radius is not listening

saman saman ssaman at hotmail.com
Tue Oct 21 10:51:22 CEST 2008


Hi Elizabeth,
Thanks for the quick response.
I tried
 #/usr/sbin/tcpdump -X host 127.0.0.1
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
(Nothing happening)

#/usr/sbin/tcpdump -X svr1.marind.com
15:20:55.301070 IP 192.168.1.50.63188> svr1.marind.com.domain:  13870+ A? b.rad.live.com. (32)vr
        0x0000:  4500 003c a1c1 0000 8011 1568 c0a8 0132  E.. svr1.marind.com.domain:  57001+ A? b.rad.live.com. (32)
        0x0000:  4500 003c a1cb 0000 8011 155e c0a8 0132  E.. svr1.marind.com.domain:  28694+ A? gfx2.hotmail.com. (34)
        0x0000:  4500 003e a1cc 0000 8011 155b c0a8 0132  E..>.......[...2
        0x0010:  c0a8 0105 d55b 0035 002a 1dc8 7016 0100  .....[.5.*..p...
        0x0020:  0001 0000 0000 0000 0467 6678 3207 686f  .........gfx2.ho
        0x0030:  746d 6169 6c03 636f 6d00 0001 0001       tmail.com.....
15:21:05.556816 IP 192.168.1.50.51451> svr1.marind.com.domain:  57001+ A? b.rad.live.com. (32)
        0x0000:  4500 003c a1cd 0000 8011 155c c0a8 0132  E.. svr1.marind.com.domain:  28694+ A? gfx2.hotmail.com. (34)
        0x0000:  4500 003e a1ce 0000 8011 1559 c0a8 0132  E..>.......Y...2
        0x0010:  c0a8 0105 d55b 0035 002a 1dc8 7016 0100  .....[.5.*..p...
        0x0020:  0001 0000 0000 0000 0467 6678 3207 686f  .........gfx2.ho
        0x0030:  746d 6169 6c03 636f 6d00 0001 0001       tmail.com.....
.....etc

# /usr/sbin/lsof -i |grep -i radius
radiusd   3965    root    5u  IPv4  10123       UDP 192.168.0.10:radius
radiusd   3965    root    6u  IPv4  10125       UDP 192.168.0.10:radius-acct
radiusd   3965    root    7u  IPv4  10126       UDP 192.168.0.10:1814

#telnet 127.0.0.1
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused
telnet: Unable to connect to remote host: Connection refused

# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
220 svr1.marind.com ESMTP Sendmail 8.13.1/8.13.1; Tue, 21 Oct 2008 15:46:37 +0700

#netstat -tna
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State
tcp        0      0 0.0.0.0:32769               0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:3306                0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:139                 0.0.0.0:*                   LISTEN
tcp        0      0 127.0.0.1:783               0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:21                  0.0.0.0:*                   LISTEN
tcp        0      0 192.168.1.5:53              0.0.0.0:*                   LISTEN
tcp        0      0 192.168.0.10:53             0.0.0.0:*                   LISTEN
tcp        0      0 127.0.0.1:53                0.0.0.0:*                   LISTEN
tcp        0      0 127.0.0.1:631               0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:3128                0.0.0.0:*                   LISTEN
tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN
tcp        0      0 127.0.0.1:953               0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:445                 0.0.0.0:*                   LISTEN
tcp        0      0 127.0.0.1:25                127.0.0.1:32848             TIME_WAIT
tcp        0      0 :::993                      :::*                        LISTEN
tcp        0      0 :::995                      :::*                        LISTEN
tcp        0      0 :::110                      :::*                        LISTEN
tcp        0      0 :::143                      :::*                        LISTEN
tcp        0      0 :::80                       :::*                        LISTEN
tcp        0      0 :::22                       :::*                        LISTEN
tcp        0      0 :::443                      :::*                        LISTEN

Before I changed the freeradius setting from tls to peap..everything were fine..
I have mail server also and previously testing telnet localhost work fine.

