FreeRadius seems to be working, but not getting it to respond
Michelle Manning
mmanning at caprarotechnologies.com
Mon Nov 6 22:37:21 CET 2006
CentOS does have a built in firewall, but I do not believe that it is
set up. I say this because all the information that
I found on CentOS website talks about the iptables file - well I don't
have one where they say that it should be - I have an
iptables-config, but it is set up differently than what they talk about.
Plus this is the same on my other machine where radius is living.
As for Ports 1812 and 1813 - from what I have read about Radius - they
are configured for UDP it's in RFC 2138. I checked netstat and sure enough
they are both UDP.
It probably is the iptables, but I will have to get one of my co-workers
to look at it, or hope that sleep will make things clearer for me.
Thanks for your ideas though.
Michelle
King, Michael wrote:
>Does CENTOS have a built-in firewall? (IPTABLES) Does it have holes
>(Rules, exceptions) poked in it so that the RADIUS packets get thru?
>
>Ports 1812 and 1813. I'm not sure if it's TCP or UDP, I always see them
>referenced together, so I opened both.
>
>
>
>>-----Original Message-----
>>From:
>>freeradius-users-bounces+mking=bridgew.edu at lists.freeradius.or
>>g
>>[mailto:freeradius-users-bounces+mking=bridgew.edu at lists.freer
>>
>>
>adius.org] On Behalf Of Michelle Manning
>
>
>>Sent: Monday, November 06, 2006 11:12 AM
>>To: FreeRadius users mailing list
>>Subject: FreeRadius seems to be working, but not getting it
>>to respond
>>
>>Hi,
>>I have been reading the list for a couple of days now and
>>maybe I have missed something - but here goes.
>>My set up is the following - Linksys Router with DD-WRT
>>running on it.
>>It does work as it connects to a older version of Radius on
>>another server. The newer server is CENTOS with FreeRadius
>>1.1.3 - I changed the config files and the information below
>>is from running Radius in debug mode. From what I can see it
>>should be happy. I have the DD-WRT pointing to the new server
>>- the hotspotlogin.cgi is in the correct place and configured
>>correctly. I also have PhpMyPrepaid on the server - and do
>>wonder if this is my problem - but I don't think so....
>>
>>Any ideas? Is there something in this 'log' file that jumps
>>out at any of you?
>>
>>And - the log file in /usr/local/var/log/radius has nothing
>>in it. I was hoping that that would give me some clues....
>>
>>Please help.
>>
>>Michelle
>>
>>*************************************************************
>>Starting - reading configuration files ...
>>reread_config: reading radiusd.conf
>>Config: including file: /usr/local/etc/raddb/proxy.conf
>>Config: including file: /usr/local/etc/raddb/clients.conf
>>Config: including file: /usr/local/etc/raddb/snmp.conf
>>Config: including file: /usr/local/etc/raddb/eap.conf
>>Config: including file: /usr/local/etc/raddb/sql.conf
>> main: prefix = "/usr/local"
>> main: localstatedir = "/usr/local/var"
>> main: logdir = "/usr/local/var/log/radius"
>> main: libdir = "/usr/local/lib"
>> main: radacctdir = "/usr/local/var/log/radius/radacct"
>> main: hostname_lookups = no
>> main: max_request_time = 30
>> main: cleanup_delay = 5
>> main: max_requests = 1024
>> main: delete_blocked_requests = 0
>> main: port = 0
>> main: allow_core_dumps = no
>> main: log_stripped_names = no
>> main: log_file = "/usr/local/var/log/radius/radius.log"
>> main: log_auth = no
>> main: log_auth_badpass = no
>> main: log_auth_goodpass = no
>> main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid"
>> main: user = "radiusd"
>> main: group = "radiusd"
>> main: usercollide = no
>> main: lower_user = "no"
>> main: lower_pass = "no"
>> main: nospace_user = "no"
>> main: nospace_pass = "no"
>> main: checkrad = "/usr/local/sbin/checkrad"
>> main: proxy_requests = yes
>> proxy: retry_delay = 5
>> proxy: retry_count = 3
>> proxy: synchronous = no
>> proxy: default_fallback = yes
>> proxy: dead_time = 120
>> proxy: post_proxy_authorize = yes
>> proxy: wake_all_if_all_dead = no
>> security: max_attributes = 200
>> security: reject_delay = 1
>> security: status_server = no
>> main: debug_level = 0
>>read_config_files: reading dictionary
>>read_config_files: reading naslist
>>Using deprecated naslist file. Support for this will go away soon.
