RE: mschav2 can't get connected

2009-02-05 Thread saman saman

Hi Ivan,I just not sure if the card broken because when I set it to use WPA 
then it's working perfectlybut why MSCHAPv2 & EAP-TLS didn't work?Will that be 
other reasons or missing some thing that cause the problem.should I send you 
the execution log?From: ssa...@hotmail.comto: 
freeradius-us...@lists.freeradius.orgsubject: RE: mschav2 can't get 
connectedDate: Tue, 3 Feb 2009 23:46:15 +0900






Hi Alan,Appreciated if you could give me some tips how to solve the problem.I 
ready have not idea why this happen or where did i get wrong..newbie.Thank in 
advance.> Date: Mon, 2 Feb 2009 14:50:04 +0100> From: 
al...@deployingradius.com> To: freeradius-users@lists.freeradius.org> Subject: 
Re: mschav2 can't get connected> > saman saman wrote:>> >> Hi..Can anyone help 
me. I can't get client connect to radius server.>> any suggestion on how to fix 
it..appreciated.>> Here the radius output:> ...>> EAP-Message = 
0x0101000501> >   Your supplicant is sending an empty identity.  This isn't 
permitted.> >   Alan DeKok.> -> List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.htmlGet what you want at ebay. Get rid of 
those unwanted christmas presents!
_
Get rid of those unwanted christmas presents! Get what you want at ebay. 
http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Frover%2Eebay%2Ecom%2Frover%2F1%2F705%2D10129%2D5668%2D323%2F4%3Fid%3D10&_t=763807330&_r=hotmailTAGLINES&_m=EXT-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: mschav2 can't get connected

2009-02-04 Thread saman saman

Hi Ivan,Thanks for your quick response.I'm using D Link DWA 510 PCI adaptor to 
connect to SmartBridge sB3210 AP (bridging). Is it the device problem or the 
Windows XP itself?what is the device in the market that you would recommend 
would solve such a problem?> To: freeradius-users@lists.freeradius.org> 
Subject: RE: mschav2 can't get connected> Date: Tue, 3 Feb 2009 15:55:39 +0100> 
From: t...@kalik.net> >>Hi Alan,Appreciated if you could give me some tips how 
to solve the problem.I ready have not idea why this happen or where did i get 
wrong..newbie.Thank in advance.>> > What are you using to connect to the AP? 
Whatever you are using is> broken. Fix it or get a new one.> > Ivan Kalik> 
Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html
_
Get rid of those unwanted christmas presents! Get what you want at ebay. 
http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Frover%2Eebay%2Ecom%2Frover%2F1%2F705%2D10129%2D5668%2D323%2F4%3Fid%3D10&_t=763807330&_r=hotmailTAGLINES&_m=EXT-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: mschav2 can't get connected

2009-02-03 Thread saman saman

Hi Alan,Appreciated if you could give me some tips how to solve the problem.I 
ready have not idea why this happen or where did i get wrong..newbie.Thank in 
advance.> Date: Mon, 2 Feb 2009 14:50:04 +0100> From: 
al...@deployingradius.com> To: freeradius-users@lists.freeradius.org> Subject: 
Re: mschav2 can't get connected> > saman saman wrote:>> >> Hi..Can anyone help 
me. I can't get client connect to radius server.>> any suggestion on how to fix 
it..appreciated.>> Here the radius output:> ...>> EAP-Message = 
0x0101000501> >   Your supplicant is sending an empty identity.  This isn't 
permitted.> >   Alan DeKok.> -> List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html
_
Get rid of those unwanted christmas presents! Get what you want at ebay. 
http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Frover%2Eebay%2Ecom%2Frover%2F1%2F705%2D10129%2D5668%2D323%2F4%3Fid%3D10&_t=763807330&_r=hotmailTAGLINES&_m=EXT-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

