Freeradius not working

Hi All,

I followed Ramona's HOW-To, but it doesn't seem to be working on my side.

I have a Fedora + freeradius with mysql.
I can do 'radtest test test localhost 0 testing123' on the server itself.

On the clients.conf, I put in:
client 192.168.1.32 {
secret = testing123
}
When I used NTRadPing from 192.168.1.32, I got this message:
rad_recv: Access-Request packet from host 192.168.1.32:1244, id=4, length=50
Ignoring request from unknown client 192.168.1.32:1244

What seemed to be the problem?

Please help.

:rherry

Posted: Fri Dec 09, 2005 8:14 pm    Post subject:  	Reply with quote
THIS IS MY HOW TO AND I HOW IT'S CLEAR :
-----------------------------------------------------
let's say that u have mysql and freeradius installed in your system and continue anyone don;t know how to install them speak to help him ok now let's begin :

FreeRADIUS is installed, and we now need to configure it. This step will detail how to setup the server for use with the local Unix user accounts for the machine that FreeRADIUS is installed on. If you would like to immediately setup the server for use with the MySQL database proceed to the next step but I highly recommend you do this step first to verify the RADIUS install works properly. Step 4 also builds on this step.
First we are going to need some tool to test the installation of the RADIUS server with, I prefer NTRadPing you can download it from MasterSoft’s website at: http://www.mastersoft-group.com/download/
NTRadPing provides a nice simple testing interface for MS Windows computers.

First we need to authorize ...

Have you restarted freeradius?

Gregor

yes, many times. I have restarted the whole machine as well.

Run FR in full debug mode (freeradius -X) and post the complete log…

Something’s funny there.

Hi savage, finally I found out what’s the problem.

Apparently, there are 2 instances of the configuration files. Previously I install fr from download, and do a manual install (tar, config, make, etc). Then, I re-install freeradius 1.1.1 (using yum install freeradius), and it created the config on /etc/raddb. But, somehow, the ones that was used was from /usr/local/etc/raddb.
So, I copied the conf files from /etc/raddb to /usr/local/etc/raddb, and now it worked.

Normally I run using -x, and not -X. Now I know.

OK, case closed. Thank you all. :smiley:

:rherry

Glad it’s sorted. -X would have showed you that withint he first 10 lines of debug output if I’m not mistaken :smiley:

Goodluck with FR, ask if there’s anything else.

Hi there,
my scenario is very similar. I also followed Ramona’s tut but I can’t get any reply from freeradius. I’m usig FC4 and latest version of freeradius (at this time it’s 1.1.2) which i have been installed using
$ ./configure
$ make
$ make install.
I didn’t get reply when i was testing with local root account so I decided to proceed to mysql authorization, but also nothing. I tested it with NTRadPing.
Everything i get is:

Sending authentication request to server 10.10.10.10:1812
Transmiting packet, code=1 id=30 length=44
ne response from server (timed out), new attempt (#1)
ne response from server (timed out), new attempt (#2)
could not receve a responce from server

Here is mine clients.conf file
client 127.0.0.1 {
secret = radiuspass
shortname = localhost
nastype = other # localhost isn’t usually a NAS…
}

client 10.10.10.100{
secret = radiuspass
shortname = mikrotik
nastype = other
}

client 10.10.10.1 {
secret = radiuspass
shortname = windows
nastype = other
}


Please help me out.

Now i have reply from freeradius when i test it from localhost. Still no reply using NTRadPing. And no reply to miktotik too.
Here is the log from MT:
16:59:40 pppoe,ppp,info : terminating… - user testuser authentication failed - radius timeout (6)
Log from NTRadPing is the same like in previous post.

Can someone help me out?

btw. I’m running freeradius & mysql on virtual host using VMWare. Maybe it’s silly question, but can it be a problem? I dont think so.

I have freeradius running in a virtual environment without any problems. I’m using windows virtual server, but VMWare shouldn’t have any issues with it.

The one thing I’m not doing is connecting directly to my MySQL database. Instead I have the MySQL database kick out a txt file that I call from the RADIUS server and import into my users.ppp / users.mac (both included in the users file). That way it eliminates the SQL server from being a single point of failure for authentication. And it makes it easy to deploy multiple RADIUS servers.

Run Radius in debug mode -X, whilst you send the radius request to the server, and then paste the debug log when it receives the packet - no need for everything. Just the part after

Module: Instantiated radutmp (radutmp)
Listening on authentication 10.10.10.10:1812
Listening on accounting 10.10.10.10:1813
Ready to process requests.

I suspect your request is coming from a IP address not listed in your clients.conf, or that you are using the wrong secrets.

OK people i solved this radius reply thing. The problem was in the firewall. I forget to chek for 1812 & 1813 port to be accepted. :blush:
Now, there is another wierd situation. When i manually start radius server with radiusd -x or -X, i get the reply as i should. When i start it manually with radiusd only, i also get the reply. BUT, when i start it as servise

service radiusd start

or let system start service apon a startup i get the following:
“recvfrom() error, WSAGetLastError()=10054”

I read somewhere it’s recomended to check ports when this appears but everithing is OK with radius ports.

I instaled freeradius manually and i added service by coping provided file to /etc/init.d. I renamed the file to radiusd. Before it was something like redhat-freeradius…

What do you think about this?

RGRDS

Please use a Freeradius forum or list for support on Freeradius – unless it is directly associated with RouterOS.