Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NAS/clients do not login in the freeradius service when it is ready for requests

    Scheduled Pinned Locked Moved pfSense Packages
    1 Posts 1 Posters 949 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      amohzo
      last edited by amohzo

      Hi,

      The NAS clients are not login in the freeradius service when it is ready for the requests in a clean installation 2.4.4 the configurations were restored from a 2.4.3 with a configuration already advanced, until the moemento all the services work, except the authentication of customers (AP's) to connect wifi devices in all cases

      shows the log:

      ri Nov 16 07:10:12 2018 : Error: Changing value of PR_DUMPABLE not supported on this system
      Fri Nov 16 07:10:12 2018 : Info: Core dumps are enabled
      Fri Nov 16 07:10:12 2018 : Info: Debugger not attached
      Fri Nov 16 07:10:12 2018 : Warning: [/usr/local/etc/raddb/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay" 	found in filter list for realm "DEFAULT".
      Fri Nov 16 07:10:12 2018 : Warning: [/usr/local/etc/raddb/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay-USec" 	found in filter list for realm "DEFAULT".
      Fri Nov 16 07:10:12 2018 : Info: Loaded virtual server <default>
      Fri Nov 16 07:10:12 2018 : Info: Loaded virtual server default
      Fri Nov 16 07:10:12 2018 : Warning: Ignoring "sql" (see raddb/mods-available/README.rst)
      Fri Nov 16 07:10:12 2018 : Warning: Ignoring "ldap" (see raddb/mods-available/README.rst)
      Fri Nov 16 07:10:12 2018 : Info: Loaded virtual server inner-tunnel-ttls
      Fri Nov 16 07:10:12 2018 : Info: Loaded virtual server inner-tunnel-peap
      Fri Nov 16 07:10:12 2018 : Info: Ready to process requests
      Fri Nov 16 07:10:15 2018 : Error: Ignoring request to auth address * port 1812 bound to server default from unknown client 192.168.15.XXX port 44350 proto udp
      Fri Nov 16 07:10:18 2018 : Error: Ignoring request to auth address * port 1812 bound to server default from unknown client 192.168.15.XXX port 44350 proto udp
      Fri Nov 16 07:10:19 2018 : Error: Ignoring request to acct address * port 1813 bound to server default from unknown client 192.168.15.XXX port 52468 proto udp
      

      this is the configuration

      FreeRADIUS Version 3.0.17
      Copyright (C) 1999-2017 The FreeRADIUS server project and contributors
      There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
      PARTICULAR PURPOSE
      You may redistribute copies of FreeRADIUS under the terms of the
      GNU General Public License
      For more information about these matters, see the file named COPYRIGHT
      Starting - reading configuration files ...
      including dictionary file /usr/local/share/freeradius/dictionary
      including dictionary file /usr/local/share/freeradius/dictionary.dhcp
      including dictionary file /usr/local/share/freeradius/dictionary.vqp
      including dictionary file /usr/local/etc/raddb/dictionary
      including configuration file /usr/local/etc/raddb/radiusd.conf
      including configuration file /usr/local/etc/raddb/clients.conf
      including files in directory /usr/local/etc/raddb/mods-enabled/
      including configuration file /usr/local/etc/raddb/mods-enabled/attr_filter
      including configuration file /usr/local/etc/raddb/mods-enabled/cache_eap
      including configuration file /usr/local/etc/raddb/mods-enabled/chap
      including configuration file /usr/local/etc/raddb/mods-enabled/date
      including configuration file /usr/local/etc/raddb/mods-enabled/detail
      including configuration file /usr/local/etc/raddb/mods-enabled/detail.log
      including configuration file /usr/local/etc/raddb/mods-enabled/digest
      including configuration file /usr/local/etc/raddb/mods-enabled/dynamic_clients
      including configuration file /usr/local/etc/raddb/mods-enabled/eap
      including configuration file /usr/local/etc/raddb/mods-enabled/echo
      including configuration file /usr/local/etc/raddb/mods-enabled/exec
      including configuration file /usr/local/etc/raddb/mods-enabled/expiration
      including configuration file /usr/local/etc/raddb/mods-enabled/expr
      including configuration file /usr/local/etc/raddb/mods-enabled/files
      including configuration file /usr/local/etc/raddb/mods-enabled/linelog
      including configuration file /usr/local/etc/raddb/mods-enabled/logintime
      including configuration file /usr/local/etc/raddb/mods-enabled/mschap