mschav2 can't get connected

2009-02-02 Thread saman saman

Hi..Can anyone help me. I can't get client connect to radius server.any 
suggestion on how to fix it..appreciated.Here the radius output:Going to the 
next request
Waking up in 4.9 seconds.
User-Name = "john"
NAS-IP-Address = 0.0.0.0
Framed-MTU = 1488
Called-Station-Id = "00:30:1a:29:03:66"
Calling-Station-Id = "00:1c:f0:10:56:b8"
NAS-Port-Type = Wireless-802.11
NAS-Identifier = "127.0.0.1"
Connect-Info = "CONNECT 11Mbps 802.11b"
State = 0x2e2e1d922d2b04150913ca69285527e1
EAP-Message = 0x020500061900
Message-Authenticator = 0xf3ce12fbfc579d77238be586aeef433a
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
rlm_realm: No '@' in User-Name = "john", looking up realm NULL
rlm_realm: No such realm "NULL"
++[suffix] returns noop
  rlm_eap: EAP packet type response id 5 length 6
  rlm_eap: Continuing tunnel setup.
++[eap] returns ok
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
+- entering group authenticate
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/peap
  rlm_eap: processing type peap
  rlm_eap_peap: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls: Received EAP-TLS ACK message
  rlm_eap_tls: ack handshake fragment handler
  eaptls_verify returned 1
  eaptls_process returned 13
  rlm_eap_peap: EAPTLS_HANDLED
++[eap] returns handled
EAP-Message = 
0x0106004f190028cf8fd6b39dddc11a23092d5ac5dbe80d40773189ee2e9a705859d3fcb1ccb0bec3b2d64f501fbac0a2e4d68161a9e646b9dc3e921d54190eaf26d9658df7f216030100040e00
Message-Authenticator = 0x
State = 0x2e2e1d922a2804150913ca69285527e1
Finished request 46.
Going to the next request
Waking up in 4.8 seconds.
User-Name = "john"
NAS-IP-Address = 0.0.0.0
Framed-MTU = 1488
Called-Station-Id = "00:30:1a:29:03:66"
Calling-Station-Id = "00:1c:f0:10:56:b8"
NAS-Port-Type = Wireless-802.11
NAS-Identifier = "127.0.0.1"
Connect-Info = "CONNECT 11Mbps 802.11b"
State = 0x2e2e1d922a2804150913ca69285527e1
EAP-Message = 
0x020601401980013616030101061102010017507e2bfc6cace25c10e8a2bc0fe8aa360f2b071b51363de465dacc8f210868470b8d57d54b0c41d3e2fd9b90697768c2e0d01f33df5eba91b2a8e5c7aa40e40af6e1a89b7d0951310271056840ead1d02cbbc8dcddc12dce27ccb5b7112ec5697c966d92b857f14013075bade26248666a8231f125698da53235ad80bb01880423bb7d6b6c0fb4f729959e5876893b795589d81fa384fb3bc426b1b424459af21de01ca8f1e61e4015703ebfc4b5fd9e0bc1fc62fbce7e9dca044805f35def1e7b560b93ba05b5483a2ea950adb72345843c062d1072ee234acc9649afd60c866ef885e1f3490a
EAP-Message = 
0x4ba37822b0bd1a7ea0cb3b34da4a4f5241eeb3cf84d9d2d414030100010116030100203959736f3c912439ed32a1d40f8039184eceff7a3e7916103b2987864910a40a
Message-Authenticator = 0x7563893321cf7c546a720b6d7940d1bf
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
rlm_realm: No '@' in User-Name = "john", looking up realm NULL
rlm_realm: No such realm "NULL"
++[suffix] returns noop
  rlm_eap: EAP packet type response id 6 length 253
  rlm_eap: Continuing tunnel setup.
++[eap] returns ok
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
+- entering group authenticate
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/peap
  rlm_eap: processing type peap
  rlm_eap_peap: Authenticate
  rlm_eap_tls: processing TLS
  TLS Length 310
rlm_eap_tls:  Length Included
  eaptls_verify returned 11
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0106], ClientKeyExchange
TLS_accept: SSLv3 read client key exchange A
  rlm_eap_tls: <<< TLS 1.0 ChangeCipherSpec [length 0001]
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0010], Finished
TLS_accept: SSLv3 read finished A
  rlm_eap_tls:>>> TLS 1.0 ChangeCipherSpec [length 0001]
TLS_accept: SSLv3 write change cipher spec A
  rlm_eap_tls:>>> TLS 1.0 Handshake [length 0010], Finished
TLS_accept: SSLv3 write finished A
TLS_accept: SSLv3 flush data
(other): SSL negotiation finished successfully
SSL Connection Established
  eaptls_process returned 13
  rlm_eap_peap: EAPTLS_HANDLED
++[eap] returns handled
EAP-Message = 
0x01070031190014030100010116030100206f92b1c2416afc363cc61e8b8b6ca0629a5c9126eed17062e9579417bb5eb047
Message-Authenticator = 0x
State = 0x2e2e1d922b2904150913ca69285527e1
Finished request 47.
Going to the next request
Waking up in 4.8 seconds.
Cleaning up request 42 ID 86 with timestamp +565
Cleaning up request 43 ID 88 with timestamp +565
Cleaning up request 44 ID 90 with timestamp +565
Cleaning up request 45 ID 92 with timestamp +565
Cleaning up request 46 ID 94 with timestamp +565
Cleaning up request 47 ID 96 with timestamp +565
Ready to process requests.
User-Name = "john"
NAS-IP-Address = 0.0.0.0
Framed-MTU = 1488
Call

