RE: debug log [was Re: freeradius ippool issue] [SEC=UNCLASSIFIED]

2008-07-20 Thread Ranner, Frank MR
UNCLASSIFIED -Original Message- From: [EMAIL PROTECTED] eradius.org [mailto:freeradius-users- [EMAIL PROTECTED] On Behalf Of Josip Rodin Sent: Friday, 18 July 2008 23:19 To: FreeRadius users mailing list Subject: Re: debug log [was Re: freeradius ippool issue] [snip] Oh

debug log [was Re: freeradius ippool issue]

2008-07-18 Thread Josip Rodin
On Thu, Jul 17, 2008 at 12:30:31PM +0200, Alan DeKok wrote: [EMAIL PROTECTED] wrote: :) yes that's what it was thank you for your help. I'm sorry you had a bad day my friend. You have tried very hard to make it a bad day. It's incredibly frustrating to help people who fight every

Re: debug log [was Re: freeradius ippool issue]

2008-07-18 Thread Alan DeKok
Josip Rodin wrote: It looks to me that it would be a good idea to have a default /var/log/freeradius/debug.log where the daemon would write the output normally found with -X. Plus with timestamps. That is very, very, expensive, and will slow the server down a lot. But yes, the idea is good.

Re: debug log [was Re: freeradius ippool issue]

2008-07-18 Thread Josip Rodin
On Fri, Jul 18, 2008 at 12:16:08PM +0200, Alan DeKok wrote: Josip Rodin wrote: It looks to me that it would be a good idea to have a default /var/log/freeradius/debug.log where the daemon would write the output normally found with -X. Plus with timestamps. That is very, very,

Re: debug log [was Re: freeradius ippool issue]

2008-07-18 Thread Alan DeKok
Josip Rodin wrote: Yeah. At least you can try to streamline the debugging process, so that the instructions become very easy :) It's more straightforward to tell people send us your log file which is right over there than to tell them stop the server, start it manually with -X, copypaste some

Re: debug log [was Re: freeradius ippool issue]

2008-07-18 Thread Josip Rodin
On Fri, Jul 18, 2008 at 01:46:30PM +0200, Alan DeKok wrote: BTW, while we're on the topic - Navis RADIUS has the option of having log files be automatically switched based on timestamps. In other words, if you set a log file to be 'TimeFile', and set attributes 'FormatTimestamp=TRUE',

Re: debug log [was Re: freeradius ippool issue]

2008-07-18 Thread Alan DeKok
Josip Rodin wrote: Oh. These seemingly random expansions have always surprised me. The other day I just happened to stumble upon that when writing: if ((Connect-Info != NONE) (Connect-Info %Y%m%d)) { It would be good if this was documented somewhere - I actually looked in the

Re: debug log [was Re: freeradius ippool issue]

2008-07-18 Thread Josip Rodin
On Fri, Jul 18, 2008 at 03:25:50PM +0200, Alan DeKok wrote: It would be good if this was documented somewhere - I actually looked in the unlang manual page for a way to get a date string, but found nothing. doc/variables.txt However, the VARIABLES section doesn't mention that those

Re: debug log [was Re: freeradius ippool issue]

2008-07-18 Thread Alan DeKok
Josip Rodin wrote: OK, yes, but this particular situation is a bit strange... the variables.txt file says: Yes... Which information is authoritative - should we use and depend on this, or not? The expansions documented in doc/variables.txt are historical, but still work. This is what

Re: freeradius ippool issue

2008-07-17 Thread [EMAIL PROTECTED]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 in radius.conf i have status_server = yes and no other references to Access-Accept. I have no dhcp server started the ip address it's begin alocated it';s from 10.0.0.0 subnet. Ivan Kalik wrote: | What IP address is in the Access-Accept packet?

Re: freeradius ippool issue

2008-07-17 Thread [EMAIL PROTECTED]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( ~ 'gogu', 'gogu123', ~ 'Access-Accept', '2008-07-17 11:45:31') . Sending Access-Accept

Re: freeradius ippool issue

2008-07-17 Thread Alan DeKok
[EMAIL PROTECTED] wrote: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( ~ 'gogu', 'gogu123', ~ 'Access-Accept', '2008-07-17 11:45:31') . Sending Access-Accept of id 28 to

Re: freeradius ippool issue

2008-07-17 Thread Ivan Kalik
Nice. So server did send an Access-Accept. What was in it? Let's try again: Run the server in debug mode (radiusd -X) and see what's in the Access-Accept packet. Also, have in mind that radius sends framed IP address which is not very likely to be used in wireless setup. If you have sent one,