      including configuration file /usr/local/etc/raddb/mods-enabled/realm
      including configuration file /usr/local/etc/raddb/mods-enabled/pap
      including configuration file /usr/local/etc/raddb/mods-enabled/passwd
      including configuration file /usr/local/etc/raddb/mods-enabled/preprocess
      including configuration file /usr/local/etc/raddb/mods-enabled/radutmp
      including configuration file /usr/local/etc/raddb/mods-enabled/counter
      including configuration file /usr/local/etc/raddb/mods-enabled/replicate
      including configuration file /usr/local/etc/raddb/mods-enabled/soh
      including configuration file /usr/local/etc/raddb/mods-enabled/sradutmp
      including configuration file /usr/local/etc/raddb/mods-enabled/unix
      including configuration file /usr/local/etc/raddb/mods-enabled/always
      including configuration file /usr/local/etc/raddb/mods-enabled/unpack
      including configuration file /usr/local/etc/raddb/mods-enabled/utf8
      including configuration file /usr/local/etc/raddb/mods-enabled/motp
      including configuration file /usr/local/etc/raddb/mods-enabled/googleauth
      including configuration file /usr/local/etc/raddb/mods-enabled/datacounter_acct
      including files in directory /usr/local/etc/raddb/policy.d/
      including configuration file /usr/local/etc/raddb/policy.d/accounting
      including configuration file /usr/local/etc/raddb/policy.d/canonicalization
      including configuration file /usr/local/etc/raddb/policy.d/control
      including configuration file /usr/local/etc/raddb/policy.d/cui
      including configuration file /usr/local/etc/raddb/policy.d/debug
      including configuration file /usr/local/etc/raddb/policy.d/dhcp
      including configuration file /usr/local/etc/raddb/policy.d/eap
      including configuration file /usr/local/etc/raddb/policy.d/filter
      including configuration file /usr/local/etc/raddb/policy.d/moonshot-targeted-ids
      including configuration file /usr/local/etc/raddb/policy.d/operator-name
      including configuration file /usr/local/etc/raddb/policy.d/abfab-tr
      including configuration file /usr/local/etc/raddb/policy.d/pfs_custom_policies
      including files in directory /usr/local/etc/raddb/sites-enabled/
      including configuration file /usr/local/etc/raddb/sites-enabled/default
      including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel-ttls
      including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel-peap
      main {
       security {
       	allow_core_dumps = no
       }
      	name = "radiusd"
      	prefix = "/usr/local"
      	localstatedir = "/var"
      	logdir = "/var/log"
      	run_dir = "/var/run"
      }
      main {
      	name = "radiusd"
      	prefix = "/usr/local"
      	localstatedir = "/var"
      	sbindir = "/usr/local/sbin"
      	logdir = "/var/log"
      	run_dir = "/var/run"
      	libdir = "/usr/local/lib/freeradius-3.0.17"
      	radacctdir = "/var/log/radacct"
      	hostname_lookups = no
      	max_request_time = 30
      	cleanup_delay = 5
      	max_requests = 1024
      	pidfile = "/var/run/radiusd.pid"
      	checkrad = "/usr/local/sbin/checkrad"
      	debug_level = 0
      	proxy_requests = yes
       log {
       	stripped_names = no
       	auth = yes
       	auth_badpass = yes
       	auth_goodpass = no
       	msg_badpass = ""
       	msg_goodpass = ""
       	colourise = yes
       	msg_denied = "You are already logged in - access denied"
       }
       resources {
       }
       security {
       	max_attributes = 200
       	reject_delay = 1.000000
       	status_server = no
       }
      }
      radiusd: #### Loading Realms and Home Servers ####
      radiusd: #### Loading Clients ####
       client pfsense {
       	ipaddr = 127.0.0.1
       	require_message_authenticator = no
       	secret = <<< secret >>>
       	shortname = "pfsense"
        limit {
        	max_connections = 16
        	lifetime = 0
        	idle_timeout = 30
        }
       }
      Debugger not attached
       # Creating Auth-Type = mschap
       # Creating Auth-Type = digest
       # Creating Auth-Type = eap
       # Creating Auth-Type = PAP
       # Creating Auth-Type = CHAP
       # Creating Auth-Type = MS-CHAP
       # Creating Auth-Type = MOTP
       # Creating Auth-Type = GOOGLEAUTH
       # Creating Autz-Type = Status-Server
       # Creating Acct-Type = Status-Server
      radiusd: #### Instantiating modules ####
       modules {
        # Loaded module rlm_attr_filter