Radius server & log not response

2009-01-20 Thread saman saman

Hi all,



I am newbie here, I have  a few problems  like to seek professional advice.

I have FreeRadius 2.0.4 running fine but when I check with radtest, it did'n't 
return any message accept or reject.

I tried in /var/log/radius/radius.log or

/usr/local/var/local/radius/radius.log but all were blank.



further the FreeRadius server also not response to client requst.



]# /usr/local/sbin/radiusd -X

FreeRADIUS Version 2.0.4, for host i686-pc-linux-gnu, built on Jan 20 2009 at 
22:49:37

Copyright (C) 1999-2008 The FreeRADIUS server project and contributors.

There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A

PARTICULAR PURPOSE.

You may redistribute copies of FreeRADIUS under the terms of the

GNU General Public License.

Starting - reading configuration files ...

including configuration file /usr/local/etc/raddb/radiusd.conf

including configuration file /usr/local/etc/raddb/proxy.conf

including configuration file /usr/local/etc/raddb/clients.conf

including configuration file /usr/local/etc/raddb/snmp.conf

including configuration file /usr/local/etc/raddb/eap.conf

including configuration file /usr/local/etc/raddb/sql.conf

including configuration file /usr/local/etc/raddb/sql/mysql/dialup.conf

including configuration file /usr/local/etc/raddb/sql/mysql/counter.conf

including configuration file /usr/local/etc/raddb/policy.conf

including files in directory /usr/local/etc/raddb/sites-enabled/

including configuration file /usr/local/etc/raddb/sites-enabled/default

including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel

including dictionary file /usr/local/etc/raddb/dictionary

main {

prefix = "/usr/local"

localstatedir = "/usr/local/var"

logdir = "/usr/local/var/log/radius"

libdir = "/usr/local/lib"

radacctdir = "/usr/local/var/log/radius/radacct"

hostname_lookups = no

max_request_time = 30

cleanup_delay = 5

max_requests = 1024

allow_core_dumps = no

pidfile = "/usr/local/var/run/radiusd/radiusd.pid"

checkrad = "/usr/local/sbin/checkrad"

debug_level = 0

proxy_requests = yes

 security {

max_attributes = 200

reject_delay = 1

status_server = yes

 }

}

 client localhost {

ipaddr = 127.0.0.1

netmask = 32

require_message_authenticator = yes

secret = "testing123"

shortname = "localhost"

nastype = "portslave"

 }

 client 192.168.0.206/24 {

require_message_authenticator = no

secret = "testing123-1"

shortname = "sB3010"

nastype = "portslave"