>>read_config_files: reading clients
>>read_config_files: reading realms
>>radiusd: entering modules setup
>>Module: Library search path is /usr/local/lib
>>Module: Loaded exec
>> exec: wait = yes
>> exec: program = "(null)"
>> exec: input_pairs = "request"
>> exec: output_pairs = "(null)"
>> exec: packet_type = "(null)"
>>rlm_exec: Wait=yes but no output defined. Did you mean output=none?
>>Module: Instantiated exec (exec)
>>Module: Loaded expr
>>Module: Instantiated expr (expr)
>>Module: Loaded PAP
>> pap: encryption_scheme = "crypt"
>>Module: Instantiated pap (pap)
>>Module: Loaded CHAP
>>Module: Instantiated chap (chap)
>>Module: Loaded MS-CHAP
>> mschap: use_mppe = yes
>> mschap: require_encryption = no
>> mschap: require_strong = no
>> mschap: with_ntdomain_hack = no
>> mschap: passwd = "(null)"
>> mschap: ntlm_auth = "(null)"
>>Module: Instantiated mschap (mschap)
>>Module: Loaded System
>> unix: cache = no
>> unix: passwd = "(null)"
>> unix: shadow = "/etc/shadow"
>> unix: group = "(null)"
>> unix: radwtmp = "/usr/local/var/log/radius/radwtmp"
>> unix: usegroup = no
>> unix: cache_reload = 600
>>Module: Instantiated unix (unix)
>>Module: Loaded eap
>> eap: default_eap_type = "md5"
>> eap: timer_expire = 60
>> eap: ignore_unknown_eap_types = no
>> eap: cisco_accounting_username_bug = no
>>rlm_eap: Loaded and initialized type md5
>>rlm_eap: Loaded and initialized type leap
>> gtc: challenge = "Password: "
>> gtc: auth_type = "PAP"
>>rlm_eap: Loaded and initialized type gtc
>> mschapv2: with_ntdomain_hack = no
>>rlm_eap: Loaded and initialized type mschapv2
>>Module: Instantiated eap (eap)
>>Module: Loaded preprocess
>> preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups"
>> preprocess: hints = "/usr/local/etc/raddb/hints"
>> preprocess: with_ascend_hack = no
>> preprocess: ascend_channels_per_line = 23
>> preprocess: with_ntdomain_hack = no
>> preprocess: with_specialix_jetstream_hack = no
>> preprocess: with_cisco_vsa_hack = no
>> preprocess: with_alvarion_vsa_hack = no
>>Module: Instantiated preprocess (preprocess)
>>Module: Loaded realm
>> realm: format = "suffix"
>> realm: delimiter = "@"
>> realm: ignore_default = no
>> realm: ignore_null = no
>>Module: Instantiated realm (suffix)
>>Module: Loaded SQL
>> sql: driver = "rlm_sql_mysql"
>> sql: server = "localhost"
>> sql: port = ""
>> sql: login = "root"
>> sql: password = ""
>> sql: radius_db = "radius"
>> sql: nas_table = "nas"
>> sql: sqltrace = yes
>> sql: sqltracefile = "/usr/local/var/log/radius/sqltrace.sql"
>> sql: readclients = yes
>> sql: deletestalesessions = yes
>> sql: num_sql_socks = 5
>> sql: sql_user_name = "%{User-Name}"
>> sql: default_user_profile = ""
>> sql: query_on_not_found = no
>> sql: authorize_check_query = "SELECT id, UserName, Attribute, Value,
>>op FROM radcheck WHERE Username =
>>'%{SQL-User-Name}' ORDER BY id"
>> sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value,
>>op FROM radreply WHERE Username =
>>'%{SQL-User-Name}' ORDER BY id"
>> sql: authorize_group_check_query = "SELECT
>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribu
>>te,radgroupcheck.Value,radgroupcheck.op
>>FROM radgroupcheck,usergroup WHERE usergroup.Username =
>>'%{SQL-User-Name}' AND usergroup.GroupName =
>>radgroupcheck.GroupName ORDER BY radgroupcheck.id"
>> sql: authorize_group_reply_query = "SELECT
>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribu
>>te,radgroupreply.Value,radgroupreply.op
>>FROM radgroupreply,usergroup WHERE usergroup.Username =
>>'%{SQL-User-Name}' AND usergroup.GroupName =
>>radgroupreply.GroupName ORDER BY radgroupreply.id"
>> sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S',
>>AcctSessionTime=unix_timestamp('%S') -
>>unix_timestamp(AcctStartTime),