        # Loading module "attr_filter.post-proxy" from file /usr/local/etc/raddb/mods-enabled/attr_filter
        attr_filter attr_filter.post-proxy {
        	filename = "/usr/local/etc/raddb/mods-config/attr_filter/post-proxy"
        	key = "%{Realm}"
        	relaxed = no
        }
        # Loading module "attr_filter.pre-proxy" from file /usr/local/etc/raddb/mods-enabled/attr_filter
        attr_filter attr_filter.pre-proxy {
        	filename = "/usr/local/etc/raddb/mods-config/attr_filter/pre-proxy"
        	key = "%{Realm}"
        	relaxed = no
        }
        # Loading module "attr_filter.access_reject" from file /usr/local/etc/raddb/mods-enabled/attr_filter
        attr_filter attr_filter.access_reject {
        	filename = "/usr/local/etc/raddb/mods-config/attr_filter/access_reject"
        	key = "%{User-Name}"
        	relaxed = no
        }
        # Loading module "attr_filter.access_challenge" from file /usr/local/etc/raddb/mods-enabled/attr_filter
        attr_filter attr_filter.access_challenge {
        	filename = "/usr/local/etc/raddb/mods-config/attr_filter/access_challenge"
        	key = "%{User-Name}"
        	relaxed = no
        }
        # Loading module "attr_filter.accounting_response" from file /usr/local/etc/raddb/mods-enabled/attr_filter
        attr_filter attr_filter.accounting_response {
        	filename = "/usr/local/etc/raddb/mods-config/attr_filter/accounting_response"
        	key = "%{User-Name}"
        	relaxed = no
        }
        # Loaded module rlm_cache
        # Loading module "cache_eap" from file /usr/local/etc/raddb/mods-enabled/cache_eap
        cache cache_eap {
        	driver = "rlm_cache_rbtree"
        	key = "%{%{control:State}:-%{%{reply:State}:-%{State}}}"
        	ttl = 15
        	max_entries = 0
        	epoch = 0
        	add_stats = no
        }
        # Loaded module rlm_chap
        # Loading module "chap" from file /usr/local/etc/raddb/mods-enabled/chap
        # Loaded module rlm_date
        # Loading module "date" from file /usr/local/etc/raddb/mods-enabled/date
        date {
        	format = "%b %e %Y %H:%M:%S %Z"
        	utc = no
        }
        # Loaded module rlm_detail
        # Loading module "detail" from file /usr/local/etc/raddb/mods-enabled/detail
        detail {
        	filename = "/var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d"
        	header = "%t"
        	permissions = 384
        	locking = no
        	escape_filenames = no
        	log_packet_header = no
        }
        # Loading module "auth_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
        detail auth_log {
        	filename = "/var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d"
        	header = "%t"
        	permissions = 384
        	locking = no
        	escape_filenames = no
        	log_packet_header = no
        }
        # Loading module "reply_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
        detail reply_log {
        	filename = "/var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d"
        	header = "%t"
        	permissions = 384
        	locking = no
        	escape_filenames = no
        	log_packet_header = no
        }
        # Loading module "pre_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
        detail pre_proxy_log {
        	filename = "/var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d"
        	header = "%t"
        	permissions = 384
        	locking = no
        	escape_filenames = no
        	log_packet_header = no
        }
        # Loading module "post_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
        detail post_proxy_log {
        	filename = "/var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d"
        	header = "%t"
        	permissions = 384
        	locking = no
        	escape_filenames = no
        	log_packet_header = no
        }
        # Loaded module rlm_digest
        # Loading module "digest" from file /usr/local/etc/raddb/mods-enabled/digest
        # Loaded module rlm_dynamic_clients
        # Loading module "dynamic_clients" from file /usr/local/etc/raddb/mods-enabled/dynamic_clients
        # Loaded module rlm_eap
        # Loading module "eap" from file /usr/local/etc/raddb/mods-enabled/eap
        eap {
        	default_eap_type = "md5"
        	timer_expire = 60
        	ignore_unknown_eap_types = no
        	cisco_accounting_username_bug = no
        	max_sessions = 4096
        }
        # Loaded module rlm_exec
        # Loading module "echo" from file /usr/local/etc/raddb/mods-enabled/echo
