Server not responding to requests

[Yoho, Cindy]

I found the problem, I was getting a DHCP address, which I did not want
to do.  The eth0 icon on the tray showed the correct static address,
which was the same as in my /etc/hosts (and DNS), but the actual
ifconfig eth0 showed the DHCP address.  I corrected this, and now I am
one step further. :-) 

In debug output I see

rlm_realm:  Looking up realm "umpublishing.org" for User-Name =
"cyoho at umpublishing.org"
rlm_realm:  No such realm "umpublishing.org"


yet this is the realm defined in smb.conf, and it also works fine when I
have this line in the /usr/local/etc/raddb/users file:

cyoho at umpublishing.org    Auth-Type := ntlm_auth

Is there somewhere else that the realm needs to be defined for this to
work?

Regards,
Cindy







-----Original Message-----
From: Yoho, Cindy 
Sent: Wednesday, August 06, 2008 12:48 PM
To: 'FreeRadius users mailing list'
Subject: RE: Server not responding to requests


Alan, 

iptables -L -n output shows

Chain INPUT (policy ACCEPT)
target      prot opt source        destination

Chain OUTPUT (policy ACCEPT)
target      prot opt source        destination

Chain FORWARD (policy ACCEPT)
target      prot opt source        destination

tcpdump shows nothing when I am trying to connect.  

However, ifconfig shows eth0 has the wrong IP address.  It looks like it
grabbed a DHCP address from my Windows DHCP server.  When I look at eth0
connection properties on the task bar it shows 172.16.3.4.  In
/etc/hosts, under System Administration Network Configuration,  and on
my DNS server, it is 172.16.1.15.  How do I stop it from using the wrong
address?  I see in docs there is a file called
/var/lib/dhclient/eth0-leases which contains the bad config info.  

Orion, client file is correct, for the 172.16.1.15 address, anyway. :-\


Greg, server is not multihomed, but multi-ip addresses do appear to be
the problem. 


Hi,
> Hi All,
> 
> I have freeradius 1.1.7 running on RHEL 5.  radtest works with a local
> user setup, and also with authentication via Active Directory.  
> However, anything outside the radius server host does not get a reply.

> I have configured a Multitech MA820 and also tried ntradping, and both

> get the same results - "Could not receive a response from server" is 
> the message when I use ntradping, and "Server did not respond in a 
> timely manner" is the response when I try to connect from the
Multitech.
> 
> Is there some setting I need to check to make sure external access is
> enabled?

iptables?  your host is firewalled and therefore FR doesnt see the
packet at all?


tcpdump -eqntl -i eth0 port 1812

(if eth0 is your NIC) then do some stuff. do you see anything?

iptables -L -n

are there entries?  if so, ensure there are 1812/1813/1814 UDP entries
too!


alan


------------------------------

Message: 2
Date: Tue, 5 Aug 2008 19:17:40 +0200
From: orion <meshkruaj at gmail.com>
Subject: Re: Server not responding to requests
To: "FreeRadius users mailing list"
	<freeradius-users at lists.freeradius.org>
Message-ID:
	<6e3e383b0808051017t128c3b53qfee7fad6b0558679 at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

take a look at client file. there you can specify which clients ( IP
addresses ) are allowed . add the public ip of your outside clients/nas.

2008/8/5 Yoho, Cindy <Cyoho at umpublishing.org>:
> Hi All,
>
> I have freeradius 1.1.7 running on RHEL 5.  radtest works with a local
> user setup, and also with authentication via Active Directory.  
> However, anything outside the radius server host does not get a reply.

> I have configured a Multitech MA820 and also tried ntradping, and both

> get the same results - "Could not receive a response from server" is 
> the message when I use ntradping, and "Server did not respond in a 
> timely manner" is the response when I try to connect from the 
> Multitech.
>
> Is there some setting I need to check to make sure external access is
> enabled?
>
>
> Thanks in advance ~
>
> Cindy Yoho
> Systems Engineer
> United Methodist Publishing House
> Nashville, TN
>
>
>
>
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>