 }

radiusd:  Loading Realms and Home Servers 

 proxy server {

retry_delay = 5

retry_count = 3

default_fallback = no

dead_time = 120

wake_all_if_all_dead = no

 }

 home_server localhost {

ipaddr = 127.0.0.1

port = 1812

type = "auth"

secret = "testing123"

response_window = 20

max_outstanding = 65536

zombie_period = 40

status_check = "status-server"

ping_check = "none"

ping_interval = 30

check_interval = 30

num_answers_to_alive = 3

num_pings_to_alive = 3

revive_interval = 120

status_check_timeout = 4

 }

 home_server_pool my_auth_failover {

type = fail-over

home_server = localhost

 }

 realm example.com {

auth_pool = my_auth_failover

 }

 realm LOCAL {

 }

radiusd:  Instantiating modules 

 instantiate {

 Module: Linked to module rlm_exec

 Module: Instantiating exec

  exec {

wait = yes

input_pairs = "request"

shell_escape = yes

  }

 Module: Linked to module rlm_expr

 Module: Instantiating expr

 Module: Linked to module rlm_expiration

 Module: Instantiating expiration

  expiration {

reply-message = "Password Has Expired  "

  }

 Module: Linked to module rlm_logintime

 Module: Instantiating logintime

  logintime {

reply-message = "You are calling outside your allowed timespan  "

minimum-timeout = 60

  }

 }

radiusd:  Loading Virtual Servers 

server inner-tunnel {

 modules {

 Module: Checking authenticate {...} for more modules to load

 Module: Linked to module rlm_pap

 Module: Instantiating pap

  pap {

encryption_scheme = "auto"

auto_header = no

  }

 Module: Linked to module rlm_chap

 Module: Instantiating chap

 Module: Linked to module rlm_mschap

 Module: Instantiating mschap

  mschap {

use_mppe = no

require_encryption = yes

require_strong = yes

with_ntdomain_hack = no

  }

 Module: Linked to module rlm_unix

 Module: Instantiating unix

  unix {

radwtmp = "/usr/local/var/log/radius/radwtmp"

  }

 Module: Linked to module rlm_eap

 Module: Instantiating eap

  eap {

default_eap_type = "ttls"

t

RE: radius is not listening

2008-10-21 Thread saman saman

Hi Elizabeth,
Thanks for the quick response.
I tried
 #/usr/sbin/tcpdump -X host 127.0.0.1
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
(Nothing happening)

#/usr/sbin/tcpdump -X svr1.marind.com
15:20:55.301070 IP 192.168.1.50.63188> svr1.marind.com.domain:  13870+ A? 
b.rad.live.com. (32)vr
0x:  4500 003c a1c1  8011 1568 c0a8 0132  E.. 
svr1.marind.com.domain:  57001+ A? b.rad.live.com. (32)
0x:  4500 003c a1cb  8011 155e c0a8 0132  E.. 
svr1.marind.com.domain:  28694+ A? gfx2.hotmail.com. (34)
0x:  4500 003e a1cc  8011 155b c0a8 0132  E..>...[...2
0x0010:  c0a8 0105 d55b 0035 002a 1dc8 7016 0100  .[.5.*..p...
0x0020:  0001    0467 6678 3207 686f  .gfx2.ho
0x0030:  746d 6169 6c03 636f 6d00 0001 0001   tmail.com.
15:21:05.556816 IP 192.168.1.50.51451> svr1.marind.com.domain:  57001+ A? 
b.rad.live.com. (32)
0x:  4500 003c a1cd  8011 155c c0a8 0132  E.. 
svr1.marind.com.domain:  28694+ A? gfx2.hotmail.com. (34)
0x:  4500 003e a1ce  8011 1559 c0a8 0132  E..>...Y...2
0x0010:  c0a8 0105 d55b 0035 002a 1dc8 7016 0100  .[.5.*..p...
0x0020:  0001    0467 6678 3207 686f  .gfx2.ho
0x0030:  746d 6169 6c03 636f 6d00 0001 0001   tmail.com.
.etc

