Re: VMPS: Failed encoding packet: Failed to find VQP-Packet-Type in response packet

2009-08-09 Thread Alan DeKok 
Michael Bryant wrote:
> Attached is the debug output from a ubuntu package of 2.1.0, with the
> default config (I didn't see a 2.1.0 tarball on the site)
> 
> Also attached is the debug output from the 2.1.6 install (tarball from
> site), again with the default config.
> 
> As far as I can tell, in 2.1.0 it finds the vmps section, in 2.1.6 it
> doesn't.

  Ok.  I've pushed a fix into git.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: VMPS: Failed encoding packet: Failed to find VQP-Packet-Type in response packet

2009-08-09 Thread Michael Bryant 
_to_tunnel = no
	use_tunneled_reply = no
	virtual_server = "inner-tunnel"
	include_length = yes
   }
 Module: Linked to sub-module rlm_eap_peap
 Module: Instantiating eap-peap
   peap {
	default_eap_type = "mschapv2"
	copy_request_to_tunnel = no
	use_tunneled_reply = no
	proxy_tunneled_request_as_eap = yes
	virtual_server = "inner-tunnel"
   }
 Module: Linked to sub-module rlm_eap_mschapv2
 Module: Instantiating eap-mschapv2
   mschapv2 {
	with_ntdomain_hack = no
   }
 Module: Checking authorize {...} for more modules to load
 Module: Linked to module rlm_realm
 Module: Instantiating suffix
  realm suffix {
	format = "suffix"
	delimiter = "@"
	ignore_default = no
	ignore_null = no
  }
 Module: Linked to module rlm_files
 Module: Instantiating files
  files {
	usersfile = "/etc/freeradius/users"
	acctusersfile = "/etc/freeradius/acct_users"
	preproxy_usersfile = "/etc/freeradius/preproxy_users"
	compat = "no"
  }
 Module: Checking session {...} for more modules to load
 Module: Linked to module rlm_radutmp
 Module: Instantiating radutmp
  radutmp {
	filename = "/var/log/freeradius/radutmp"
	username = "%{User-Name}"
	case_sensitive = yes
	check_with_nas = yes
	perm = 384
	callerid = yes
  }
 Module: Checking post-proxy {...} for more modules to load
 Module: Checking post-auth {...} for more modules to load
 Module: Linked to module rlm_attr_filter
 Module: Instantiating attr_filter.access_reject
  attr_filter attr_filter.access_reject {
	attrsfile = "/etc/freeradius/attrs.access_reject"
	key = "%{User-Name}"
  }
 } # modules
} # server
server vmps {
 modules {
 Module: Checking vmps {...} for more modules to load
 } # modules
} # server
server {
 modules {
 Module: Checking authenticate {...} for more modules to load
 Module: Checking authorize {...} for more modules to load
 Module: Linked to module rlm_preprocess
 Module: Instantiating preprocess
  preprocess {
	huntgroups = "/etc/freeradius/huntgroups"
	hints = "/etc/freeradius/hints"
	with_ascend_hack = no
	ascend_channels_per_line = 23
	with_ntdomain_hack = no
	with_specialix_jetstream_hack = no
	with_cisco_vsa_hack = no
	with_alvarion_vsa_hack = no
  }
 Module: Checking preacct {...} for more modules to load
 Module: Linked to module rlm_acct_unique
 Module: Instantiating acct_unique
  acct_unique {
	key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"
  }
 Module: Checking accounting {...} for more modules to load
 Module: Linked to module rlm_detail
 Module: Instantiating detail
  detail {
	detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d"
	header = "%t"
	detailperm = 384
	dirperm = 493
	locking = no
	log_packet_header = no
  }
 Module: Instantiating attr_filter.accounting_response
  attr_filter attr_filter.accounting_response {
	attrsfile = "/etc/freeradius/attrs.accounting_response"
	key = "%{User-Name}"
  }
 Module: Checking session {...} for more modules to load
 Module: Checking post-proxy {...} for more modules to load
 Module: Checking post-auth {...} for more modules to load
 } # modules
} # server
radiusd:  Opening IP addresses and Ports 
listen {
	type = "auth"
	ipaddr = *
	port = 0
}
listen {
	type = "acct"
	ipaddr = *
	port = 0
}
listen {
	type = "control"
 listen {
	socket = "/var/run/freeradius/freeradius.sock"
 }
}
listen {
	type = "vmps"
	ipaddr = *
	port = 1589
}
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on command file /var/run/freeradius/freeradius.sock
Listening on vmps address * port 1589 as server vmps
Listening on proxy address * port 1814
Ready to process requests.
	VMPS-Packet-Type = VMPS-Join-Request
	VMPS-Error-Code = VMPS-No-Error
	VMPS-Sequence-Number = 4660
	VMPS-Client-IP-Address = 127.0.0.1
	VMPS-Port-Name = "Fa0/1"
	VMPS-VLAN-Name = ""
	VMPS-Domain-Name = ""
	VMPS-Unknown = 0x00
	VMPS-MAC = 12:34:12:34:12:34
server vmps {
Doing VMPS
Done VMPS
} # server vmps
Failed encoding packet: Failed to find VQP-Packet-Type in response packet 
Finished request 0.
Going to the next request
Waking up in 4.9 seconds.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: VMPS: Failed encoding packet: Failed to find VQP-Packet-Type in response packet

