FreeRadius seems to be working, but not getting it to respond

Mon Nov 6 19:10:15 CET 2006

Does CENTOS have a built-in firewall?  (IPTABLES)  Does it have holes
(Rules, exceptions) poked in it so that the RADIUS packets get thru?

Ports 1812 and 1813.  I'm not sure if it's TCP or UDP, I always see them
referenced together, so I opened both. 

> -----Original Message-----
> From: 
> freeradius-users-bounces+mking=bridgew.edu at lists.freeradius.or
> g 
> [mailto:freeradius-users-bounces+mking=bridgew.edu at lists.freer
adius.org] On Behalf Of Michelle Manning
> Sent: Monday, November 06, 2006 11:12 AM
> To: FreeRadius users mailing list
> Subject: FreeRadius seems to be working, but not getting it 
> to respond 
> 
> Hi,
> I have been reading the list for a couple of days now and 
> maybe I have missed something - but here goes.
> My set up is the following - Linksys Router with DD-WRT 
> running on it. 
> It does work as it connects to a older version of Radius on 
> another server. The newer server is CENTOS with FreeRadius 
> 1.1.3 - I changed the config files and the information below 
> is from running Radius in debug mode. From what I can see it 
> should be happy. I have the DD-WRT pointing to the new server 
> - the hotspotlogin.cgi is in the correct place and configured 
> correctly. I also have PhpMyPrepaid on the server - and do 
> wonder if this is my problem - but I don't think so....
> 
> Any ideas? Is there something in this 'log' file that jumps 
> out at any of you?
> 
> And - the log file in /usr/local/var/log/radius has nothing 
> in it. I was hoping that that would give me some clues....
> 
> Please help.
> 
> Michelle
> 
> *************************************************************
> Starting - reading configuration files ...
> reread_config:  reading radiusd.conf
> Config:   including file: /usr/local/etc/raddb/proxy.conf
> Config:   including file: /usr/local/etc/raddb/clients.conf
> Config:   including file: /usr/local/etc/raddb/snmp.conf
> Config:   including file: /usr/local/etc/raddb/eap.conf
> Config:   including file: /usr/local/etc/raddb/sql.conf
>  main: prefix = "/usr/local"
>  main: localstatedir = "/usr/local/var"
>  main: logdir = "/usr/local/var/log/radius"
>  main: libdir = "/usr/local/lib"
>  main: radacctdir = "/usr/local/var/log/radius/radacct"
>  main: hostname_lookups = no
>  main: max_request_time = 30
>  main: cleanup_delay = 5
>  main: max_requests = 1024
>  main: delete_blocked_requests = 0
>  main: port = 0
>  main: allow_core_dumps = no
>  main: log_stripped_names = no
>  main: log_file = "/usr/local/var/log/radius/radius.log"
>  main: log_auth = no
>  main: log_auth_badpass = no
>  main: log_auth_goodpass = no
>  main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid"
>  main: user = "radiusd"
>  main: group = "radiusd"
>  main: usercollide = no
>  main: lower_user = "no"
>  main: lower_pass = "no"
>  main: nospace_user = "no"
>  main: nospace_pass = "no"
>  main: checkrad = "/usr/local/sbin/checkrad"
>  main: proxy_requests = yes
>  proxy: retry_delay = 5
>  proxy: retry_count = 3
>  proxy: synchronous = no
>  proxy: default_fallback = yes
>  proxy: dead_time = 120
>  proxy: post_proxy_authorize = yes
>  proxy: wake_all_if_all_dead = no
>  security: max_attributes = 200
>  security: reject_delay = 1
>  security: status_server = no
>  main: debug_level = 0
> read_config_files:  reading dictionary
> read_config_files:  reading naslist
> Using deprecated naslist file.  Support for this will go away soon.
> read_config_files:  reading clients
> read_config_files:  reading realms
> radiusd:  entering modules setup
> Module: Library search path is /usr/local/lib
> Module: Loaded exec
>  exec: wait = yes
>  exec: program = "(null)"
>  exec: input_pairs = "request"
>  exec: output_pairs = "(null)"
>  exec: packet_type = "(null)"
> rlm_exec: Wait=yes but no output defined. Did you mean output=none?
