Freeradius-Users Digest, Vol 52, Issue 36

Rokkhan rokkhan at gmail.com
Fri Aug 7 12:49:01 CEST 2009


Could you show us, how you use radtest and if you get any error?

2009/8/7 ramesh p <rock786143 at gmail.com>:
>> Have you added 127.0.0.1 in the clients.conf?
>
> yes.
>
> client localhost {
>       ipaddr = 127.0.0.1
>       secret = testing123
>       nastype = other
>       require_message_authenticator = no
> }
>
> Thanks,
> Rams.
>
>
>
> On Fri, Aug 7, 2009 at 3:30 PM,
> <freeradius-users-request at lists.freeradius.org> wrote:
>>
>>
>> Message: 2
>> Date: Fri, 7 Aug 2009 11:58:56 +0200
>> From: Rokkhan <rokkhan at gmail.com>
>> Subject: Re: Freeradius2.1.6 installation problem
>> To: FreeRadius users mailing list
>>        <freeradius-users at lists.freeradius.org>
>> Message-ID:
>>        <335289090908070258x710b5551n5faf93155ffeece8 at mail.gmail.com>
>> Content-Type: text/plain; charset=ISO-8859-1
>>
>> Have you added 127.0.0.1 in the clients.conf?
>>
>> 2009/8/7 ramesh p <rock786143 at gmail.com>:
>> > Unable to execute radtest.
>> >
>> > # radiusd -X
>> > FreeRADIUS Version 2.1.6, for host i686-pc-linux-gnu, built on Jul 30
>> > 2009
>> > at 07:17:32
>> > Copyright (C) 1999-2009 The FreeRADIUS server project and contributors.
>> > There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
>> > PARTICULAR PURPOSE.
>> > You may redistribute copies of FreeRADIUS under the terms of the
>> > GNU General Public License v2.
>> > Starting - reading configuration files ...
>> > including configuration file /usr/local/fnmt/radius2//etc/
>> >>
>> >> raddb/radiusd.conf
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/proxy.conf
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/clients.conf
>> >> including files in directory
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/ldap
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/pap
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/exec
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/expr
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/attr_filter
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/radutmp
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/preprocess
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/always
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/sqlcounter_expire_on_login
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/detail.example.com
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/attr_rewrite
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/etc_group
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/unix
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/mac2vlan
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/chap
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/smsotp
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/expiration
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/pam
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/inner-eap
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/acct_unique
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/wimax
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/smbpasswd
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/logintime
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/sql_log
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/realm
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/linelog
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/otp
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/mac2ip
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/checkval
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/krb5
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/mschap
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/counter
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/detail
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/digest
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/passwd
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/sradutmp
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/files
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/policy
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/detail.log
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/perl
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/ippool
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/echo
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/eap.conf
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/policy.conf
>> >> including files in directory
>> >> /usr/local/fnmt/radius2//etc/raddb/sites-enabled/
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/sites-enabled/control-socket
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/sites-enabled/default
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/sites-enabled/inner-tunnel
>> >> including dictionary file /usr/local/fnmt/radius2//etc/raddb/dictionary