"rules file" do you mean iptables?


________________________________
> Date: Sun, 19 Oct 2008 21:46:37 -0700
> From: liz at twistedpair.cc
> To: freeradius-users at lists.freeradius.org
> Subject: Re: radius is not listening
> 
> a few more suggestions :)
> 
> What is in your rules file?
> 
> Can you telnet to localhost port 1812, how about 127.0.0.1 1812 (broken hosts file mebbe)
> 
> also try this
> 
> lsof -i |grep -i radius
> 
> you should see radius listening
> 
> Liz
> 
> 
> On Sun, Oct 19, 2008 at 7:38 PM, saman saman <ssaman at hotmail.com> wrote:
> 
> HI Alan,
> what If radtest localhost also doesn't work either?
> here the iptables output
> #iptables -L -n
> Chain INPUT (policy DROP)
> target     prot opt source               destination
> ACCEPT     all  --  127.0.0.1            0.0.0.0/0
> ACCEPT     all  --  192.168.1.2          0.0.0.0/0
> ACCEPT     all  --  192.168.0.10         0.0.0.0/0
> ACCEPT     all  --  192.168.0.0/24       0.0.0.0/0
> ACCEPT     all  --  0.0.0.0/0            192.168.1.0/24
> ACCEPT     all  --  .0.0.0/0            192.168.1.2         state RELATED,ESTABLISHED
> svr1       tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:21
> svr1       tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:22
> srv1       tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:80
> srv1       tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:80
> svr1       tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:110
> svr1       tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:113
> ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:1812
> ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:1813
> ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:1814
> ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:53
> ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:110
> ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:2074
> ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:4000
> ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 8
> ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 11
> ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 80
> 
> Chain FORWARD (policy DROP)
> target     prot opt source               destination
> ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
> ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
> ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
> 
> Chain OUTPUT (policy DROP)
> target     prot opt source               destination
> ACCEPT     all  --  127.0.0.1            0.0.0.0/0
> ACCEPT     all  --  192.168.0.10         0.0.0.0/0
> ACCEPT     all  --  192.168.1.2          0.0.0.0/0
> ACCEPT     all  --  192.168.1.206        0.0.0.0/0
> 
> Chain mars (6 references)
> target     prot opt source               destination
> ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp flags:0x16/0x02
> ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
> DROP       tcp  --  0.0.0.0/0            0.0.0.0/0
> 
> #radtest John hello localhost 0 testing
>        User-Name = "John"
>        User-Password = "hello"
>        NAS-IP-Address = 192.168.1.2
>        NAS-Port = 0
>        User-Name = "John"
>        User-Password = "hello"
>        NAS-IP-Address = 192.168.1.2
>        NAS-Port = 0
>        User-Name = "John"
>        User-Password = "hello"
>        NAS-IP-Address = 192.168.1.2
>        NAS-Port = 0
>        User-Name = "John"
>        User-Password = "hello"
>        NAS-IP-Address = 192.168.1.2
>        NAS-Port = 0
>        User-Name = "John"
>        User-Password = "hello"
>        NAS-IP-Address = 192.168.1.2
>        NAS-Port = 0
>        User-Name = "John"
>        User-Password = "hello"
>        NAS-IP-Address = 192.168.1.2
>        NAS-Port = 0
> 
> The above iptables output shows the udp 1812, 1813 & 1814 are all accepted.
> 
> > > Hi I am a newbie and recently would like to try to experience freeradius-server-2.0.4 but unfortunately I have problems can't solved.
> > > The freeradius is running ok but when attempt to authenticate the server is just not responding to clients request.
> > ...
> > > #radiusd -X
> > ...
> > > Ready to process requests.
> >
> >   The point of debug mode is to show it processing packets.
> >
> >   If you've sent it packets and it doesn't receive them, fix the
> > firewall on your OS to allow RADIUS packets.
> >
> >   Alan DeKok.
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 
> _________________________________________________________________
> 
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

_________________________________________________________________





More information about the Freeradius-Users mailing list