        exec echo {
        	wait = yes
        	program = "/bin/echo %{User-Name}"
        	input_pairs = "request"
        	output_pairs = "reply"
        	shell_escape = yes
        }
        # Loading module "exec" from file /usr/local/etc/raddb/mods-enabled/exec
        exec {
        	wait = no
        	input_pairs = "request"
        	shell_escape = yes
        	timeout = 10
        }
        # Loaded module rlm_expiration
        # Loading module "expiration" from file /usr/local/etc/raddb/mods-enabled/expiration
        # Loaded module rlm_expr
        # Loading module "expr" from file /usr/local/etc/raddb/mods-enabled/expr
        expr {
        	safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ"
        }
        # Loaded module rlm_files
        # Loading module "files" from file /usr/local/etc/raddb/mods-enabled/files
        files {
        	filename = "/usr/local/etc/raddb/mods-config/files/authorize"
        	acctusersfile = "/usr/local/etc/raddb/mods-config/files/accounting"
        	preproxy_usersfile = "/usr/local/etc/raddb/mods-config/files/pre-proxy"
        }
        # Loaded module rlm_linelog
        # Loading module "linelog" from file /usr/local/etc/raddb/mods-enabled/linelog
        linelog {
        	filename = "/var/log/linelog"
        	escape_filenames = no
        	syslog_severity = "info"
        	permissions = 384
        	format = "This is a log message for %{User-Name}"
        	reference = "messages.%{%{reply:Packet-Type}:-default}"
        }
        # Loading module "log_accounting" from file /usr/local/etc/raddb/mods-enabled/linelog
        linelog log_accounting {
        	filename = "/var/log/linelog-accounting"
        	escape_filenames = no
        	syslog_severity = "info"
        	permissions = 384
        	format = ""
        	reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}"
        }
        # Loaded module rlm_logintime
        # Loading module "logintime" from file /usr/local/etc/raddb/mods-enabled/logintime
        logintime {
        	minimum_timeout = 60
        }
        # Loaded module rlm_mschap
        # Loading module "mschap" from file /usr/local/etc/raddb/mods-enabled/mschap
        mschap {
        	use_mppe = yes
        	require_encryption = no
        	require_strong = no
        	with_ntdomain_hack = yes
         passchange {
         }
        	allow_retry = yes
        	winbind_retry_with_normalised_username = no
        }
        # Loaded module rlm_realm
        # Loading module "IPASS" from file /usr/local/etc/raddb/mods-enabled/realm
        realm IPASS {
        	format = "prefix"
        	delimiter = "/"
        	ignore_default = no
        	ignore_null = yes
        }
        # Loading module "suffix" from file /usr/local/etc/raddb/mods-enabled/realm
        realm suffix {
        	format = "suffix"
        	delimiter = "@"
        	ignore_default = no
        	ignore_null = yes
        }
        # Loading module "realmpercent" from file /usr/local/etc/raddb/mods-enabled/realm
        realm realmpercent {
        	format = "suffix"
        	delimiter = "%"
        	ignore_default = no
        	ignore_null = yes
        }
        # Loading module "ntdomain" from file /usr/local/etc/raddb/mods-enabled/realm
        realm ntdomain {
        	format = "prefix"
        	delimiter = "\"
        	ignore_default = no
        	ignore_null = yes
        }
        # Loaded module rlm_pap
        # Loading module "pap" from file /usr/local/etc/raddb/mods-enabled/pap
        pap {
        	normalise = yes
        }
        # Loaded module rlm_passwd
        # Loading module "etc_passwd" from file /usr/local/etc/raddb/mods-enabled/passwd
        passwd etc_passwd {
        	filename = "/etc/passwd"
        	format = "*User-Name:Crypt-Password:"
        	delimiter = ":"
        	ignore_nislike = no
        	ignore_empty = yes
        	allow_multiple_keys = no
        	hash_size = 100
        }
        # Loaded module rlm_preprocess
        # Loading module "preprocess" from file /usr/local/etc/raddb/mods-enabled/preprocess
        preprocess {
        	huntgroups = "/usr/local/etc/raddb/mods-config/preprocess/huntgroups"
        	hints = "/usr/local/etc/raddb/mods-config/preprocess/hints"
        	with_ascend_hack = no
        	ascend_channels_per_line = 23
        	with_ntdomain_hack = no
        	with_specialix_jetstream_hack = no
        	with_cisco_vsa_hack = no
        	with_alvarion_vsa_hack = no
        }
        # Loaded module rlm_radutmp