# /usr/sbin/lsof -i |grep -i radius
radiusd   3965root5u  IPv4  10123   UDP 192.168.0.10:radius
radiusd   3965root6u  IPv4  10125   UDP 192.168.0.10:radius-acct
radiusd   3965root7u  IPv4  10126   UDP 192.168.0.10:1814

#telnet 127.0.0.1
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused
telnet: Unable to connect to remote host: Connection refused

# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
220 svr1.marind.com ESMTP Sendmail 8.13.1/8.13.1; Tue, 21 Oct 2008 15:46:37 
+0700

#netstat -tna
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address   Foreign Address 
State
tcp0  0 0.0.0.0:32769   0.0.0.0:*   
LISTEN
tcp0  0 0.0.0.0:33060.0.0.0:*   
LISTEN
tcp0  0 0.0.0.0:139 0.0.0.0:*   
LISTEN
tcp0  0 127.0.0.1:783   0.0.0.0:*   
LISTEN
tcp0  0 0.0.0.0:111 0.0.0.0:*   
LISTEN
tcp0  0 0.0.0.0:21  0.0.0.0:*   
LISTEN
tcp0  0 192.168.1.5:53  0.0.0.0:*   
LISTEN
tcp0  0 192.168.0.10:53 0.0.0.0:*   
LISTEN
tcp0  0 127.0.0.1:530.0.0.0:*   
LISTEN
tcp0  0 127.0.0.1:631   0.0.0.0:*   
LISTEN
tcp0  0 0.0.0.0:31280.0.0.0:*   
LISTEN
tcp0  0 127.0.0.1:250.0.0.0:*   
LISTEN
tcp0  0 127.0.0.1:953   0.0.0.0:*   
LISTEN
tcp0  0 0.0.0.0:445 0.0.0.0:*   
LISTEN
tcp0  0 127.0.0.1:25127.0.0.1:32848 
TIME_WAIT
tcp0  0 :::993  :::*
LISTEN
tcp0  0 :::995  :::*
LISTEN
tcp0  0 :::110  :::*
LISTEN
tcp0  0 :::143  :::*
LISTEN
tcp0  0 :::80   :::*
LISTEN
tcp0  0 :::22   :::*
LISTEN
tcp0  0 :::443  :::*
LISTEN

Before I changed the freeradius setting from tls to peap..everything were fine..
I have mail server also and previously testing telnet localhost work fine.

"rules file" do you mean iptables?



> Date: Sun, 19 Oct 2008 21:46:37 -0700
> From: [EMAIL PROTECTED]
> To: freeradius-users@lists.freeradius.org
> Subject: Re: radius is not listening
> 
> a few more suggestions :)
> 
> What is in your rules file?
> 
> Can you telnet to localhost port 1812, how about 127.0.0.1 1812 (broken hosts 
> file mebbe)
> 
> also try this
> 
> lsof -i |grep -i radius
> 
> you should see radius listening
> 
> Liz
> 
> 
> On Sun, Oct 19, 2008 at 7:38 PM, saman saman <[EMAIL PROTECTED]> wrote:
> 
> HI Alan,
> what If radtest localhost also doesn't work either?
> here the iptables out