>>AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay =
>>'%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND
>>AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND
>>AcctStartTime <= '%S'"
>> sql: accounting_update_query = "UPDATE radacct SET
>>FramedIPAddress = '%{Framed-IP-Address}', AcctSessionTime =
>>'%{Acct-Session-Time}', AcctInputOctets =
>>'%{Acct-Input-Octets}', AcctOutputOctets =
>>'%{Acct-Output-Octets}' WHERE AcctSessionId =
>>'%{Acct-Session-Id}' AND UserName =
>>'%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Address}'"
>> sql: accounting_update_query_alt = "INSERT into radacct
>>(AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress,
>>NASPortId, NASPortType, AcctStartTime, AcctSessionTime,
>>AcctAuthentic, ConnectInfo_start, AcctInputOctets,
>>AcctOutputOctets, CalledStationId, CallingStationId,
>>ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay)
>>values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}',
>>'%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}',
>>'%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S',INTERVAL
>>(%{Acct-Session-Time:-0} +
>>%{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}',
>>'%{Acct-Authentic}', '', '%{Acct-Input-Octets}',
>>'%{Acct-Output-Octets}', '%{Called-Station-Id}',
>>'%{Calling-Station-Id}', '%{Service-Type}',
>>'%{Framed-Protocol}', '%{Framed-IP-Address}', '0')"
>> sql: accounting_start_query = "INSERT into radacct
>>(AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress,
>>NASPortId, NASPortType, AcctStartTime, AcctStopTime,
>>AcctSessionTime, AcctAuthentic, ConnectInfo_start,
>>ConnectInfo_stop, AcctInputOctets, AcctOutputOctets,
>>CalledStationId, CallingStationId, AcctTerminateCause,
>>ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay,
>>AcctStopDelay) values('%{Acct-Session-Id}',
>>'%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}',
>>'%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S',
>>'0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0',
>>'0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '',
>>'%{Service-Type}', '%{Framed-Protocol}',
>>'%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0')"
>> sql: accounting_start_query_alt = "UPDATE radacct SET
>>AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}',
>>ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId =
>>'%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND
>>NASIPAddress = '%{NAS-IP-Address}'"
>> sql: accounting_stop_query = "UPDATE radacct SET
>>AcctStopTime = '%S', AcctSessionTime =
>>'%{Acct-Session-Time}', AcctInputOctets =
>>'%{Acct-Input-Octets}', AcctOutputOctets =
>>'%{Acct-Output-Octets}', AcctTerminateCause =
>>'%{Acct-Terminate-Cause}', AcctStopDelay =
>>'%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}'
>>WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName =
>>'%{SQL-User-Name}'
>>AND NASIPAddress = '%{NAS-IP-Address}'"
>> sql: accounting_stop_query_alt = "INSERT into radacct
>>(AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress,
>>NASPortId, NASPortType, AcctStartTime, AcctStopTime,
>>AcctSessionTime, AcctAuthentic, ConnectInfo_start,
>>ConnectInfo_stop, AcctInputOctets, AcctOutputOctets,
>>CalledStationId, CallingStationId, AcctTerminateCause,
>>ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay,
>>AcctStopDelay) values('%{Acct-Session-Id}',
>>'%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}',
>>'%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}',
>>DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} +
>>%{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}',
>>'%{Acct-Authentic}', '', '%{Connect-Info}',
>>'%{Acct-Input-Octets}', '%{Acct-Output-Octets}',
>>'%{Called-Station-Id}', '%{Calling-Station-Id}',
