
    SNMPv2-SMI::mib-2.67 = No Such Object available on this agent at
this OID

Here is an example of the output I get from radiusd -X  (when using
1.0.5 in this case):

Starting - reading configuration files ...
reread_config:  reading radiusd.conf
Config:   including file: /usr/local/etc/raddb/proxy.conf
Config:   including file: /usr/local/etc/raddb/clients.conf
Config:   including file: /usr/local/etc/raddb/snmp.conf
Config:   including file: /usr/local/etc/raddb/eap.conf
Config:   including file: /usr/local/etc/raddb/sql.conf
 main: prefix = "/usr/local"
 main: localstatedir = "/usr/local/var"
 main: logdir = "/usr/local/var/log/radius"
 main: libdir = "/usr/local/lib"
 main: radacctdir = "/usr/local/var/log/radius/radacct"
 main: hostname_lookups = no
 main: max_request_time = 30
 main: cleanup_delay = 5
 main: max_requests = 1024
 main: delete_blocked_requests = 0
 main: port = 0
 main: allow_core_dumps = no
 main: log_stripped_names = no
 main: log_file = "/usr/local/var/log/radius/radius.log"
 main: log_auth = no
 main: log_auth_badpass = no
 main: log_auth_goodpass = no
 main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid"
 main: user = "(null)"
 main: group = "(null)"
 main: usercollide = no
 main: lower_user = "no"
 main: lower_pass = "no"
 main: nospace_user = "no"
 main: nospace_pass = "no"
 main: checkrad = "/usr/local/sbin/checkrad"
 main: proxy_requests = yes
 proxy: retry_delay = 5
 proxy: retry_count = 3
 proxy: synchronous = no
 proxy: default_fallback = yes
 proxy: dead_time = 120
 proxy: post_proxy_authorize = yes
 proxy: wake_all_if_all_dead = no
 security: max_attributes = 200
 security: reject_delay = 1
 security: status_server = no
 main: debug_level = 0
read_config_files:  reading dictionary
read_config_files:  reading naslist
Using deprecated naslist file.  Support for this will go away soon.
read_config_files:  reading clients
read_config_files:  reading realms
radiusd:  entering modules setup
Module: Library search path is /usr/local/lib
Module: Loaded exec
 exec: wait = yes
 exec: program = "(null)"
 exec: input_pairs = "request"
 exec: output_pairs = "(null)"
 exec: packet_type = "(null)"
rlm_exec: Wait=yes but no output defined. Did you mean output=none?
Module: Instantiated exec (exec)
Module: Loaded expr
Module: Instantiated expr (expr)
Module: Loaded PAP
 pap: encryption_scheme = "crypt"
Module: Instantiated pap (pap)
Module: Loaded CHAP
Module: Instantiated chap (chap)
Module: Loaded MS-CHAP
 mschap: use_mppe = yes
 mschap: require_encryption = no
 mschap: require_strong = no
 mschap: with_ntdomain_hack = no
 mschap: passwd = "(null)"
 mschap: authtype = "MS-CHAP"
 mschap: ntlm_auth = "(null)"
Module: Instantiated mschap (mschap)
Module: Loaded System
 unix: cache = no
 unix: passwd = "(null)"
 unix: shadow = "(null)"
 unix: group = "(null)"
 unix: radwtmp = "/usr/local/var/log/radius/radwtmp"
 unix: usegroup = no
 unix: cache_reload = 600
Module: Instantiated unix (unix)
Module: Loaded eap
 eap: default_eap_type = "md5"
 eap: timer_expire = 60
 eap: ignore_unknown_eap_types = no
 eap: cisco_accounting_username_bug = no
rlm_eap: Loaded and initialized type md5
rlm_eap: Loaded and initialized type leap
 gtc: challenge = "Password: "
 gtc: auth_type = "PAP"
rlm_eap: Loaded and initialized type gtc
 mschapv2: with_ntdomain_hack = no
rlm_eap: Loaded and initialized type mschapv2
Module: Instantiated eap (eap)
Module: Loaded preprocess
 preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups"
 preprocess: hints = "/usr/local/etc/raddb/hints"
 preprocess: with_ascend_hack = no
 preprocess: ascend_channels_per_line = 23
 preprocess: with_ntdomain_hack = no
 preprocess: with_specialix_jetstream_hack = no
 preprocess: with_cisco_vsa_hack = no
Module: Instantiated preprocess (preprocess)
Module: Loaded realm
 realm: format = "suffix"
 realm: delimiter = "@"
 realm: ignore_default = no
 realm: ignore_null = no
Module: Instantiated realm (suffix)
Module: Loaded files
 files: usersfile = "/usr/local/etc/raddb/users"
 files: acctusersfile = "/usr/local/etc/raddb/acct_users"
 files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users"
 files: compat = "no"
Module: Instantiated files (files)
Module: Loaded Acct-Unique-Session-Id
 acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address,
Client-IP-Address, NAS-Port"
Module: Instantiated acct_unique (acct_unique)
Module: Loaded detail
 detail: detailfile =
"/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"
 detail: detailperm = 384
 detail: dirperm = 493
 detail: locking = no
Module: Instantiated detail (detail)
Module: Loaded radutmp
 radutmp: filename = "/usr/local/var/log/radius/radutmp"
 radutmp: username = "%{User-Name}"
 radutmp: case_sensitive = yes
 radutmp: check_with_nas = yes
 radutmp: perm = 384
 radutmp: callerid = yes
Module: Instantiated radutmp (radutmp)
Listening on authentication *:1812
Listening on accounting *:1813
Ready to process requests.


Thanks in advace for your assistance,
Kevin Branch



More information about the Freeradius-Users mailing list