Statistic from Status server

Peter Balsianok balsianok.peter at gmail.com
Wed Oct 25 12:46:42 CEST 2017


Hi,

I installed version 3.0.15 few minutes ago.
>From my side the problem still persists.

My steps:
1. simulate request from client (my server acts as proxy)
2. try to gather statistic for home-server (proxy server)

[radiusd at tdrad1 auth-test]$ echo "Message-Authenticator = 0x00,
FreeRADIUS-Statistics-Type = 131, FreeRADIUS-Stats-Server-IP-Address =
10.14.135.145,FreeRADIUS-Stats-Server-Port = 1812" |
/app/radius/freeradius-3.0.15/bin/radclient -x -t 90 -r 1 -d .
127.0.0.1:28121 status adminsecret
Sent Status-Server Id 104 from 0.0.0.0:52166 to 127.0.0.1:28121 length 74
    Message-Authenticator = 0x00
    FreeRADIUS-Statistics-Type = 131
    FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145
    FreeRADIUS-Stats-Server-Port = 1812
Received Access-Accept Id 104 from 127.0.0.1:28121 to 0.0.0.0:0 length 20

Debug log message (I have deleted some data -> security reason):
Ready to process requests
(0) Received Access-Request Id 141 from 127.0.0.1:53685 to 127.0.0.1:10812
length 335
(0)   NAS-Port-Type = Virtual
(0)   Tunnel-Max-Sessions = 65535
(0)   Service-Type = Framed-User
(0)   Tunnel-Type:0 = L2TP
(0)   Called-Station-Id = ""
(0)   Tunnel-Client-Endpoint:0 = ""
(0)   Tunnel-Client-Auth-Id:0 = ""
(0)   Platform-Type = 6
(0)   Connect-Info = "64000/57600"
(0)   LAC-Port = 141314377
(0)   NAS-IP-Address = 213.151.237.212
(0)   NAS-Port-Id = "L2TP LNS 218025"
(0)   OS-Version = "12.1.1.12p5"
(0)   Tunnel-Server-Endpoint:0 = "10.42.254.12"
(0)   Tunnel-Server-Auth-Id:0 = "N-101-BA-BAS-11"
(0)   Tunnel-Medium-Type:0 = IPv4
(0)   Calling-Station-Id = ""
(0)   Medium-Type = DSL
(0)   Tunnel-Function = LNS-Only
(0)   Framed-Protocol = PPP
(0)   Tunnel-Max-Tunnels = 32767
(0)   User-Name = ""
(0)   NAS-Identifier = "N-101-BA-BAS-11"
(0)   User-Password = ""
(0)   Acct-Tunnel-Connection = ""
(0)   NAS-Port = 2432914345
(0) # Executing section authorize from file
/app/radius/conf/auth-test/sites-enabled/default
(0)   authorize {
(0)     policy username {
(0)       if (!&User-Name || &User-Name == '') {
(0)       if (!&User-Name || &User-Name == '')  -> FALSE
(0)       elsif (&User-Name =~ /^[0-9]+$/) {
(0)       elsif (&User-Name =~ /^[0-9]+$/)  -> FALSE
(0)     } # policy username = noop
(0)     [preprocess] = ok
(0) suffix: Checking for suffix after "@"
(0) suffix: Looking up realm "" for User-Name = ""
(0) suffix: Found realm ""
(0) suffix: Adding Realm = ""
(0) suffix: Proxying request from user  to realm vseazd.sk
(0) suffix: Preparing to proxy authentication request to realm "vseazd.sk"
(0)     [suffix] = updated
(0)     update {
(0)       EXPAND %{Client-Shortname}
(0)          --> localhost
(0)       &Huntgroup-Name := localhost
(0)     } # update = noop
(0)     if ( &control:Proxy-To-Realm ) {
(0)     if ( &control:Proxy-To-Realm )  -> TRUE
(0)     if ( &control:Proxy-To-Realm )  {
(0)       return
(0)     } # if ( &control:Proxy-To-Realm )  = updated
(0)   } # authorize = updated
(0) Starting proxy to home server 10.14.135.145 port 1812
(0) # Executing section pre-proxy from file
/app/radius/conf/auth-test/sites-enabled/default
(0)   pre-proxy {
(0)   } # pre-proxy = ok
(0) Proxying request to home server 10.14.135.145 port 1812 timeout 7.000000
(0) Sent Access-Request Id 207 from 0.0.0.0:58214 to 10.14.135.145:1812
length 364
(0)   NAS-Port-Type = Virtual
(0)   Tunnel-Max-Sessions = 65535
(0)   Service-Type = Framed-User
(0)   Tunnel-Type:0 = L2TP
(0)   Called-Station-Id = ""
(0)   Tunnel-Client-Endpoint:0 = ""
(0)   Tunnel-Client-Auth-Id:0 = ""
(0)   Platform-Type = 6
(0)   Connect-Info = "64000/57600"
(0)   LAC-Port = 141314377
(0)   NAS-IP-Address = 213.151.237.212
(0)   NAS-Port-Id = "L2TP LNS 218025"
(0)   OS-Version = "12.1.1.12p5"
(0)   Tunnel-Server-Endpoint:0 = ""
(0)   Tunnel-Server-Auth-Id:0 = "N-101-BA-BAS-11"
(0)   Tunnel-Medium-Type:0 = IPv4
(0)   Calling-Station-Id := ""
(0)   Medium-Type = DSL
(0)   Tunnel-Function = LNS-Only
(0)   Framed-Protocol = PPP
(0)   Tunnel-Max-Tunnels = 32767
(0)   User-Name := ""
(0)   NAS-Identifier = "N-101-BA-BAS-11"
(0)   User-Password = ""
(0)   Acct-Tunnel-Connection = ""
(0)   NAS-Port = 2432914345
(0)   Event-Timestamp = "Oct 25 2017 12:24:45 CEST"
