Reply-Radius

Alan Buxey alan.buxey at gmail.com
Thu May 4 13:33:32 CEST 2017


Sent Access-Accept Id 188 from 0.0.0.0:1812 to 172.17.40.182:1645 length 0

(18)   Cisco-AVPair = "mobileip:spi#0=spi 101 key hex
49BA268AD1D4996AA571071377DE0602"

(18)   Service-Type = Framed-User

there

alan

On 4 May 2017 at 06:50, Ejaz <mejaz at cyberia.net.sa> wrote:
> Hello,
>
>
>
> Here is the debug output. Where I can exactly see reply from radius to NAS, please give me a clue, thanks in advance.
>
>
>
> =======================================================================================================================
>
>
>
> WHERE usergroup.Username = '10.10.92.230' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id
>
> (18) sql: Executing select query: SELECT radgroupcheck.id, radgroupcheck.GroupName, radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck, usergroup WHERE usergroup.Username = '10.10.92.230' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id
>
> (18) sql: Group "PD": Conditional check items matched
>
> (18) sql: Group "PD": Merging assignment check items
>
> (18) sql:   Service-Type := Framed-User
>
> (18) sql: EXPAND SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, radgroupreply.Value, radgroupreply.op FROM radgroupreply, usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id
>
> (18) sql:    --> SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, radgroupreply.Value, radgroupreply.op FROM radgroupreply, usergroup WHERE usergroup.Username = '10.10.92.230' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id
>
> (18) sql: Executing select query: SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, radgroupreply.Value, radgroupreply.op FROM radgroupreply, usergroup WHERE usergroup.Username = '10.10.92.230' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id
>
> (18) sql: Group "PD": Merging reply items
>
> (18) sql:   Service-Type := Framed-User
>
> rlm_sql (sql): Released connection (27)
>
> rlm_sql (sql): Need 2 more connections to reach 10 spares
>
> rlm_sql (sql): Opening additional connection (28), 1 of 31 pending slots used
>
> (18)     [sql] = ok
>
> (18)     [expiration] = noop
>
> (18)     [logintime] = noop
>
> (18)     [pap] = updated
>
> (18)   } # authorize = updated
>
> (18) Found Auth-Type = PAP
>
> (18) # Executing group from file /usr/local/freeradius3/etc/raddb/sites-enabled/default
>
> (18)   Auth-Type PAP {
>
> (18) pap: Login attempt with password
>
> (18) pap: Comparing with "known good" Cleartext-Password
>
> (18) pap: User authenticated successfully
>
> (18)     [pap] = ok
>
> (18)   } # Auth-Type PAP = ok
>
> (18) # Executing section post-auth from file /usr/local/freeradius3/etc/raddb/sites-enabled/default
>
> (18)   post-auth {
>
> (18)     update {
>
> (18)       No attributes updated
>
> (18)     } # update = noop
>
> (18) sql: EXPAND .query
>
> (18) sql:    --> .query
>
> (18) sql: WARNING: No such configuration item .query
>
> (18)     [sql] = noop
>
> (18)     [exec] = noop
>
> (18)     policy remove_reply_message_if_eap {
>
> (18)       if (&reply:EAP-Message && &reply:Reply-Message) {
>
> (18)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
>
> (18)       else {
>
> (18)         [noop] = noop
>
> (18)       } # else = noop
>
> (18)     } # policy remove_reply_message_if_eap = noop
>
> (18)   } # post-auth = noop
>
> (18) Sent Access-Accept Id 188 from 0.0.0.0:1812 to 172.17.40.182:1645 length 0
>
> (18)   Cisco-AVPair = "mobileip:spi#0=spi 101 key hex 49BA268AD1D4996AA571071377DE0602"
>
> (18)   Service-Type = Framed-User
>
> (18) Finished request
>
> Waking up in 4.9 seconds.
>
> (18) Cleaning up request packet ID 188 with timestamp +1543
>
> Ready to process requests
>
> ===================================================================================================
>
>
>
> -----Original Message-----
> From: Freeradius-Users [mailto:freeradius-users-bounces+mejaz=cyberia.net.sa at lists.freeradius.org] On Behalf Of Alan DeKok
> Sent: Sunday, April 30, 2017 6:02 PM
> To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
> Subject: Re: Reply-Radius
>
>
>
> On Apr 30, 2017, at 9:16 AM, Ejaz < <mailto:mejaz at cyberia.net.sa> mejaz at cyberia.net.sa> wrote:
>
>>
>
>> when the user gets authenticated, the Radius will send some
>
>> confirmation to router about that particular user?
>
>>
>
>> How can I check this
>
>
>
>   Read the debug output of FreeRADIUS.  You can see the reply it's sending to the client.
>
>
>
>   Alan DeKok.
>
>
>
>
>
> -
>
> List info/subscribe/unsubscribe? See  <http://www.freeradius.org/list/users.html> http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list