AW: freeradius 3 + mysql configure

Kiefer, Jonas jonas.kiefer at classen.de
Mon Feb 29 16:10:30 CET 2016


Hi,

thats the dubug output from the procurve:

0000:00:14:48.40 IP  mIpAdMCtrl:IPM_NBR_STALE_ALARM:  [ 13 reps ]
0000:00:14:49.33 IP  mIpAdMCtrl:IPS_AGE_TIMER:
0000:00:14:50.21 LLDP mlldpCtrl: lldp refresh pkt sent out port : 9
0000:00:14:51.10 SNMP mSnmpEvt:Received SNMP_COLDSTART_TIMER_indic message
0000:00:15:11.10 SNMP mSnmpEvt:Received SNMP_COLDSTART_TIMER_indic message
0000:00:15:15.35 LLDP mlldpCtrl: lldp pkt received on port : 9
0000:00:15:15.35 LLDP mlldpCtrl: refresh frame on port : 9. Updating neighbor
 data ...
0000:00:15:15.35 LLDP mlldpCtrl: lldp : no more MED neighbors
0000:00:15:15.47 IP  mIpPktRecv:s=client_IP_jonas(switch_vlan) d=procurve_switch_ip recv
0000:00:15:15.47 IP  mIpPktRecv:s=procurve_switch_ip d=client_IP_jonas(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:15.48 IP  mIpPktRecv:s=client_IP_jonas(switch_vlan) d=procurve_switch_ip recv
0000:00:15:15.48 IP  InetServer:s=procurve_switch_ip d=client_IP_jonas(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:15.48 IP  mIpPktRecv:s=client_IP_jonas(switch_vlan) d=procurve_switch_ip recv
0000:00:15:15.48 IP  mIpPktRecv:s=client_IP_jonas(switch_vlan) d=procurve_switch_ip recv
0000:00:15:15.48 IP  mIpPktRecv:s=procurve_switch_ip d=client_IP_jonas(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:15.53 IP  mIpPktRecv:s=client_IP_jonas(switch_vlan) d=procurve_switch_ip recv
0000:00:15:15.73 IP  InetServer:s=procurve_switch_ip d=client_IP_jonas(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:16.19 IP  InetServer:s=procurve_switch_ip d=client_IP_jonas(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:16.24 IP  mIpPktRecv:s=client_IP_jonas(switch_vlan) d=procurve_switch_ip recv
0000:00:15:16.24 IP  mIpPktRecv:s=procurve_switch_ip d=client_IP_jonas(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:16.24 IP  mIpPktRecv:s=client_IP_jonas(switch_vlan) d=procurve_switch_ip recv
0000:00:15:16.24 IP  InetServer:s=procurve_switch_ip d=client_IP_jonas(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:16.29 IP  mIpPktRecv:s=client_IP_jonas(switch_vlan) d=procurve_switch_ip recv
0000:00:15:18.01 IP  mIpPktRecv:s=client_IP_jonas(switch_vlan) d=procurve_switch_ip recv
0000:00:15:18.01 LOGA tSsh0:user_login_lookup: name='test' addr=client_IP_jonas
   priv=noauth status=SUCCESS
0000:00:15:18.01 IP  InetServer:s=procurve_switch_ip d=client_IP_jonas(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:18.06 IP  mIpPktRecv:s=client_IP_jonas(switch_vlan) d=procurve_switch_ip recv
0000:00:15:19.59 IP  mIpPktRecv:s=client_IP_jonas(switch_vlan) d=procurve_switch_ip recv
0000:00:15:19.60 RAD  mRadiusCtrl:Received RADIUS MSG: AUTH REQUEST, session: 7,
   access method: SSH.
0000:00:15:19.60 LOGA mSshAlrm:user_login_lookup: name='test'
   addr=client_IP_jonas priv=noauth status=SUCCESS
0000:00:15:19.60 RAD  mRadiusCtrl:Received RADIUS MSG: DATA, session: 7.
0000:00:15:19.60 RAD  mRadiusCtrl:Received RADIUS MSG: DATA, session: 7.
0000:00:15:19.60 IP  InetServer:s=procurve_switch_ip d=radius_server_ip(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:19.60 RAD  mRadiusCtrl:ACCESS REQUEST id: 18 to radius_server_ip session:
   7, access method: SSH, User-Name: test, Calling-Station-Id: client_IP_jonas,
   NAS-IP-Address: 211.6.168.192.
0000:00:15:19.60 IP  mIpPktRecv:s=radius_server_ip(switch_vlan) d=procurve_switch_ip recv
0000:00:15:19.60 RAD  tRadiusR:ACCESS CHALLENGE id: 18 from radius_server_ip
   received.
