No Response from radius server
mohamad buvaydanı
starking123eng at gmail.com
Thu Aug 13 08:18:46 CEST 2020
I have freeradius 3.0 which is installed on ubuntu 18.10 ,
I am working on hotspot system using Mikrotik with freeradius , I was able
to send login Request from Mikrotik to radius server without any problem ,
but then I enabled Ufw in ubuntu machine ,
then I disabled UFW ,
Now Mikrotik can send request to freeradius but freeradius can not send
response to Mikrotik , I don't know what is the problem , I disabled UFW
and even I removed it from the server ,but still Mikrotik Can not get
response from Radius
this is the debug of Freeradius
(0) [expiration] = noop
(0) [logintime] = noop
(0) accessperiod: WARNING: Couldn't find check attribute,
control:Access-Period, doing nothing...
(0) [accessperiod] = noop
(0) pap: WARNING: Auth-Type already set. Not setting to PAP
(0) [pap] = noop
(0) } # authorize = ok
(0) Found Auth-Type = Accept
(0) Auth-Type = Accept, accepting the user
(0) # Executing section post-auth from file
/etc/freeradius/3.0/sites-enabled/default
(0) post-auth {
(0) update {
(0) No attributes updated
(0) } # update = noop
(0) sql: EXPAND .query
(0) sql: --> .query
(0) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (2)
(0) sql: EXPAND %{User-Name}
(0) sql: --> test
(0) sql: SQL-User-Name set to 'test'
(0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply,
authdate) VALUES ( '%{SQL-User-Name}',
'%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')
(0) sql: --> INSERT INTO radpostauth (username, pass, reply,
authdate) VALUES ( 'test', '0x8da5209f622859ac89fd640527cb56139a',
'Access-Accept', '2020-08-12 21:07:21')
(0) sql: Executing query: INSERT INTO radpostauth (username, pass,
reply, authdate) VALUES ( 'test',
'0x8da5209f622859ac89fd640527cb56139a', 'Access-Accept', '2020-08-12
21:07:21')
(0) sql: SQL query returned: success
(0) sql: 1 record(s) updated
rlm_sql (sql): Released connection (2)
(0) [sql] = ok
(0) [exec] = noop
(0) policy remove_reply_message_if_eap {
(0) if (&reply:EAP-Message && &reply:Reply-Message) {
(0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
(0) else {
(0) [noop] = noop
(0) } # else = noop
(0) } # policy remove_reply_message_if_eap = noop
(0) } # post-auth = ok
(0) Sent Access-Accept Id 23 from 172.16.1.148:1812 to
172.16.1.252:40180 length 0
as u see from the last line , Freeradius sending Access-accept to
Mikrotik , but this response not received by mikroitk and Mikrotik
through
Login Feild No Response From Radius
I tested Mikrotik with another freeradius server and it is working
without any problem
So , I think there are somethings which prevent the response packet
to Mikrotik .
More information about the Freeradius-Users
mailing list