> Module: Instantiated exec (exec)
> Module: Loaded expr
> Module: Instantiated expr (expr)
> Module: Loaded PAP
>  pap: encryption_scheme = "crypt"
> Module: Instantiated pap (pap)
> Module: Loaded CHAP
> Module: Instantiated chap (chap)
> Module: Loaded MS-CHAP
>  mschap: use_mppe = yes
>  mschap: require_encryption = no
>  mschap: require_strong = no
>  mschap: with_ntdomain_hack = no
>  mschap: passwd = "(null)"
>  mschap: ntlm_auth = "(null)"
> Module: Instantiated mschap (mschap)
> Module: Loaded System
>  unix: cache = no
>  unix: passwd = "(null)"
>  unix: shadow = "/etc/shadow"
>  unix: group = "(null)"
>  unix: radwtmp = "/usr/local/var/log/radius/radwtmp"
>  unix: usegroup = no
>  unix: cache_reload = 600
> Module: Instantiated unix (unix)
> Module: Loaded eap
>  eap: default_eap_type = "md5"
>  eap: timer_expire = 60
>  eap: ignore_unknown_eap_types = no
>  eap: cisco_accounting_username_bug = no
> rlm_eap: Loaded and initialized type md5
> rlm_eap: Loaded and initialized type leap
>  gtc: challenge = "Password: "
>  gtc: auth_type = "PAP"
> rlm_eap: Loaded and initialized type gtc
>  mschapv2: with_ntdomain_hack = no
> rlm_eap: Loaded and initialized type mschapv2
> Module: Instantiated eap (eap)
> Module: Loaded preprocess
>  preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups"
>  preprocess: hints = "/usr/local/etc/raddb/hints"
>  preprocess: with_ascend_hack = no
>  preprocess: ascend_channels_per_line = 23
>  preprocess: with_ntdomain_hack = no
>  preprocess: with_specialix_jetstream_hack = no
>  preprocess: with_cisco_vsa_hack = no
>  preprocess: with_alvarion_vsa_hack = no
> Module: Instantiated preprocess (preprocess)
> Module: Loaded realm
>  realm: format = "suffix"
>  realm: delimiter = "@"
>  realm: ignore_default = no
>  realm: ignore_null = no
> Module: Instantiated realm (suffix)
> Module: Loaded SQL
>  sql: driver = "rlm_sql_mysql"
>  sql: server = "localhost"
>  sql: port = ""
>  sql: login = "root"
>  sql: password = ""
>  sql: radius_db = "radius"
>  sql: nas_table = "nas"
>  sql: sqltrace = yes
>  sql: sqltracefile = "/usr/local/var/log/radius/sqltrace.sql"
>  sql: readclients = yes
>  sql: deletestalesessions = yes
>  sql: num_sql_socks = 5
>  sql: sql_user_name = "%{User-Name}"
>  sql: default_user_profile = ""
>  sql: query_on_not_found = no
>  sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, 
> op           FROM radcheck           WHERE Username = 
> '%{SQL-User-Name}'           ORDER BY id"
>  sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, 
> op           FROM radreply           WHERE Username = 
> '%{SQL-User-Name}'           ORDER BY id"
>  sql: authorize_group_check_query = "SELECT 
> radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribu
> te,radgroupcheck.Value,radgroupcheck.op
> FROM radgroupcheck,usergroup WHERE usergroup.Username = 
> '%{SQL-User-Name}' AND usergroup.GroupName = 
> radgroupcheck.GroupName ORDER BY radgroupcheck.id"
>  sql: authorize_group_reply_query = "SELECT 
> radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribu
> te,radgroupreply.Value,radgroupreply.op
> FROM radgroupreply,usergroup WHERE usergroup.Username = 
> '%{SQL-User-Name}' AND usergroup.GroupName = 
> radgroupreply.GroupName ORDER BY radgroupreply.id"
>  sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S',
> AcctSessionTime=unix_timestamp('%S') - 
> unix_timestamp(AcctStartTime), 
> AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = 
> '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND 
> AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND 
> AcctStartTime <= '%S'"
>  sql: accounting_update_query = "UPDATE radacct           SET 
> FramedIPAddress = '%{Framed-IP-Address}',           AcctSessionTime = 
> '%{Acct-Session-Time}',           AcctInputOctets = 
> '%{Acct-Input-Octets}',           AcctOutputOctets = 
> '%{Acct-Output-Octets}'           WHERE AcctSessionId = 
> '%{Acct-Session-Id}'           AND UserName = 
> '%{SQL-User-Name}'           AND NASIPAddress= '%{NAS-IP-Address}'"
>  sql: accounting_update_query_alt = "INSERT into radacct 
> (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, 
> NASPortId, NASPortType, AcctStartTime, AcctSessionTime, 
> AcctAuthentic, ConnectInfo_start, AcctInputOctets, 
> AcctOutputOctets, CalledStationId, CallingStationId, 
> ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay) 
> values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', 
> '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', 
> '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S',INTERVAL 
> (%{Acct-Session-Time:-0} +
> %{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', 
> '%{Acct-Authentic}', '', '%{Acct-Input-Octets}', 
> '%{Acct-Output-Octets}', '%{Called-Station-Id}', 
> '%{Calling-Station-Id}', '%{Service-Type}', 
> '%{Framed-Protocol}', '%{Framed-IP-Address}', '0')"
>  sql: accounting_start_query = "INSERT into radacct 
> (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, 
> NASPortId, NASPortType, AcctStartTime, AcctStopTime, 
> AcctSessionTime, AcctAuthentic, ConnectInfo_start, 
> ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, 
> CalledStationId, CallingStationId, AcctTerminateCause, 
> ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, 
> AcctStopDelay) values('%{Acct-Session-Id}', 
> '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', 
> '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', 
