Freeradius-Users Digest, Vol 52, Issue 36
Rokkhan
rokkhan at gmail.com
Fri Aug 7 12:49:01 CEST 2009
Could you show us, how you use radtest and if you get any error?
2009/8/7 ramesh p <rock786143 at gmail.com>:
>> Have you added 127.0.0.1 in the clients.conf?
>
> yes.
>
> client localhost {
> ipaddr = 127.0.0.1
> secret = testing123
> nastype = other
> require_message_authenticator = no
> }
>
> Thanks,
> Rams.
>
>
>
> On Fri, Aug 7, 2009 at 3:30 PM,
> <freeradius-users-request at lists.freeradius.org> wrote:
>>
>>
>> Message: 2
>> Date: Fri, 7 Aug 2009 11:58:56 +0200
>> From: Rokkhan <rokkhan at gmail.com>
>> Subject: Re: Freeradius2.1.6 installation problem
>> To: FreeRadius users mailing list
>> <freeradius-users at lists.freeradius.org>
>> Message-ID:
>> <335289090908070258x710b5551n5faf93155ffeece8 at mail.gmail.com>
>> Content-Type: text/plain; charset=ISO-8859-1
>>
>> Have you added 127.0.0.1 in the clients.conf?
>>
>> 2009/8/7 ramesh p <rock786143 at gmail.com>:
>> > Unable to execute radtest.
>> >
>> > # radiusd -X
>> > FreeRADIUS Version 2.1.6, for host i686-pc-linux-gnu, built on Jul 30
>> > 2009
>> > at 07:17:32
>> > Copyright (C) 1999-2009 The FreeRADIUS server project and contributors.
>> > There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
>> > PARTICULAR PURPOSE.
>> > You may redistribute copies of FreeRADIUS under the terms of the
>> > GNU General Public License v2.
>> > Starting - reading configuration files ...
>> > including configuration file /usr/local/fnmt/radius2//etc/
>> >>
>> >> raddb/radiusd.conf
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/proxy.conf
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/clients.conf
>> >> including files in directory
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/ldap
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/pap
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/exec
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/expr
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/attr_filter
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/radutmp
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/preprocess
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/always
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/sqlcounter_expire_on_login
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/detail.example.com
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/attr_rewrite
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/etc_group
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/unix
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/mac2vlan
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/chap
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/smsotp
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/expiration
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/pam
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/inner-eap
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/acct_unique
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/wimax
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/smbpasswd
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/logintime
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/sql_log
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/realm
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/linelog
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/otp
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/mac2ip
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/checkval
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/krb5
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/mschap
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/counter
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/detail
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/digest
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/passwd
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/sradutmp
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/files
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/policy
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/detail.log
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/perl
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/ippool
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/modules/echo
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/eap.conf
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/policy.conf
>> >> including files in directory