2009-08-09 Thread Alan DeKok 
Michael Bryant wrote:
>>   You get the same error in 2.1.0, or the configuration which worked in
>> 2.1.0 doesn't work in 2.1.6?
> 
> My customized vmps server section works in 2.1.0.

  Except that debug mode prints out what it is processing.  And it's not
printing out anything in 2.1.6.  That may be the source of the problem.

  What does debug mode show for 2.1.0?

> Output with 2.1.0:
> Vlan: please_use_real_vlan_here
> MAC Address: 123412341234 
> Status: ALLOW

  Is that the debug output... or something else?

> With 2.1.6:
> Ready to process requests.

  Which looks to be the debug output.

  Compare apples to apples.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: VMPS: Failed encoding packet: Failed to find VQP-Packet-Type in response packet

2009-08-09 Thread Michael Bryant 

>   You get the same error in 2.1.0, or the configuration which worked in
> 2.1.0 doesn't work in 2.1.6?

My customized vmps server section works in 2.1.0.
Trying to use the same customized configuration in 2.1.6 gives the
error.

Using the default configuration - the 
VMPS-VLAN-Name = "please_use_real_vlan_here"
one, works in 2.1.0
In 2.1.6, it returns the error.

>   Which shows that absolutely nothing is happening in the VMPS server.
> 
>   Is there anything at all in the VMPS server?
Yes, the part to pull the mac address out of the ethernet frame, putting
it in the vmps-cookie, updating the reply with the vlan name /
packet-type - the default config.

On a clean machine I've just compiled 2.1.6, done minimal editing to
enable the vmps server (linked the vmps file into sites-enabled), and
i'm getting the same error.

Output with 2.1.0:
Vlan: please_use_real_vlan_here
MAC Address: 123412341234 
Status: ALLOW

With 2.1.6:
Ready to process requests.
VMPS-Packet-Type = VMPS-Join-Request
VMPS-Error-Code = VMPS-No-Error
VMPS-Sequence-Number = 4660
VMPS-Client-IP-Address = 127.0.0.1
VMPS-Port-Name = "Fa0/1"
VMPS-VLAN-Name = ""
VMPS-Domain-Name = ""
VMPS-Unknown = 0x00
VMPS-MAC = 12:34:12:34:12:34
server vmps {
Doing VMPS
Done VMPS
} # server vmps
Failed encoding packet: Failed to find VQP-Packet-Type in response
packet 
Finished request 0.

Full 2.1.6 log attached

Cheers
--Mike
FreeRADIUS Version 2.1.6, for host i486-pc-linux-gnu, built on Aug  9 2009 at 
10:01:26
Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. 
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A 
PARTICULAR PURPOSE. 
You may redistribute copies of FreeRADIUS under the terms of the 
GNU General Public License v2. 
Starting - reading configuration files ...
including configuration file /etc/freeradius/radiusd.conf
including configuration file /etc/freeradius/proxy.conf
including configuration file /etc/freeradius/clients.conf
including files in directory /etc/freeradius/modules/
including configuration file /etc/freeradius/modules/always
including configuration file /etc/freeradius/modules/attr_filter
including configuration file /etc/freeradius/modules/attr_rewrite
including configuration file /etc/freeradius/modules/chap
including configuration file /etc/freeradius/modules/checkval
including configuration file /etc/freeradius/modules/counter
including configuration file /etc/freeradius/modules/detail
including configuration file /etc/freeradius/modules/detail.example.com
including configuration file /etc/freeradius/modules/detail.log
including configuration file /etc/freeradius/modules/digest
including configuration file /etc/freeradius/modules/echo
including configuration file /etc/freeradius/modules/etc_group
including configuration file /etc/freeradius/modules/exec
including configuration file /etc/freeradius/modules/expiration
including configuration file /etc/freeradius/modules/expr
including configuration file /etc/freeradius/modules/files
including configuration file /etc/freeradius/modules/inner-eap
including configuration file /etc/freeradius/modules/ippool
including configuration file /etc/freeradius/modules/krb5
including configuration file /etc/freeradius/modules/ldap
including configuration file /etc/freeradius/modules/linelog
including configuration file /etc/freeradius/modules/logintime
including configuration file /etc/freeradius/modules/mac2ip
including configuration file /etc/freeradius/modules/mac2vlan
including configuration file /etc/freeradius/modules/mschap
including configuration file /etc/freeradius/modules/otp
including configuration file /etc/freeradius/modules/pam
including configuration file /etc/freeradius/modules/pap
including configuration file /etc/freeradius/modules/passwd
including configuration file /etc/freeradius/modules/perl
including configuration file /etc/freeradius/modules/policy
including configuration file /etc/freeradius/modules/preprocess
including configuration file /etc/freeradius/modules/radutmp
including configuration file /etc/freeradius/modules/realm
including configuration file /etc/freeradius/modules/smbpasswd
including configuration file /etc/freeradius/modules/smsotp
including configuration file /etc/freeradius/modules/sql_log
including configuration file /etc/freeradius/modules/sqlcounter_expire_on_login
including configuration file /etc/freeradius/modules/sradutmp
including configuration file /etc/freeradius/modules/unix
including configuration file /etc/freeradius/modules/wimax
including configuration file /etc/freeradius/modules/acct_unique
including configuration file /etc/freeradius/eap.conf
including configuration file /etc/freeradius/policy.conf
including files in directory /etc/freeradius/sites-enabled/
including configuration file /etc/freeradius/sites-enabled/inner-tunnel
including configurat