> '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', 
> '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', 
> '%{Service-Type}', '%{Framed-Protocol}', 
> '%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0')"
>  sql: accounting_start_query_alt = "UPDATE radacct SET 
> AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', 
> ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = 
> '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND 
> NASIPAddress = '%{NAS-IP-Address}'"
>  sql: accounting_stop_query = "UPDATE radacct SET 
> AcctStopTime = '%S', AcctSessionTime = 
> '%{Acct-Session-Time}', AcctInputOctets = 
> '%{Acct-Input-Octets}', AcctOutputOctets = 
> '%{Acct-Output-Octets}', AcctTerminateCause = 
> '%{Acct-Terminate-Cause}', AcctStopDelay = 
> '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}' 
> WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = 
> '%{SQL-User-Name}' 
> AND NASIPAddress = '%{NAS-IP-Address}'"
>  sql: accounting_stop_query_alt = "INSERT into radacct 
> (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, 
> NASPortId, NASPortType, AcctStartTime, AcctStopTime, 
> AcctSessionTime, AcctAuthentic, ConnectInfo_start, 
> ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, 
> CalledStationId, CallingStationId, AcctTerminateCause, 
> ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, 
> AcctStopDelay) values('%{Acct-Session-Id}', 
> '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', 
> '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', 
> DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} +
> %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', 
> '%{Acct-Authentic}', '', '%{Connect-Info}', 
> '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', 
> '%{Called-Station-Id}', '%{Calling-Station-Id}', 
> '%{Acct-Terminate-Cause}', '%{Service-Type}', 
> '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', 
> '%{Acct-Delay-Time}')"
>  sql: group_membership_query = "SELECT GroupName FROM 
> usergroup WHERE UserName='%{SQL-User-Name}'"
>  sql: connect_failure_retry_delay = 60
>  sql: simul_count_query = "SELECT COUNT(*) FROM radacct WHERE 
> UserName='%{SQL-User-Name}' AND AcctStopTime = 0"
>  sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, 
> UserName, NASIPAddress, NASPortId, FramedIPAddress, 
> CallingStationId, FramedProtocol FROM radacct WHERE 
> UserName='%{SQL-User-Name}' AND AcctStopTime = 0"
>  sql: postauth_query = "INSERT into radpostauth (id, user, 
> pass, reply,
> date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}',
> '%{reply:Packet-Type}', NOW())"
>  sql: safe-characters =
> "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567
> 89.-_: /"
> rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) 
> loaded and linked rlm_sql (sql): Attempting to connect to 
> root at localhost:/radius rlm_sql (sql): starting 0 rlm_sql 
> (sql): Attempting to connect rlm_sql_mysql #0
> rlm_sql_mysql: Starting connect to MySQL server for #0 
> rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): 
> starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1
> rlm_sql_mysql: Starting connect to MySQL server for #1 
> rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): 
> starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2
> rlm_sql_mysql: Starting connect to MySQL server for #2 
> rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): 
> starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3
> rlm_sql_mysql: Starting connect to MySQL server for #3 
> rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): 
> starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4
> rlm_sql_mysql: Starting connect to MySQL server for #4 
> rlm_sql (sql): Connected new DB handle, #4 rlm_sql (sql): - 
> generate_sql_clients rlm_sql (sql): Query: SELECT * FROM nas 
> rlm_sql (sql): Reserving sql socket id: 4
> rlm_sql_mysql: query:  SELECT * FROM nas rlm_sql (sql): 
> Released sql socket id: 4
> Module: Instantiated sql (sql)
> Module: Loaded files
>  files: usersfile = "/usr/local/etc/raddb/users"
>  files: acctusersfile = "/usr/local/etc/raddb/acct_users"
>  files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users"
>  files: compat = "no"
> Module: Instantiated files (files)
> Module: Loaded Acct-Unique-Session-Id
>  acct_unique: key = "User-Name, Acct-Session-Id, 
> NAS-IP-Address, Client-IP-Address, NAS-Port"
> Module: Instantiated acct_unique (acct_unique)
> Module: Loaded detail
>  detail: detailfile =
> "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"
>  detail: detailperm = 384
>  detail: dirperm = 493
>  detail: locking = no
> Module: Instantiated detail (detail)
> Module: Loaded radutmp
>  radutmp: filename = "/usr/local/var/log/radius/radutmp"
>  radutmp: username = "%{User-Name}"
>  radutmp: case_sensitive = yes
>  radutmp: check_with_nas = yes
>  radutmp: perm = 384
>  radutmp: callerid = yes
> Module: Instantiated radutmp (radutmp)
>  detail: detailfile =
> "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-
> detail-%Y%m%d"
>  detail: detailperm = 384
>  detail: dirperm = 493
>  detail: locking = no
> Module: Instantiated detail (reply_log)
> Listening on authentication *:1812
> Listening on accounting *:1813
> Ready to process requests.
> **************************************************************
> ******************
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html
> 