>> >> /usr/local/fnmt/radius2//etc/raddb/sites-enabled/
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/sites-enabled/control-socket
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/sites-enabled/default
>> >> including configuration file
>> >> /usr/local/fnmt/radius2//etc/raddb/sites-enabled/inner-tunnel
>> >> including dictionary file /usr/local/fnmt/radius2//etc/raddb/dictionary
>> >> main {
>> >> prefix = "/usr/local/fnmt/radius2/"
>> >> localstatedir = "/usr/local/fnmt/radius2//var"
>> >> logdir = "/usr/local/fnmt/radius2//var/log/radius"
>> >> libdir = "/usr/local/fnmt/radius2//lib"
>> >> radacctdir = "/usr/local/fnmt/radius2//var/log/radius/radacct"
>> >> hostname_lookups = no
>> >> max_request_time = 30
>> >> cleanup_delay = 5
>> >> max_requests = 1024
>> >> allow_core_dumps = no
>> >> pidfile =
>> >> "/usr/local/fnmt/radius2//var/run/radiusd/radiusd.pid"
>> >> checkrad = "/usr/local/fnmt/radius2//sbin/checkrad"
>> >> debug_level = 0
>> >> proxy_requests = yes
>> >> log {
>> >> stripped_names = no
>> >> auth = no
>> >> auth_badpass = no
>> >> auth_goodpass = no
>> >> }
>> >> security {
>> >> max_attributes = 200
>> >> reject_delay = 1
>> >> status_server = yes
>> >> }
>> >> }
>> >> }
>> >> radiusd: #### Loading Realms and Home Servers ####
>> >> proxy server {
>> >> retry_delay = 5
>> >> retry_count = 3
>> >> default_fallback = no
>> >> dead_time = 120
>> >> wake_all_if_all_dead = no
>> >> }
>> >> home_server localhost {
>> >> ipaddr = 127.0.0.1
>> >> port = 1812
>> >> type = "auth"
>> >> secret = "testing123"
>> >> response_window = 20
>> >> max_outstanding = 65536
>> >> require_message_authenticator = no
>> >> zombie_period = 40
>> >> status_check = "status-server"
>> >> ping_interval = 30
>> >> check_interval = 30
>> >> num_answers_to_alive = 3
>> >> num_pings_to_alive = 3
>> >> revive_interval = 120
>> >> status_check_timeout = 4
>> >> irt = 2
>> >> mrt = 16
>> >> mrc = 5
>> >> mrd = 30
>> >> }
>> >> home_server_pool my_auth_failover {
>> >> type = fail-over
>> >> home_server = localhost
>> >> }
>> >> realm example.com {
>> >> auth_pool = my_auth_failover
>> >> }
>> >> realm LOCAL {
>> >> }
>> >> radiusd: #### Loading Clients ####
>> >> client localhost {
>> >> ipaddr = 127.0.0.1
>> >> require_message_authenticator = no
>> >> secret = "testing123"
>> >> nastype = "other"
>> >> }
>> >> client xx.xx.xx.xx {
>> >> require_message_authenticator = no
>> >> secret = "testing123"
>> >> shortname = "rparsa"
>> >> nastype = "other"
>> >> login = "radtest"
>> >> }
>> >> radiusd: #### Instantiating modules ####
>> >> instantiate {
>> >> Module: Linked to module rlm_exec
>> >> Module: Instantiating exec
>> >> exec {
>> >> wait = no
>> >> input_pairs = "request"
>> >> shell_escape = yes
>> >> }
>> >> Module: Linked to module rlm_expr
>> >> Module: Instantiating expr
>> >> Module: Linked to module rlm_expiration
>> >> Module: Instantiating expiration
>> >> expiration {
>> >> reply-message = "Password Has Expired "
>> >> }
>> >> Module: Linked to module rlm_logintime
>> >> Module: Instantiating logintime
>> >> logintime {
>> >> reply-message = "You are calling outside your allowed timespan
>> >> "
>> >> minimum-timeout = 60
>> >> }
>> >> }
>> >> radiusd: #### Loading Virtual Servers ####
>> >> server inner-tunnel {
>> >> modules {
>> >> Module: Checking authenticate {...} for more modules to load
>> >> Module: Linked to module rlm_pap
>> >> Module: Instantiating pap
>> >> pap {
>> >> encryption_scheme = "auto"
>> >> auto_header = no
>> >> }
>> >> Module: Linked to module rlm_chap
>> >> Module: Instantiating chap
>> >> Module: Linked to module rlm_mschap
>> >> Module: Instantiating mschap
>> >> mschap {
>> >> use_mppe = yes
>> >> require_encryption = no
>> >> require_strong = no
>> >> with_ntdomain_hack = no
>> >> }
>> >> Module: Linked to module rlm_unix
>> >> Module: Instantiating unix
>> >> unix {
>> >> radwtmp = "/usr/local/fnmt/radius2//var/log/radius/radwtmp"
>> >> }
>> >> Module: Linked to module rlm_eap
>> >> Module: Instantiating eap
>> >> eap {
>> >> default_eap_type = "md5"
>> >> timer_expire = 60
>> >> ignore_unknown_eap_types = no
>> >> cisco_accounting_username_bug = no
>> >> max_sessions = 2048
>> >> }
>> >> Module: Linked to sub-module rlm_eap_md5
>> >> Module: Instantiating eap-md5
>> >> Module: Linked to sub-module rlm_eap_leap
>> >> Module: Instantiating eap-leap
>> >> Module: Linked to sub-module rlm_eap_gtc
>> >> Module: Instantiating eap-gtc
>> >> gtc {
>> >> challenge = "Password: "
>> >> auth_type = "PAP"