Re: freeradius ippool issue

2008-07-17 Thread [EMAIL PROTECTED]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 sry for the bad output, but this ware the lines with Access-Accept, this is the whole thing: - - the whole log it's at http://alexandrunet.ro/radius_log; radiusd -X | grep Access-Accept ~expand: INSERT INTO radpostauth (username, pass,

Re: freeradius ippool issue

2008-07-17 Thread Ivan Kalik
sry for the bad output, but this ware the lines with Access-Accept, this is the whole thing: - - the whole log it's at http://alexandrunet.ro/radius_log; No, it's not. That's just the debug of the startup. Post the log of the request being processed. Ivan Kalik - List

Re: freeradius ippool issue

2008-07-17 Thread Alan DeKok
[EMAIL PROTECTED] wrote: sry for the bad output, but this ware the lines with Access-Accept, this is the whole thing: - the whole log it's at http://alexandrunet.ro/radius_log; Which has ZERO use. The server doesn't even receive any packets! Do you even understand what an Access-Accept

Re: freeradius ippool issue

2008-07-17 Thread [EMAIL PROTECTED]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 sorry about that, you have a good point, i just restarted the server and i forgot i did not try to connect. Regarding to the wireless network, no, it's not a wireless netowork it's an UTP network, i'm using radius with a pppoe server. I've updated

Re: freeradius ippool issue

2008-07-17 Thread Alan DeKok
[EMAIL PROTECTED] wrote: sorry about that, you have a good point, i just restarted the server and i forgot i did not try to connect. Regarding to the wireless network, no, it's not a wireless netowork it's an UTP network, i'm using radius with a pppoe server. I've updated the file at

Re: freeradius ippool issue

2008-07-17 Thread Ivan Kalik
You have not assigned the IP address via radius. It's assigned by the dhcp server: Sending Access-Accept of id 31 to 192.168.1.1 port 40086 Framed-Protocol := PPP Framed-IP-Netmask = 255.255.255.255 Framed-MTU := 1500 Framed-Compression := Van-Jacobson-TCP-IP

Re: freeradius ippool issue

2008-07-17 Thread [EMAIL PROTECTED]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 :) yes that's what it was thank you for your help. I'm sorry you had a bad day my friend. Paul. Alan DeKok wrote: | [EMAIL PROTECTED] wrote: | sorry about that, you have a good point, i just restarted the server and | i forgot i did not try to

Re: freeradius ippool issue

2008-07-17 Thread [EMAIL PROTECTED]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 there is not dhcp running on that server, and there is no dhcprelay. I supposed it's the radius default, i don't know if that makes any sense to you:), anyways i will dig more. Thank you. [EMAIL PROTECTED]:/usr/local/etc/raddb# ps -aux | grep dhcp

Re: freeradius ippool issue

2008-07-17 Thread Alan DeKok
[EMAIL PROTECTED] wrote: :) yes that's what it was thank you for your help. I'm sorry you had a bad day my friend. You have tried very hard to make it a bad day. It's incredibly frustrating to help people who fight every attempt to help them. I have no idea why people do that, but it

Re: freeradius ippool issue

2008-07-17 Thread Alan DeKok
[EMAIL PROTECTED] wrote: there is not dhcp running on that server, and there is no dhcprelay. I supposed it's the radius default, No. If RADIUS doesn't assign an IP address, then something else you've configured in your network is assigning that IP. It's clear that you have no idea

Re: freeradius ippool issue

2008-07-17 Thread [EMAIL PROTECTED]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 again ty for your help, you don't have to (help) if you don't fell like, and i suggest to keep your bad day to your self and not spread the feeling around. As i said in my original email i'm new at this and i-m learning as i go, i'm sure you have

Re: freeradius ippool issue

2008-07-17 Thread Alan DeKok
[EMAIL PROTECTED] wrote: As i said in my original email i'm new at this and i-m learning as i go, Once again, you are missing the point. The point is that you were *not* learning. The ALL CAPS discussion was there because nothing else seemed to get through to you. And it did get through

Re: freeradius ippool issue

2008-07-16 Thread Ivan Kalik
What IP address is in the Access-Accept packet? Perhaps you have a dhcp server running as well and that one is allocating IPs. Ivan Kalik Kalik Informatika ISP Dana 16/7/2008, [EMAIL PROTECTED] [EMAIL PROTECTED] piše: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, i'm new with freeradius,