FreeRadius 3.0.23 didn't reply on Status-Server request
Tal Nur
nurtal at yahoo.com
Thu Jun 17 06:10:42 CEST 2021
Dear Alan,
The tcpdump output from FR3.0.23 server listening on the interface enp5s0 (the only interface of the server) definitely shows that FR has received Status-Server message:
$ sudo tcpdump -i enp5s0 port 1812
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on enp5s0, link-type EN10MB (Ethernet), capture size 262144 bytes
10:08:51.557705 IP 192.168.1.13.54094 > politex.radius: RADIUS, Status-Server (12), id: 0x00 length: 38
10:09:22.557619 IP 192.168.1.13.54094 > politex.radius: RADIUS, Status-Server (12), id: 0x00 length: 38
10:09:48.557700 IP 192.168.1.13.54094 > politex.radius: RADIUS, Status-Server (12), id: 0x00 length: 38
192.168.1.13 is the FLR server which configured as a client to server politex (192.168.1.130).
192.168.1.13 sends three Status-Server requests to 192.168.1.130 host with installed FR3.0.23, but no response.
Regards, Talgat
On Wednesday, June 16, 2021, 07:01:54 PM GMT+6, Alan DeKok <aland at deployingradius.com> wrote:
On Jun 16, 2021, at 6:38 AM, Tal Nur via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> Recently I installed FR 3.0.23 as Eduroam IdP&SP server for one university in my country. Installation was ok.
> But when I tested the exchange of Radius messages between country federated level radius server (192.168.1.13) and the university FR (192.168.1.130) I didn't see responses to Status-Server request. The another university FR3.0.16 responded with Access-Accept message according rfc5997.
It works for me when I test it here.
> Here is two output:
>
> Output of FR3.0.23 without response
> admin at politex:~$ sudo tcpdump -i enp5s0 port 1812
We don't need to see tcpdump output. See http://wiki.freeradius.org/list-help
> Below the output of FR3.0.23 freeradius -X:
> ...
> Ready to process requests
Which doesn't show it receiving any packets. See http://wiki.freeradius.org/list-help
My guess is that FreeRADIUS isn't receiving the Status-Server packets.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
More information about the Freeradius-Users
mailing list