Le mercredi 29 octobre 2008 10:54, [EMAIL PROTECTED] a écrit :
> Try radtest from remote to the radius server. Does that have secret
> issues? If it doesn't hostapd is broken. If it does - OS (crypto
> libraries) on one of the PCs is broken.
Hi,
I have started a kubuntu Live CD to test.
$ radtest bea herscret 10.1.1.254 1812 verysecret
Sending Access-Request of id 115 to 10.1.1.254 port 1812
User-Name = "bea"
User-Password = "herscret"
NAS-IP-Address = 255.255.255.255
NAS-Port = 1812
rad_recv: Access-Accept packet from host 10.1.1.254:1812, id=115, length=86
NAS-Identifier = "debian-nas"
NAS-Port = 0
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
NAS-IP-Address = 10.3.1.1
Framed-Routing = None
Framed-IP-Netmask = 255.255.255.0
Framed-IP-Address = 10.3.1.253
Framed-Protocol = PPP
Service-Type = Framed-User
And I tested :
echo
"User-Name=lolo,Password=secret,Framed-Protocol=PPP,Acct-Session-Id=48F7C09B-00000021,Acct-Status-Type=Start,Calling-Station-Id=00-1A-70-AE-D4-53"
|
radclient 10.1.1.254:1813 acct verysecret
And in radiusd -X :
[sql_log] Processing sql_log_accounting
[sql_log] expand: %{User-Name} -> lolo
[sql_log] expand: %{%{User-Name}:-DEFAULT} -> lolo
[sql_log] sql_set_user escaped user --> 'lolo'
[sql_log] expand: INSERT INTO radacct (AcctSessionId, UserName,
NASIPAddress, FramedIPAddress, AcctStartTime, AcctStopTime,
AcctSessionTime, AcctTerminateCause) VALUES
('%{Acct-Session-Id}', '%{User-Name}', '%{NAS-IP-Address}',
'%{Framed-IP-Address}', '%S', '0', '0', ''); ->
INSERT INTO radacct (AcctSessionId, UserName, NASIPAddress,
FramedIPAddress, AcctStartTime, AcctStopTime, AcctSessionTime,
AcctTerminateCause) VALUES
('48F7C09B-00000021', 'lolo', '10.1.1.254', '', '2008-10-29
17:13:48', '0', '0', '');
[sql_log]
expand: /usr/var/log/radius/radacct/sql-relay ->
/usr/var/log/radius/radacct/sql-relay
++[sql_log] returns ok
[attr_filter.accounting_response] expand: %{User-Name} -> lolo
attr_filter: Matched entry DEFAULT at line 12
++[attr_filter.accounting_response] returns updated
Sending Accounting-Response of id 142 to 10.1.1.254 port 32920
Finished request 32.
All seam work !
And in radacct there's an entry of it !
It could be just a problem between hostap and radius ?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
