radius stops authenticating users
Andrew D Kirch
trelane at trelane.net
Fri Feb 8 16:14:05 CET 2008
The top login attempt doesn't work, and the bottom one does. Restarting
radius doesn't fix the problem, but rebooting the server it's running on
does. This is the 1.1.7 package for Debian Linux, the NAS is a Cisco
AS5300.
Below is the output from freeradius -X for a working and a failed login
session for the same user. Further debug logs avaialable upon request.
Thanks in advance for your help.
modcall: entering group preacct for request 14
modcall[preacct]: module "preprocess" returns noop for request 14
rlm_acct_unique: Hashing 'NAS-Port = 1,Client-IP-Address =
208.64.35.3,NAS-IP-Address = 208.64.35.3,Acct-Session-Id =
"000E79BC",User-Name = "skyhawk at k-inc.com"'
rlm_acct_unique: Acct-Unique-Session-ID = "c27a6dc7ba7ef40a".
modcall[preacct]: module "acct_unique" returns ok for request 14
rlm_realm: Looking up realm "k-inc.com" for User-Name =
"skyhawk at k-inc.com"
rlm_realm: No such realm "k-inc.com"
modcall[preacct]: module "suffix" returns noop for request 14
modcall[preacct]: module "files" returns noop for request 14
modcall: leaving group preacct (returns ok) for request 14
Processing the accounting section of radiusd.conf
modcall: entering group accounting for request 14
radius_xlat: '/var/log/freeradius/radacct/208.64.35.3/detail-20080208'
rlm_detail:
/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands
to /var/log/freeradius/radacct/208.64.35.3/detail-20080208
modcall[accounting]: module "detail" returns ok for request 14
modcall[accounting]: module "unix" returns ok for request 14
radius_xlat: '/var/log/freeradius/radutmp'
radius_xlat: 'skyhawk at k-inc.com'
modcall[accounting]: module "radutmp" returns ok for request 14
rlm_ippool: Searching for an entry for nas/port: 208.64.35.3/1
rlm_ippool: Deallocated entry for ip/port: 208.64.35.241/1
rlm_ippool: num: 0
modcall[accounting]: module "main_pool" returns ok for request 14
modcall: leaving group accounting (returns ok) for request 14
Sending Accounting-Response of id 47 to 208.64.35.3 port 1646
Finished request 14
Processing the preacct section of radiusd.conf
modcall: entering group preacct for request 4
modcall[preacct]: module "preprocess" returns noop for request 4
rlm_acct_unique: Hashing 'NAS-Port = 1,Client-IP-Address =
208.64.35.3,NAS-IP-Address = 208.64.35.3,Acct-Session-Id =
"000E79BC",User-Name = "skyhawk at k-inc.com"'
rlm_acct_unique: Acct-Unique-Session-ID = "c27a6dc7ba7ef40a".
modcall[preacct]: module "acct_unique" returns ok for request 4
rlm_realm: Looking up realm "k-inc.com" for User-Name =
"skyhawk at k-inc.com"
rlm_realm: No such realm "k-inc.com"
modcall[preacct]: module "suffix" returns noop for request 4
modcall[preacct]: module "files" returns noop for request 4
modcall: leaving group preacct (returns ok) for request 4
Processing the accounting section of radiusd.conf
modcall: entering group accounting for request 4
radius_xlat: '/var/log/freeradius/radacct/208.64.35.3/detail-20080208'
rlm_detail:
/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands
to /var/log/freeradius/radacct/208.64.35.3/detail-20080208
modcall[accounting]: module "detail" returns ok for request 4
modcall[accounting]: module "unix" returns ok for request 4
radius_xlat: '/var/log/freeradius/radutmp'
radius_xlat: 'skyhawk at k-inc.com'
modcall[accounting]: module "radutmp" returns ok for request 4
rlm_ippool: This is not an Accounting-Stop. Return NOOP.
modcall[accounting]: module "main_pool" returns noop for request 4
modcall: leaving group accounting (returns ok) for request 4
Sending Accounting-Response of id 41 to 208.64.35.3 port 1646
Finished request 4
More information about the Freeradius-Users
mailing list