>> >> main {
>> >>         prefix = "/usr/local/fnmt/radius2/"
>> >>         localstatedir = "/usr/local/fnmt/radius2//var"
>> >>         logdir = "/usr/local/fnmt/radius2//var/log/radius"
>> >>         libdir = "/usr/local/fnmt/radius2//lib"
>> >>         radacctdir = "/usr/local/fnmt/radius2//var/log/radius/radacct"
>> >>         hostname_lookups = no
>> >>         max_request_time = 30
>> >>         cleanup_delay = 5
>> >>         max_requests = 1024
>> >>         allow_core_dumps = no
>> >>         pidfile =
>> >> "/usr/local/fnmt/radius2//var/run/radiusd/radiusd.pid"
>> >>         checkrad = "/usr/local/fnmt/radius2//sbin/checkrad"
>> >>         debug_level = 0
>> >>         proxy_requests = yes
>> >>  log {
>> >>         stripped_names = no
>> >>         auth = no
>> >>         auth_badpass = no
>> >>         auth_goodpass = no
>> >>  }
>> >>  security {
>> >>         max_attributes = 200
>> >>         reject_delay = 1
>> >>         status_server = yes
>> >>  }
>> >> }
>> >> }
>> >> radiusd: #### Loading Realms and Home Servers ####
>> >>  proxy server {
>> >>         retry_delay = 5
>> >>         retry_count = 3
>> >>         default_fallback = no
>> >>         dead_time = 120
>> >>         wake_all_if_all_dead = no
>> >>  }
>> >>  home_server localhost {
>> >>         ipaddr = 127.0.0.1
>> >>         port = 1812
>> >>         type = "auth"
>> >>         secret = "testing123"
>> >>         response_window = 20
>> >>         max_outstanding = 65536
>> >>         require_message_authenticator = no
>> >>         zombie_period = 40
>> >>         status_check = "status-server"
>> >>         ping_interval = 30
>> >>         check_interval = 30
>> >>         num_answers_to_alive = 3
>> >>         num_pings_to_alive = 3
>> >>         revive_interval = 120
>> >>         status_check_timeout = 4
>> >>         irt = 2
>> >>         mrt = 16
>> >>         mrc = 5
>> >>         mrd = 30
>> >>  }
>> >>  home_server_pool my_auth_failover {
>> >>         type = fail-over
>> >>         home_server = localhost
>> >>  }
>> >>  realm example.com {
>> >>         auth_pool = my_auth_failover
>> >>  }
>> >>  realm LOCAL {
>> >>  }
>> >> radiusd: #### Loading Clients ####
>> >> client localhost {
>> >>         ipaddr = 127.0.0.1
>> >>         require_message_authenticator = no
>> >>         secret = "testing123"
>> >>         nastype = "other"
>> >>  }
>> >>  client xx.xx.xx.xx {
>> >>         require_message_authenticator = no
>> >>         secret = "testing123"
>> >>         shortname = "rparsa"
>> >>         nastype = "other"
>> >>         login = "radtest"
>> >>  }
>> >> radiusd: #### Instantiating modules ####
>> >>  instantiate {
>> >>  Module: Linked to module rlm_exec
>> >>  Module: Instantiating exec
>> >>   exec {
>> >>         wait = no
>> >>         input_pairs = "request"
>> >>         shell_escape = yes
>> >>   }
>> >>  Module: Linked to module rlm_expr
>> >>  Module: Instantiating expr
>> >>  Module: Linked to module rlm_expiration
>> >>  Module: Instantiating expiration
>> >>   expiration {
>> >>         reply-message = "Password Has Expired  "
>> >>   }
>> >>  Module: Linked to module rlm_logintime
>> >>  Module: Instantiating logintime
>> >>   logintime {
>> >>         reply-message = "You are calling outside your allowed timespan
>> >>  "
>> >>         minimum-timeout = 60
>> >>   }
>> >>  }
>> >> radiusd: #### Loading Virtual Servers ####
>> >> server inner-tunnel {
>> >>  modules {
>> >>  Module: Checking authenticate {...} for more modules to load
>> >>  Module: Linked to module rlm_pap
>> >>  Module: Instantiating pap
>> >>   pap {
>> >>         encryption_scheme = "auto"
>> >>         auto_header = no
>> >>   }
>> >>  Module: Linked to module rlm_chap
>> >>  Module: Instantiating chap
>> >>  Module: Linked to module rlm_mschap
>> >>  Module: Instantiating mschap
>> >>   mschap {
>> >> use_mppe = yes
>> >>         require_encryption = no
>> >>         require_strong = no
>> >>         with_ntdomain_hack = no
>> >>   }
>> >>  Module: Linked to module rlm_unix
>> >>  Module: Instantiating unix
>> >>   unix {
>> >>         radwtmp = "/usr/local/fnmt/radius2//var/log/radius/radwtmp"
>> >>   }
>> >>  Module: Linked to module rlm_eap
>> >>  Module: Instantiating eap
>> >>   eap {
>> >>         default_eap_type = "md5"
>> >>         timer_expire = 60
>> >>         ignore_unknown_eap_types = no
>> >>         cisco_accounting_username_bug = no
>> >>         max_sessions = 2048
>> >>   }
>> >>  Module: Linked to sub-module rlm_eap_md5
>> >>  Module: Instantiating eap-md5
>> >>  Module: Linked to sub-module rlm_eap_leap
>> >>  Module: Instantiating eap-leap
>> >>  Module: Linked to sub-module rlm_eap_gtc
>> >>  Module: Instantiating eap-gtc
>> >>    gtc {
>> >>         challenge = "Password: "
>> >>         auth_type = "PAP"
>> >>    }
>> >>  Module: Linked to sub-module rlm_eap_tls
>> >>  Module: Instantiating eap-tls