>>'%{Acct-Terminate-Cause}', '%{Service-Type}',
>>'%{Framed-Protocol}', '%{Framed-IP-Address}', '0',
>>'%{Acct-Delay-Time}')"
>> sql: group_membership_query = "SELECT GroupName FROM
>>usergroup WHERE UserName='%{SQL-User-Name}'"
>> sql: connect_failure_retry_delay = 60
>> sql: simul_count_query = "SELECT COUNT(*) FROM radacct WHERE
>>UserName='%{SQL-User-Name}' AND AcctStopTime = 0"
>> sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId,
>>UserName, NASIPAddress, NASPortId, FramedIPAddress,
>>CallingStationId, FramedProtocol FROM radacct WHERE
>>UserName='%{SQL-User-Name}' AND AcctStopTime = 0"
>> sql: postauth_query = "INSERT into radpostauth (id, user,
>>pass, reply,
>>date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}',
>>'%{reply:Packet-Type}', NOW())"
>> sql: safe-characters =
>>"@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567
>>89.-_: /"
>>rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql)
>>loaded and linked rlm_sql (sql): Attempting to connect to
>>root at localhost:/radius rlm_sql (sql): starting 0 rlm_sql
>>(sql): Attempting to connect rlm_sql_mysql #0
>>rlm_sql_mysql: Starting connect to MySQL server for #0
>>rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql):
>>starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1
>>rlm_sql_mysql: Starting connect to MySQL server for #1
>>rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql):
>>starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2
>>rlm_sql_mysql: Starting connect to MySQL server for #2
>>rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql):
>>starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3
>>rlm_sql_mysql: Starting connect to MySQL server for #3
>>rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql):
>>starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4
>>rlm_sql_mysql: Starting connect to MySQL server for #4
>>rlm_sql (sql): Connected new DB handle, #4 rlm_sql (sql): -
>>generate_sql_clients rlm_sql (sql): Query: SELECT * FROM nas
>>rlm_sql (sql): Reserving sql socket id: 4
>>rlm_sql_mysql: query: SELECT * FROM nas rlm_sql (sql):
>>Released sql socket id: 4
>>Module: Instantiated sql (sql)
>>Module: Loaded files
>> files: usersfile = "/usr/local/etc/raddb/users"
>> files: acctusersfile = "/usr/local/etc/raddb/acct_users"
>> files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users"
>> files: compat = "no"
>>Module: Instantiated files (files)
>>Module: Loaded Acct-Unique-Session-Id
>> acct_unique: key = "User-Name, Acct-Session-Id,
>>NAS-IP-Address, Client-IP-Address, NAS-Port"
>>Module: Instantiated acct_unique (acct_unique)
>>Module: Loaded detail
>> detail: detailfile =
>>"/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"
>> detail: detailperm = 384
>> detail: dirperm = 493
>> detail: locking = no
>>Module: Instantiated detail (detail)
>>Module: Loaded radutmp
>> radutmp: filename = "/usr/local/var/log/radius/radutmp"
>> radutmp: username = "%{User-Name}"
>> radutmp: case_sensitive = yes
>> radutmp: check_with_nas = yes
>> radutmp: perm = 384
>> radutmp: callerid = yes
>>Module: Instantiated radutmp (radutmp)
>> detail: detailfile =
>>"/usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-
>>detail-%Y%m%d"
>> detail: detailperm = 384
>> detail: dirperm = 493
>> detail: locking = no
>>Module: Instantiated detail (reply_log)
>>Listening on authentication *:1812
>>Listening on accounting *:1813
>>Ready to process requests.
>>**************************************************************
>>******************
>>-
>>List info/subscribe/unsubscribe? See
>>http://www.freeradius.org/list/users.html
>>
>>
>>
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>
>
>
More information about the Freeradius-Users
mailing list