Freeradius 3.0.4 DHCP MYSQL MAC Auth dhclient

bubulak at radiolan.sk bubulak at radiolan.sk
Sun Sep 21 19:11:44 CEST 2014


Hi,

On 21.09.2014 18:14, Alan DeKok wrote:
> bubulak at radiolan.sk wrote:
>> Hi,
>> i am sorry for that. I was not sure what i am doing wrong. It is look's
>> like problem on isc dhclient (4.2.2) program which is no accept DHCP
>> OFFER from freeradius DHCP Server (dhclient end's with "No DHCPOFFERS
>> received."
>>   and packet ispection says that DHCP Offer packet arrived). So i
>> compared packets between freeradius with dhcpcd5 and isc-dhcpd with isc
>> dhclient.
>> DHCP discover look same on both pairs. In DHCP Offer is differences in
>> Next Server IP Address and DSCP. Freeradius send's IP of DHCP server and
>> DSCP 0x00. ISC send's IP 0.0.0.0 and DSCP is 0x04.
>    The DSCP value shouldn't matter.  And what's the "next server IP
> address" option?  Do you mean "OPTION:  54 (  4) Server identifier" ?
This is not option 54 section. It is before OPTION parameters.
packet from freeradius (dhcpcd5) produce:
Bootstrap Protocol ->
Your (client) IP address: 193.93.72.41 (193.93.72.41)
Next server IP address: 193.93.72.40 (193.93.72.40)

packet from isc-dhcpd (isc dhclient) produce:
Bootstrap Protocol ->
Your (client) IP address: 193.93.72.41 (193.93.72.41)
Next server IP address: 0.0.0.0 (0.0.0.0)

I include both packets in hexdump format (if you want you cat import 
packets to wireshark through File->Import From HEX Dump):
dhcpcd5-dhcpoffer.hexdump - dhcp offer packet from freeradius server
isc-dhclient-dhcpoffer.hexdump - dhcp offer packet from isc-dhcpd server

I don't know if this exactly is why ISC's dhclient don't recognize DHCP 
OFFER packet from FreeRadius server. But it is first look difference.
>> Its look same as in thread here
>> http://lists.freeradius.org/pipermail/freeradius-users/2014-March/070878.html
>> .
>> Honestly i don't know if is bug. Can you please direct me how to debug
>> this problem?
>    Post information which is USEFUL.  Posting huge logs with a comment of
> "it doesn't work" is useless.  Posting nearly content-free comments is
> useless, too.
>
>    WHAT DOES ISC DHCP produce?  You don't say.  And don't just dump a
> packet, point to WHICH FIELDS are different.  And include the WHOLE
> PACKET, including ethernet and IP layers.
>
>    Then, do the same thing for FreeRADIUS.
>
>    When you make it hard for us to see what's going on, you make it hard
> for us to help you.
>
>    Describe CLEARLY what is going wrong.  Be SPECIFIC.
>
>    Alan Dekok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Thank you for patience
Bubulak
-------------- next part --------------
0000   00 16 3e c3 3a d1 00 16 3e 3d bd 4f 08 00 45 00  ..>.:...>=.O..E.
0010   01 48 be 70 00 00 40 11 a8 28 c1 5d 48 28 c1 5d  .H.p.. at ..(.]H(.]
0020   48 29 00 43 00 44 01 34 14 52 02 01 06 00 5f 68  H).C.D.4.R...._h
0030   61 6f 00 00 00 00 00 00 00 00 c1 5d 48 29 c1 5d  ao.........]H).]
0040   48 28 00 00 00 00 00 16 3e c3 3a d1 00 00 00 00  H(......>.:.....
0050   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0060   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0070   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0090   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00a0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00b0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00c0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00d0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00e0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00f0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0110   00 00 00 00 00 00 63 82 53 63 35 01 02 01 04 ff  ......c.Sc5.....
0120   ff ff c0 03 04 c1 5d 48 1e 06 04 c1 5d 48 0a 0f  ......]H....]H..
0130   0b 72 61 64 69 6f 6c 61 6e 2e 73 6b 2a 04 c1 5d  .radiolan.sk*..]
0140   48 0b 33 04 00 00 02 58 36 04 c1 5d 48 28 39 02  H.3....X6..]H(9.
0150   05 dc ff 00 00 00                                ......
-------------- next part --------------
0000   00 16 3e c3 3a d1 00 16 3e 3d bd 4f 08 00 45 10  ..>.:...>=.O..E.
0010   01 48 00 00 00 00 80 11 26 89 c1 5d 48 28 c1 5d  .H......&..]H(.]
0020   48 29 00 43 00 44 01 34 f0 67 02 01 06 00 2d c5  H).C.D.4.g....-.
0030   e8 09 00 00 00 00 00 00 00 00 c1 5d 48 29 00 00  ...........]H)..
0040   00 00 00 00 00 00 00 16 3e c3 3a d1 00 00 00 00  ........>.:.....
0050   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0060   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0070   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0090   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00a0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00b0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00c0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00d0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00e0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00f0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0110   00 00 00 00 00 00 63 82 53 63 35 01 05 36 04 c1  ......c.Sc5..6..
0120   5d 48 28 33 04 00 00 02 58 01 04 ff ff ff c0 03  ]H(3....X.......
0130   04 c1 5d 48 1e 0f 0b 72 61 64 69 6f 6c 61 6e 2e  ..]H...radiolan.
0140   73 6b 06 08 c1 5d 48 0a c1 5d 48 01 ff 00 00 00  sk...]H..]H.....
0150   00 00 00 00 00 00                                ......


More information about the Freeradius-Users mailing list