(0)   Message-Authenticator := 0x00
(0)   Proxy-State = 0x313431
Waking up in 0.3 seconds.
(0) Marking home server 10.14.135.145 port 1812 alive
(0) Clearing existing &reply: attributes
(0) Received Access-Accept Id 207 from 10.14.135.145:1812 to
10.14.131.103:58214 length 73
(0)   Framed-IP-Netmask = 255.255.255.255
(0)   Framed-IP-Address = 10.106.122.79
(0)   Framed-Protocol = PPP
(0)   Service-Type = Framed-User
(0)   Client-DNS-Pri = 10.106.77.101
(0)   Client-DNS-Sec = 10.106.77.102
(0)   Proxy-State = 0x313431
(0) Found Auth-Type = Accept
(0) Auth-Type = Accept, accepting the user
(0) # Executing section post-auth from file
/app/radius/conf/auth-test/sites-enabled/default
(0)   post-auth {
(0)     if ( &control:Module-Return-Code == "handled" ) {
(0)     EXPAND &control:Module-Return-Code
(0)        --> ok
(0)     if ( &control:Module-Return-Code == "handled" )  -> FALSE
(0)     policy post-proxy {
(0)       if ( &control:Proxy-To-Realm ) {
(0)       if ( &control:Proxy-To-Realm )  -> TRUE
(0)       if ( &control:Proxy-To-Realm )  {
(0)         if ( &control:Proxy-To-Realm =~ /^vse/ ) {
(0)         if ( &control:Proxy-To-Realm =~ /^vse/ )  -> TRUE
(0)         if ( &control:Proxy-To-Realm =~ /^vse/ )  {
(0)           switch &control:Proxy-To-Realm {
(0)             case vseazd.sk {
(0)               update {
(0)                 &reply:Context-Name := "vse_001"
(0)               } # update = noop
(0)               [ok] = ok
(0)             } # case vseazd.sk = ok
(0)           } # switch &control:Proxy-To-Realm = ok
(0)         } # if ( &control:Proxy-To-Realm =~ /^vse/ )  = ok
(0)         ... skipping elsif: Preceding "if" was taken
(0)         ... skipping elsif: Preceding "if" was taken
(0)         ... skipping else: Preceding "if" was taken
(0)       } # if ( &control:Proxy-To-Realm )  = ok
(0)     } # policy post-proxy = ok
(0)     if (! ok) {
(0)     if (! ok)  -> FALSE
(0)   } # post-auth = ok
(0) Login OK: [] (from client localhost port 2432914345 cli 421905594019)
(0) Sent Access-Accept Id 141 from 127.0.0.1:10812 to 127.0.0.1:53685
length 0
(0)   Framed-IP-Netmask = 255.255.255.255
(0)   Framed-IP-Address = 10.106.122.79
(0)   Framed-Protocol = PPP
(0)   Service-Type = Framed-User
(0)   Client-DNS-Pri = 10.106.77.101
(0)   Client-DNS-Sec = 10.106.77.102
(0)   Context-Name := ""
(0) Finished request
Waking up in 1.9 seconds.
(0) Cleaning up request packet ID 141 with timestamp +238
Ready to process requests
(1) Received Status-Server Id 200 from 127.0.0.1:44902 to 127.0.0.1:28121
length 62
(1)   Message-Authenticator = 0x5206af4c70fcf7b8ea096b7abdaec199
(1)   FreeRADIUS-Statistics-Type = 131
(1)   FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145
(1) # Executing group from file
/app/radius/conf/auth-test/sites-enabled/status
(1)   Autz-Type Status-Server {
(1)     [ok] = ok
(1)   } # Autz-Type Status-Server = ok
(1) Sent Access-Accept Id 200 from 127.0.0.1:28121 to 127.0.0.1:44902
length 0
(1) Finished request
Waking up in 1.9 seconds.
(1) Cleaning up request packet ID 200 with timestamp +295
Ready to process requests
(2) Received Status-Server Id 104 from 127.0.0.1:52166 to 127.0.0.1:28121
length 74
(2)   Message-Authenticator = 0x834c1949bfcc9eb9752eeb202a2b3ef0
(2)   FreeRADIUS-Statistics-Type = 131
(2)   FreeRADIUS-Stats-Server-IP-Address = 10.14.135.145
(2)   FreeRADIUS-Stats-Server-Port = 1812
(2) # Executing group from file
/app/radius/conf/auth-test/sites-enabled/status
(2)   Autz-Type Status-Server {
(2)     [ok] = ok
(2)   } # Autz-Type Status-Server = ok
(2) Sent Access-Accept Id 104 from 127.0.0.1:28121 to 127.0.0.1:52166
length 0
(2) Finished request
Waking up in 1.9 seconds.
(2) Cleaning up request packet ID 104 with timestamp +968
Ready to process requests


On Tue, Oct 24, 2017 at 8:31 PM, Alan DeKok <aland at deployingradius.com>
wrote:

> On Oct 24, 2017, at 7:18 AM, Peter Balsianok <balsianok.peter at gmail.com>
> wrote:
> >
> > I want to retrieve statistic for particular home server via
> Status-Server.
> > but server sends empty answer. At the end of debug log you can find
> request.
>
>   It works for me with 3.0.15.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>


More information about the Freeradius-Users mailing list