>> >>    tls {
>> >>         rsa_key_exchange = no
>> >>         dh_key_exchange = yes
>> >>         rsa_key_length = 512
>> >>         dh_key_length = 512
>> >>         verify_depth = 0
>> >>         pem_file_type = yes
>> >>         private_key_file =
>> >> "/usr/local/fnmt/radius2//etc/raddb/certs/server.pem"
>> >> certificate_file =
>> >> "/usr/local/fnmt/radius2//etc/raddb/certs/server.pem"
>> >>         CA_file = "/usr/local/fnmt/radius2//etc/raddb/certs/ca.pem"
>> >>         private_key_password = "whatever"
>> >>         dh_file = "/usr/local/fnmt/radius2//etc/raddb/certs/dh"
>> >>         random_file = "/usr/local/fnmt/radius2//etc/raddb/certs/random"
>> >>         fragment_size = 1024
>> >>         include_length = yes
>> >>         check_crl = no
>> >>         cipher_list = "DEFAULT"
>> >>         make_cert_command =
>> >> "/usr/local/fnmt/radius2//etc/raddb/certs/bootstrap"
>> >>     cache {
>> >>         enable = no
>> >>         lifetime = 24
>> >>         max_entries = 255
>> >>     }
>> >>    }
>> >>  Module: Linked to sub-module rlm_eap_ttls
>> >>  Module: Instantiating eap-ttls
>> >>    ttls {
>> >>         default_eap_type = "md5"
>> >>         copy_request_to_tunnel = no
>> >>         use_tunneled_reply = no
>> >>         virtual_server = "inner-tunnel"
>> >>         include_length = yes
>> >>    }
>> >>  Module: Linked to sub-module rlm_eap_peap
>> >>  Module: Instantiating eap-peap
>> >>    peap {
>> >>         default_eap_type = "mschapv2"
>> >>         copy_request_to_tunnel = no
>> >>         use_tunneled_reply = no
>> >>         proxy_tunneled_request_as_eap = yes
>> >>         virtual_server = "inner-tunnel"
>> >>    }
>> >>  Module: Linked to sub-module rlm_eap_mschapv2
>> >>  Module: Instantiating eap-mschapv2
>> >>    mschapv2 {
>> >>         with_ntdomain_hack = no
>> >>    }
>> >>  Module: Checking authorize {...} for more modules to load
>> >>  Module: Linked to module rlm_preprocess
>> >>  Module: Instantiating preprocess
>> >>   preprocess {
>> >>         huntgroups = "/usr/local/fnmt/radius2//etc/raddb/huntgroups"
>> >>         hints = "/usr/local/fnmt/radius2//etc/raddb/hints"
>> >>         with_ascend_hack = no
>> >>         ascend_channels_per_line = 23
>> >>         with_ntdomain_hack = no
>> >>         with_specialix_jetstream_hack = no
>> >>         with_cisco_vsa_hack = no
>> >>         with_alvarion_vsa_hack = no
>> >>   }
>> >>  Module: Checking preacct {...} for more modules to load
>> >>  Module: Linked to module rlm_acct_unique
>> >>  Module: Instantiating acct_unique
>> >>   acct_unique {
>> >>         key = "User-Name, Acct-Session-Id, NAS-IP-Address,
>> >> Client-IP-Address, NAS-Port"
>> >>   }
>> >>  Module: Checking accounting {...} for more modules to load
>> >>  Module: Linked to module rlm_detail
>> >>  Module: Instantiating detail
>> >>   detail {
>> >>         detailfile =
>> >>
>> >> "/usr/local/fnmt/radius2//var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"
>> >>         header = "%t"
>> >>         detailperm = 384
>> >>         dirperm = 493
>> >>         locking = no
>> >>         log_packet_header = no
>> >>   }
>> >>  Module: Instantiating attr_filter.accounting_response
>> >>   attr_filter attr_filter.accounting_response {
>> >>         attrsfile =
>> >> "/usr/local/fnmt/radius2//etc/raddb/attrs.accounting_response"
>> >>         key = "%{User-Name}"
>> >>   }
>> >>  Module: Checking session {...} for more modules to load
>> >>  Module: Checking post-proxy {...} for more modules to load
>> >>  Module: Checking post-auth {...} for more modules to load
>> >>  } # modules
>> >> } # server
>> >> radiusd: #### Opening IP addresses and Ports ####
>> >> listen {
>> >>  type = "auth"
>> >>         ipaddr = *
>> >>         port = 0
>> >> }
>> >> listen {
>> >>         type = "acct"
>> >>         ipaddr = *
>> >>         port = 0
>> >> }
>> >> listen {
>> >>         type = "control"
>> >>  listen {
>> >>         socket =
>> >> "/usr/local/fnmt/radius2//var/run/radiusd/radiusd.sock"
>> >>  }
>> >> }
>> >> Listening on authentication address * port 1812
>> >> Listening on accounting address * port 1813
>> >> Listening on command file
>> >> /usr/local/fnmt/radius2//var/run/radiusd/radiusd.sock
>> >> Listening on proxy address * port 1814
>> >> Ready to process requests.
>> >>
>> >> I'm able to send packets using NTRadping tool however the packets are
>> >> rejected using radtest?
>> >> Why? Anthing wrong in the configuration?
>> >>
>> >> Thanks,
>> >> Rams.
>> >
>> > -
>> > List info/subscribe/unsubscribe? See
>> > http://www.freeradius.org/list/users.html
>> >
>>
>>
>> ------------------------------
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>>
>> End of Freeradius-Users Digest, Vol 52, Issue 36
>> ************************************************
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>



More information about the Freeradius-Users mailing list