RE: radius is not listening

2008-10-19 Thread saman saman

HI Alan,
what If radtest localhost also doesn't work either?
here the iptables output
#iptables -L -n
Chain INPUT (policy DROP)
target prot opt source   destination
ACCEPT all  --  127.0.0.10.0.0.0/0
ACCEPT all  --  192.168.1.2  0.0.0.0/0
ACCEPT all  --  192.168.0.10 0.0.0.0/0
ACCEPT all  --  192.168.0.0/24   0.0.0.0/0
ACCEPT all  --  0.0.0.0/0192.168.1.0/24
ACCEPT all  --  .0.0.0/0192.168.1.2 state 
RELATED,ESTABLISHED
svr1   tcp  --  0.0.0.0/00.0.0.0/0   tcp dpt:21
svr1   tcp  --  0.0.0.0/00.0.0.0/0   tcp dpt:22
srv1   tcp  --  0.0.0.0/00.0.0.0/0   tcp dpt:80
srv1   tcp  --  0.0.0.0/00.0.0.0/0   tcp dpt:80
svr1   tcp  --  0.0.0.0/00.0.0.0/0   tcp dpt:110
svr1   tcp  --  0.0.0.0/00.0.0.0/0   tcp dpt:113
ACCEPT udp  --  0.0.0.0/00.0.0.0/0   udp dpt:1812
ACCEPT udp  --  0.0.0.0/00.0.0.0/0   udp dpt:1813
ACCEPT udp  --  0.0.0.0/00.0.0.0/0   udp dpt:1814
ACCEPT udp  --  0.0.0.0/00.0.0.0/0   udp dpt:53
ACCEPT udp  --  0.0.0.0/00.0.0.0/0   udp dpt:110
ACCEPT udp  --  0.0.0.0/00.0.0.0/0   udp dpt:2074
ACCEPT udp  --  0.0.0.0/00.0.0.0/0   udp dpt:4000
ACCEPT icmp --  0.0.0.0/00.0.0.0/0   icmp type 8
ACCEPT icmp --  0.0.0.0/00.0.0.0/0   icmp type 11
ACCEPT icmp --  0.0.0.0/00.0.0.0/0   icmp type 80

Chain FORWARD (policy DROP)
target prot opt source   destination
ACCEPT all  --  0.0.0.0/00.0.0.0/0
ACCEPT all  --  0.0.0.0/00.0.0.0/0
ACCEPT all  --  0.0.0.0/00.0.0.0/0   state 
RELATED,ESTABLISHED

Chain OUTPUT (policy DROP)
target prot opt source   destination
ACCEPT all  --  127.0.0.10.0.0.0/0
ACCEPT all  --  192.168.0.10 0.0.0.0/0
ACCEPT all  --  192.168.1.2  0.0.0.0/0
ACCEPT all  --  192.168.1.2060.0.0.0/0

Chain mars (6 references)
target prot opt source   destination
ACCEPT tcp  --  0.0.0.0/00.0.0.0/0   tcp flags:0x16/0x02
ACCEPT tcp  --  0.0.0.0/00.0.0.0/0   state 
RELATED,ESTABLISHED
DROP   tcp  --  0.0.0.0/00.0.0.0/0

#radtest John hello localhost 0 testing
User-Name = "John"
User-Password = "hello"
NAS-IP-Address = 192.168.1.2
NAS-Port = 0
User-Name = "John"
User-Password = "hello"
NAS-IP-Address = 192.168.1.2
NAS-Port = 0
User-Name = "John"
User-Password = "hello"
NAS-IP-Address = 192.168.1.2
NAS-Port = 0
User-Name = "John"
User-Password = "hello"
NAS-IP-Address = 192.168.1.2
NAS-Port = 0
User-Name = "John"
User-Password = "hello"
NAS-IP-Address = 192.168.1.2
NAS-Port = 0
User-Name = "John"
User-Password = "hello"
NAS-IP-Address = 192.168.1.2
NAS-Port = 0

The above iptables output shows the udp 1812, 1813 & 1814 are all accepted.

> > Hi I am a newbie and recently would like to try to experience 
> > freeradius-server-2.0.4 but unfortunately I have problems can't solved.
> > The freeradius is running ok but when attempt to authenticate the server is 
> > just not responding to clients request.
> ...
> > #radiusd -X
> ...
> > Ready to process requests.
> 
>   The point of debug mode is to show it processing packets.
> 
>   If you've sent it packets and it doesn't receive them, fix the
> firewall on your OS to allow RADIUS packets.
> 
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

_


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


radius is not listening

2008-10-18 Thread saman saman


Hi I am a newbie and recently would like to try to experience 
freeradius-server-2.0.4 but unfortunately I have problems can't solved.
The freeradius is running ok but when attempt to authenticate the server is 
just not responding to clients request.
I am running RHEL 4 . the server has two ethernet card..eth0 for client 
authentication, eth1 with DNS, iptables.
here the debug output:

#netstat -a
netstat -a
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address   Foreign Address 
State
tcp0  0 *:32769 *:* 
LISTEN
tcp0  0 *:mysql *:* 
LISTEN
tcp0  0 *:netbios-ssn   *:* 
LISTEN
tcp0  0 localhost.localdomain:783   *:* 
LISTEN
tcp0  0 *:sunrpc*:* 
LISTEN
tcp0  0 *:ftp   *:* 
LISTEN
tcp0  0 svr1.marind.com:domain   *:* 
LISTENvr
tcp0  0 192.168.0.10:domain *:* 
LISTEN
tcp0  0 localhost.localdomai:domain *:* 
LISTEN
tcp0  0 localhost.localdomain:ipp   *:* 
LISTEN
tcp0  0 *:squid *:* 
LISTEN
tcp0  0 localhost.localdomain:smtp  *:* 
LISTEN
tcp0  0 localhost.localdomain:rndc  *:* 
LISTEN
tcp0  0 *:microsoft-ds  *:* 
LISTEN
tcp0  0 svr1.marind.com:3285810.subnet125-160-16.ak:http 
ESTABLISHED
tcp0  0 *:imaps *:* 
LISTEN
tcp0  0 *:pop3s *:* 
LISTEN
tcp0  0 *:pop3  *:* 
LISTEN
tcp0  0 *:imap  *:* 
LISTEN
tcp0  0 *:http  *:* 
LISTEN
tcp0  0 *:ssh   *:* 
LISTEN
tcp0  0 *:https *:* 
LISTEN
udp0  0 *:32768 *:*
udp0  0 *:32769 *:*
udp0  0 *:32772 *:*
udp0  0 svr1.marind:netbios-ns *:*
udp0  0 192.168.0.10:netbios-ns *:*
udp0  0 *:netbios-ns*:*
udp0  0 s1.marin:netbios-dgm *:*vr
udp0  0 192.168.0.1:netbios-dgm *:*
udp0  0 *:netbios-dgm   *:*
udp0  0 192.168.0.10:radius *:*
udp0  0 192.168.0.1:radius-acct *:*
udp0  0 192.168.0.10:1814   *:*
udp0  0 srv1.marind.c:domain *:*
udp0  0 192.168.0.10:domain *:*
udp0  0 localhost.locald:domain *:*
udp0  0 *:icpv2 *:*
udp0  0 *:958   *:*
udp0  0 *:bootps*:*
udp0  0 *:sunrpc*:*
udp0  0 *:ipp   *:*
udp0  0 *:32770 *:*
raw0  0 *:icmp  *:* 

#radiusd -X
FreeRADIUS Version 2.0.4, for host i686-pc-linux-gnu, built on May 15 2008 at 
21:44:23
Copyright (C) 1999-2008 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License.
Starting - reading configuration files ...
including configuration file /usr/local/etc/raddb/radiusd.conf
including configuration file /usr/local/etc/raddb/proxy.conf
including configuration file /usr/local/etc/raddb/clients.conf
including configuration file /usr/local/etc/raddb/snmp.conf
including configuration file /usr/local/etc/raddb/eap.conf
including configuration file /usr/local/etc/raddb/sql.conf
including configuration file /usr/local/etc/raddb/sql/mysql/dialup.conf
including configuration file /usr/local/etc/raddb/sql/mysql/counter.conf
including configuration file /usr/local/etc/raddb/policy.conf
including files in directory /usr/local/etc/raddb/sites-enabled/
including configuration file /usr/local/etc/raddb/sites-enabled/default
including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel
including dictionary file /usr/local/etc/raddb/dictionary
main {
prefix = "/usr/local"
localstatedir = "/usr/local/var"
logdir = "/usr/local/var/log/radius"
libdir = "/usr/local/lib"
radacctdir = "/usr/local/var/log/radius/radacct"
hostname_lookups = no
max_request_time = 30
cleanup_delay = 5