Re: VMPS: Failed encoding packet: Failed to find VQP-Packet-Type in response packet

2009-08-09 Thread Alan DeKok 
Michael Bryant wrote:
> Using a customised sites-enabled/vmps file, pulling data from postgresql, 
> which
> was working in 2.1.0, I get the same error.

  You get the same error in 2.1.0, or the configuration which worked in
2.1.0 doesn't work in 2.1.6?

...
> server vmps {
> Doing VMPS
> Done VMPS
> } # server vmps

  Which shows that absolutely nothing is happening in the VMPS server.

  Is there anything at all in the VMPS server?

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

VMPS: Failed encoding packet: Failed to find VQP-Packet-Type in response packet

2009-08-07 Thread Michael Bryant 
Hi,
Stock Freeradius version 2.1.6, compiled with dpkg-buildpackage.
Using default sites-avaialable/vmps virtual server.
Also using dynamic clients with clients in postgresql.

Getting this error on every VMPS request:
Failed encoding packet: Failed to find VQP-Packet-Type in response packet.

Using a customised sites-enabled/vmps file, pulling data from postgresql, which
was working in 2.1.0, I get the same error.

Any ideas as to why this error is occurring?

Cheers
--Mike

radiusd:  Opening IP addresses and Ports 
listen {
type = "auth"
ipaddr = *
port = 0
}
listen {
type = "acct"
ipaddr = *
port = 0
}
listen {
type = "vmps"
ipaddr = *
port = 1589
}
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on vmps address * port 1589 as server vmps
Listening on proxy address * port 1814
Ready to process requests.
server dynamic_client_server {
rlm_sql (sqllocal): Reserving sql socket id: 4
rlm_sql_postgresql: query:  SELECT nasname FROM nas WHERE nasname >>= 
'127.0.0.1'
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: query affected rows = 1 , fields = 1
rlm_sql (sqllocal): Released sql socket id: 4
rlm_sql (sqllocal): Reserving sql socket id: 3
rlm_sql_postgresql: query:  SELECT shortname FROM nas WHERE nasname >>= 
'127.0.0.1'
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: query affected rows = 1 , fields = 1
rlm_sql (sqllocal): Released sql socket id: 3
rlm_sql (sqllocal): Reserving sql socket id: 2
rlm_sql_postgresql: query:  SELECT secret FROM nas WHERE nasname >>= '127.0.0.1'
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: query affected rows = 1 , fields = 1
rlm_sql (sqllocal): Released sql socket id: 2
rlm_sql (sqllocal): Reserving sql socket id: 1
rlm_sql_postgresql: query:  SELECT type FROM nas WHERE nasname >>= '127.0.0.1'
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: query affected rows = 1 , fields = 1
rlm_sql (sqllocal): Released sql socket id: 1
} # server dynamic_client_server
- Added client 127.0.0.1 with shared secret testing123
VMPS-Packet-Type = VMPS-Join-Request
VMPS-Error-Code = VMPS-No-Error
VMPS-Sequence-Number = 4660
VMPS-Client-IP-Address = 10.252.24.2
VMPS-Port-Name = "Fa0/17"
VMPS-VLAN-Name = ""
VMPS-Domain-Name = "blah"
    VMPS-Unknown = 0x00
        VMPS-MAC = 00:16:41:11:0b:ff
server vmps {
Doing VMPS
Done VMPS
} # server vmps
Failed encoding packet: Failed to find VQP-Packet-Type in response packet 
Finished request 0.
Going to the next request
Waking up in 4.9 seconds.
Cleaning up request 0 ID 4660 with timestamp +87
Ready to process requests.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html