I have some problems with ippool module.

Using 802.1x:

Access Point 3Com 8750
FreeRADIUS 1.0.1

Everything runs well except this problem with ippool-module.

users:
......
DEFAULT        Ldap-Group == "disabled", Auth-Type := Reject
               Reply-Message = "Sie sind nicht berechtigt!"

DEFAULT        Ldap-Group == "allowed", Pool-Name := main_pool

DEFAULT        Max-Daily-Session := 120
               Fall-Through = 1
......

LDAP-Attribute radiusGroupName has only two values: allowed or disabled.

......
rlm_ldap: - authenticate
rlm_ldap: login attempt by "ekokor" with password "emil"
rlm_ldap: user DN: uid=ekokor,ou=People,dc=wss-stuttgart,dc=de
rlm_ldap: (re)connect to localhost:389, authentication 1
rlm_ldap: bind as uid=ekokor,ou=People,dc=wss-stuttgart,dc=de/emil to localhost:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: user ekokor authenticated succesfully
modcall[authenticate]: module "ldap" returns ok for request 6
modcall: group Auth-Type returns ok for request 6
Processing the post-auth section of radiusd.conf
modcall: entering group post-auth for request 6
rlm_ippool: Could not find nas port information. Return NOOP. <===what this means??
modcall[post-auth]: module "main_pool" returns noop for request 6
modcall: group post-auth returns noop for request 6
TTLS: Got tunneled reply RADIUS code 2
TTLS: Got tunneled Access-Accept
rlm_eap: Freeing handler
modcall[authenticate]: module "eap" returns ok for request 6
modcall: group authenticate returns ok for request 6
Processing the post-auth section of radiusd.conf
modcall: entering group post-auth for request 6
rlm_ippool: Could not find Pool-Name attribute. <==== and this also?
modcall[post-auth]: module "main_pool" returns noop for request 6
modcall: group post-auth returns noop for request 6
Sending Access-Accept of id 72 to 192.168.0.5:1160
Session-Timeout = 120
MS-MPPE-Recv-Key = 0x5aec0202c6c95fe34381139310c0053b03a8243f60fd01d1172c2724e68712d2
MS-MPPE-Send-Key = 0xb38b83e095aa1181cb77331f7fec4532f7706de17683be628770d4045767692d
EAP-Message = 0x03050004
Message-Authenticator = 0x00000000000000000000000000000000
User-Name = "anonymous"
Finished request 6
Going to the next request
Waking up in 5 seconds...
--- Walking the entire request list ---
Cleaning up request 2 ID 68 with timestamp 4162a7d9
Cleaning up request 3 ID 69 with timestamp 4162a7d9
Cleaning up request 4 ID 70 with timestamp 4162a7d9
Waking up in 1 seconds...
--- Walking the entire request list ---
Cleaning up request 5 ID 71 with timestamp 4162a7da
Cleaning up request 6 ID 72 with timestamp 4162a7da
Nothing to do. Sleeping until we see a request.
rad_recv: Accounting-Request packet from host 192.168.0.5:1148, id=66, length=174
Acct-Status-Type = Start
Acct-Session-Id = "004005556832-000d54a941fd-08ae"
NAS-IP-Address = 0.0.0.0
Acct-Input-Octets = 483
Acct-Output-Octets = 1531
Acct-Input-Packets = 3
Acct-Output-Packets = 6
Vendor-Specific = 0x45415020557365726e616d652069733a20616e6f6e796d6f7573
Vendor-Specific = 0x564c414e2049442069733a2030
Vendor-Specific = 0x4553534944203d2033436f6d
Vendor-Specific = 0x45415020547970652069733a204541502d54544c53
Acct-Session-Time = 29
Processing the preacct section of radiusd.conf
modcall: entering group preacct for request 7
modcall[preacct]: module "preprocess" returns noop for request 7
rlm_acct_unique: WARNING: Attribute NAS-Port was not found in request, unique ID MAY be inconsistent
rlm_acct_unique: WARNING: Attribute User-Name was not found in request, unique ID MAY be inconsistent
rlm_acct_unique: Hashing ',Client-IP-Address = 192.168.0.5,NAS-IP-Address = 0.0.0.0,Acct-Session-Id = "004005556832-000d54a941fd-08ae",'
rlm_acct_unique: Acct-Unique-Session-ID = "8efb8a59b5fabe69".
modcall[preacct]: module "acct_unique" returns ok for request 7
rlm_realm: Proxy reply, or no User-Name. Ignoring.
modcall[preacct]: module "suffix" returns noop for request 7
modcall[preacct]: module "files" returns noop for request 7
modcall: group preacct returns ok for request 7
Processing the accounting section of radiusd.conf
modcall: entering group accounting for request 7
radius_xlat: '/var/log/radius/radacct/192.168.0.5/detail-20041005'
rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radius/radacct/192.168.0.5/detail-20041005
modcall[accounting]: module "detail" returns ok for request 7
rlm_counter: We only run on Accounting-Stop packets.
modcall[accounting]: module "daily" returns noop for request 7
radius_xlat: '/var/log/radius/radutmp'
radius_xlat: ''
rlm_radutmp: No NAS-Port seen. Cannot do anything.
rlm_radumtp: WARNING: checkrad will probably not work!
modcall[accounting]: module "radutmp" returns noop for request 7
rlm_ippool: This is not an Accounting-Stop. Return NOOP.
modcall[accounting]: module "main_pool" returns noop for request 7
modcall: group accounting returns ok for request 7
Sending Accounting-Response of id 66 to 192.168.0.5:1148
Finished request 7
Going to the next request
--- Walking the entire request list ---
Cleaning up request 7 ID 66 with timestamp 4162a7f7
Nothing to do. Sleeping until we see a request.
........

thanks,

emil

Attachment: signature.asc
Description: OpenPGP digital signature



Reply via email to