Hello Paul,
Thursday, October 30, 2003, 6:52:58 AM, you wrote:
>> rlm_ippool: Searching for an entry for nas/port: zeus.domain.ru/61
>> modcall[post-auth]: module "main_pool" returns noop for request 0
PH> The only NOOP between these two lines is the one that checks if you've
PH> already got a Framed-IP-Address. As the below output indicates, you do
PH> already have one, so the rlm_ippool module NOOPs instead. If you set
PH> override=yes instead of override=no, the existing Framed-IP-Address in
PH> the response will be _replaced_ with one from the IP pool.
I have to be more careful with configuration next time. Thanks for showing
me the light :) Without any network configuration it works with
"override=yes"
rlm_ippool: Searching for an entry for nas/port: mynas.domain.ru/17
rlm_ippool: Allocating ip to nas/port: mynas.domain.ru/17
rlm_ippool: num: 1
rlm_ippool: Allocated ip 192.168.254.213 to client on nas mynas.domain.ru,port 17
modcall[post-auth]: module "main_pool" returns ok for request 0
modcall: group post-auth returns ok for request 0
Sending Access-Accept of id 251 to x.x.x.2:4921
Framed-Compression = Van-Jacobson-TCP-IP
Idle-Timeout = 900
Framed-MTU = 576
Framed-Protocol = PPP
Service-Type = Framed-User
Framed-IP-Address = 192.168.254.213
Framed-IP-Netmask = 255.255.255.0
Finished request 0
Going to the next request
Thread 1 waiting to be assigned a request
rad_recv: Accounting-Request packet from host x.x.x.2:4924, id=101, length=11 5
Thread 2 assigned request 1
Waking up in 5 seconds...
Thread 2 handling request 1, (1 handled so far)
User-Name = "lan"
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-IP-Address = 192.168.254.213
Framed-IP-Netmask = 0.0.0.0
NAS-Identifier = "mynas.domain.ru"
NAS-Port-Type = Async
NAS-Port = 17
Acct-Status-Type = Start
Acct-Session-Id = "11080-lan1067627926"
Acct-Multi-Session-Id = ""
Acct-Delay-Time = 0
But why Framed-IP-Netmask changed from 255.255.255.0 to 0.0.0.0?
PH> Alternatively, work out where the value 255.255.255.254 is coming from.
PH> It _might_ be a hint from the NAS, or there may be another module adding
PH> it (probably incorrectly).
It's coming from my LDAP radiusProfile and 'users' file, and i don't know why
it was there, a long time ago i've configured radius with help of some howto,
and i don't know by now, what is that magic address should mean. I removed it
from LDAP and 'users' file for now.
--
Best regards,
Alexander mailto:[EMAIL PROTECTED]
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