0000:00:15:19.60 IP  InetServer:s=procurve_switch_ip d=radius_server_ip(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:19.60 RAD  tRadiusR:ACCESS REQUEST id: 19 to radius_server_ip session: 7,
   access method: SSH, User-Name: test, Calling-Station-Id: client_IP_jonas,
   NAS-IP-Address: 211.6.168.192.
0000:00:15:19.61 IP  mIpPktRecv:s=radius_server_ip(switch_vlan) d=procurve_switch_ip recv
0000:00:15:19.61 RAD  tRadiusR:ACCESS CHALLENGE id: 19 from radius_server_ip
   received.
0000:00:15:19.61 IP  InetServer:s=procurve_switch_ip d=radius_server_ip(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:19.61 RAD  tRadiusR:ACCESS REQUEST id: 20 to radius_server_ip session: 7,
   access method: SSH, User-Name: test, Calling-Station-Id: client_IP_jonas,
   NAS-IP-Address: 211.6.168.192.
0000:00:15:19.61 IP  mIpPktRecv:s=radius_server_ip(switch_vlan) d=procurve_switch_ip recv
0000:00:15:19.61 RAD  tRadiusR:ACCESS CHALLENGE id: 20 from radius_server_ip
   received.
0000:00:15:19.61 IP  InetServer:s=procurve_switch_ip d=radius_server_ip(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:19.61 RAD  tRadiusR:ACCESS REQUEST id: 21 to radius_server_ip session: 7,
   access method: SSH, User-Name: test, Calling-Station-Id: client_IP_jonas,
   NAS-IP-Address: 211.6.168.192.
0000:00:15:19.61 IP  mIpPktRecv:s=radius_server_ip(switch_vlan) d=procurve_switch_ip recv
0000:00:15:19.61 RAD  tRadiusR:ACCESS CHALLENGE id: 21 from radius_server_ip
   received.
0000:00:15:19.61 IP  InetServer:s=procurve_switch_ip d=radius_server_ip(switch_vlan)
   g=192.168.6.254 xmit
0000:00:15:19.62 RAD  tRadiusR:ACCESS REQUEST id: 22 to radius_server_ip session: 7,
   access method: SSH, User-Name: test, Calling-Station-Id: client_IP_jonas,
   NAS-IP-Address: 211.6.168.192.
0000:00:15:19.62 RAD  tRadiusR:ACCESS CHALLENGE id: 22 from radius_server_ip
   received.
0000:00:15:19.62 LOGA tRadiusR:user_login_lookup: name='test'
   addr=client_IP_jonas priv=none status=FAILURE
0000:00:15:19.62 RAD  tRadiusR:Removing RADIUS REQUEST id: 22 from queue.
0000:00:15:20.25 LLDP mlldpCtrl: lldp refresh pkt sent out port : 9
0000:00:15:23.13 IP  mIpAdMCtrl:IPM_NBR_STALE_ALARM:  [ 11 reps ]
0000:00:15:23.30 IP  mIpAdMCtrl:IPM_GENMSG: count=1 pending=1 source=local
   next.msgId=0
0000:00:15:23.30 IP  mIpAdMCtrl:  IP_ARPADD: flags=0x0 vrf=0 ip=192.168.6.251
   ifIndex=207 vlan=2 vid=106 lport=0 mac=000000-000000 &pkt=0 &hcEntry=0
0000:00:15:23.30 IP  mIpAdMCtrl:IPM_GENMSG: count=1 pending=1 source=local
   next.msgId=0
0000:00:15:23.30 IP  mIpAdMCtrl:  IP_ARPUPDATE: flags=0xc icmpType=136 vrf=0
   ip=192.168.6.251 ifIndex=207 mac=000496-8fe99f port=9,9
0000:00:15:25.33 IP  mIpAdMCtrl:IPS_AGE_TIMER:
** Total debug messages = 74

I see only at line   0000:00:15:19.62 LOGA a failure.
I can not do anything with it.. 
Now i trie a firmware update 


-----Urspr√ľngliche Nachricht-----
Von: Freeradius-Users [mailto:freeradius-users-bounces+jonas.kiefer=classen.de at lists.freeradius.org] Im Auftrag von A.L.M.Buxey at lboro.ac.uk
Gesendet: Montag, 29. Februar 2016 15:26
An: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Betreff: Re: freeradius 3 + mysql configure

Hi,

> OK after i set copy_request_to_tunnel = yes & use_tunneled_reply = yes in peap section of the eap config file it works as i imagine with.
> But with the Procurve switch it stops after the 4th request. But why? 

upgrade firmware on the device, turn on debugging on the switch to see what its doing or not liking?

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list