>> >> }
>> >> Module: Linked to sub-module rlm_eap_tls
>> >> Module: Instantiating eap-tls
>> >> tls {
>> >> rsa_key_exchange = no
>> >> dh_key_exchange = yes
>> >> rsa_key_length = 512
>> >> dh_key_length = 512
>> >> verify_depth = 0
>> >> pem_file_type = yes
>> >> private_key_file =
>> >> "/usr/local/fnmt/radius2//etc/raddb/certs/server.pem"
>> >> certificate_file =
>> >> "/usr/local/fnmt/radius2//etc/raddb/certs/server.pem"
>> >> CA_file = "/usr/local/fnmt/radius2//etc/raddb/certs/ca.pem"
>> >> private_key_password = "whatever"
>> >> dh_file = "/usr/local/fnmt/radius2//etc/raddb/certs/dh"
>> >> random_file = "/usr/local/fnmt/radius2//etc/raddb/certs/random"
>> >> fragment_size = 1024
>> >> include_length = yes
>> >> check_crl = no
>> >> cipher_list = "DEFAULT"
>> >> make_cert_command =
>> >> "/usr/local/fnmt/radius2//etc/raddb/certs/bootstrap"
>> >> cache {
>> >> enable = no
>> >> lifetime = 24
>> >> max_entries = 255
>> >> }
>> >> }
>> >> Module: Linked to sub-module rlm_eap_ttls
>> >> Module: Instantiating eap-ttls
>> >> ttls {
>> >> default_eap_type = "md5"
>> >> copy_request_to_tunnel = no
>> >> use_tunneled_reply = no
>> >> virtual_server = "inner-tunnel"
>> >> include_length = yes
>> >> }
>> >> Module: Linked to sub-module rlm_eap_peap
>> >> Module: Instantiating eap-peap
>> >> peap {
>> >> default_eap_type = "mschapv2"
>> >> copy_request_to_tunnel = no
>> >> use_tunneled_reply = no
>> >> proxy_tunneled_request_as_eap = yes
>> >> virtual_server = "inner-tunnel"
>> >> }
>> >> Module: Linked to sub-module rlm_eap_mschapv2
>> >> Module: Instantiating eap-mschapv2
>> >> mschapv2 {
>> >> with_ntdomain_hack = no
>> >> }
>> >> Module: Checking authorize {...} for more modules to load
>> >> Module: Linked to module rlm_preprocess
>> >> Module: Instantiating preprocess
>> >> preprocess {
>> >> huntgroups = "/usr/local/fnmt/radius2//etc/raddb/huntgroups"
>> >> hints = "/usr/local/fnmt/radius2//etc/raddb/hints"
>> >> with_ascend_hack = no
>> >> ascend_channels_per_line = 23
>> >> with_ntdomain_hack = no
>> >> with_specialix_jetstream_hack = no
>> >> with_cisco_vsa_hack = no
>> >> with_alvarion_vsa_hack = no
>> >> }
>> >> Module: Checking preacct {...} for more modules to load
>> >> Module: Linked to module rlm_acct_unique
>> >> Module: Instantiating acct_unique
>> >> acct_unique {
>> >> key = "User-Name, Acct-Session-Id, NAS-IP-Address,
>> >> Client-IP-Address, NAS-Port"
>> >> }
>> >> Module: Checking accounting {...} for more modules to load
>> >> Module: Linked to module rlm_detail
>> >> Module: Instantiating detail
>> >> detail {
>> >> detailfile =
>> >>
>> >> "/usr/local/fnmt/radius2//var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"
>> >> header = "%t"
>> >> detailperm = 384
>> >> dirperm = 493
>> >> locking = no
>> >> log_packet_header = no
>> >> }
>> >> Module: Instantiating attr_filter.accounting_response
>> >> attr_filter attr_filter.accounting_response {
>> >> attrsfile =
>> >> "/usr/local/fnmt/radius2//etc/raddb/attrs.accounting_response"
>> >> key = "%{User-Name}"
>> >> }
>> >> Module: Checking session {...} for more modules to load
>> >> Module: Checking post-proxy {...} for more modules to load
>> >> Module: Checking post-auth {...} for more modules to load
>> >> } # modules
>> >> } # server
>> >> radiusd: #### Opening IP addresses and Ports ####
>> >> listen {
>> >> type = "auth"
>> >> ipaddr = *
>> >> port = 0
>> >> }
>> >> listen {
>> >> type = "acct"
>> >> ipaddr = *
>> >> port = 0
>> >> }
>> >> listen {
>> >> type = "control"
>> >> listen {
>> >> socket =
>> >> "/usr/local/fnmt/radius2//var/run/radiusd/radiusd.sock"
>> >> }
>> >> }
>> >> Listening on authentication address * port 1812
>> >> Listening on accounting address * port 1813
>> >> Listening on command file
>> >> /usr/local/fnmt/radius2//var/run/radiusd/radiusd.sock
>> >> Listening on proxy address * port 1814
>> >> Ready to process requests.
>> >>
>> >> I'm able to send packets using NTRadping tool however the packets are
>> >> rejected using radtest?
>> >> Why? Anthing wrong in the configuration?
>> >>
>> >> Thanks,
>> >> Rams.
>> >
>> > -
>> > List info/subscribe/unsubscribe? See
>> > http://www.freeradius.org/list/users.html
>> >
>>
>>
>> ------------------------------
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>>
>> End of Freeradius-Users Digest, Vol 52, Issue 36
>> ************************************************
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
More information about the Freeradius-Users
mailing list