        # Loading module "radutmp" from file /usr/local/etc/raddb/mods-enabled/radutmp
        radutmp {
        	filename = "/var/log/radutmp"
        	username = "%{User-Name}"
        	case_sensitive = yes
        	check_with_nas = yes
        	permissions = 384
        	caller_id = yes
        }
        # Loaded module rlm_counter
        # Loading module "daily" from file /usr/local/etc/raddb/mods-enabled/counter
        counter daily {
        	filename = "/var/log/radacct/timecounter/db.daily"
        	key = "User-Name"
        	reset = "daily"
        	count_attribute = "Acct-Session-Time"
        	counter_name = "Daily-Session-Time"
        	check_name = "Max-Daily-Session"
        	reply_name = "Session-Timeout"
        	cache_size = 5000
        }
        # Loading module "weekly" from file /usr/local/etc/raddb/mods-enabled/counter
        counter weekly {
        	filename = "/var/log/radacct/timecounter/db.weekly"
        	key = "User-Name"
        	reset = "weekly"
        	count_attribute = "Acct-Session-Time"
        	counter_name = "Weekly-Session-Time"
        	check_name = "Max-Weekly-Session"
        	reply_name = "Session-Timeout"
        	cache_size = 5000
        }
        # Loading module "monthly" from file /usr/local/etc/raddb/mods-enabled/counter
        counter monthly {
        	filename = "/var/log/radacct/timecounter/db.monthly"
        	key = "User-Name"
        	reset = "monthly"
        	count_attribute = "Acct-Session-Time"
        	counter_name = "Monthly-Session-Time"
        	check_name = "Max-Monthly-Session"
        	reply_name = "Session-Timeout"
        	cache_size = 5000
        }
        # Loading module "forever" from file /usr/local/etc/raddb/mods-enabled/counter
        counter forever {
        	filename = "/var/log/radacct/timecounter/db.forever"
        	key = "User-Name"
        	reset = "never"
        	count_attribute = "Acct-Session-Time"
        	counter_name = "Forever-Session-Time"
        	check_name = "Max-Forever-Session"
        	reply_name = "Session-Timeout"
        	cache_size = 5000
        }
        # Loaded module rlm_replicate
        # Loading module "replicate" from file /usr/local/etc/raddb/mods-enabled/replicate
        # Loaded module rlm_soh
        # Loading module "soh" from file /usr/local/etc/raddb/mods-enabled/soh
        soh {
        	dhcp = yes
        }
        # Loading module "sradutmp" from file /usr/local/etc/raddb/mods-enabled/sradutmp
        radutmp sradutmp {
        	filename = "/var/log/sradutmp"
        	username = "%{User-Name}"
        	case_sensitive = yes
        	check_with_nas = yes
        	permissions = 420
        	caller_id = no
        }
        # Loaded module rlm_unix
        # Loading module "unix" from file /usr/local/etc/raddb/mods-enabled/unix
        unix {
        	radwtmp = "/var/log/radwtmp"
        }
      Creating attribute Unix-Group
        # Loaded module rlm_always
        # Loading module "reject" from file /usr/local/etc/raddb/mods-enabled/always
        always reject {
        	rcode = "reject"
        	simulcount = 0
        	mpp = no
        }
        # Loading module "fail" from file /usr/local/etc/raddb/mods-enabled/always
        always fail {
        	rcode = "fail"
        	simulcount = 0
        	mpp = no
        }
        # Loading module "ok" from file /usr/local/etc/raddb/mods-enabled/always
        always ok {
        	rcode = "ok"
        	simulcount = 0
        	mpp = no
        }
        # Loading module "handled" from file /usr/local/etc/raddb/mods-enabled/always
        always handled {
        	rcode = "handled"
        	simulcount = 0
        	mpp = no
        }
        # Loading module "invalid" from file /usr/local/etc/raddb/mods-enabled/always
        always invalid {
        	rcode = "invalid"
        	simulcount = 0
        	mpp = no
        }
        # Loading module "userlock" from file /usr/local/etc/raddb/mods-enabled/always
        always userlock {
        	rcode = "userlock"
        	simulcount = 0
        	mpp = no
        }
        # Loading module "notfound" from file /usr/local/etc/raddb/mods-enabled/always
        always notfound {
        	rcode = "notfound"
        	simulcount = 0
        	mpp = no
        }
        # Loading module "noop" from file /usr/local/etc/raddb/mods-enabled/always
        always noop {
        	rcode = "noop"
        	simulcount = 0
        	mpp = no
        }
        # Loading module "updated" from file /usr/local/etc/raddb/mods-enabled/always
        always updated {
        	rcode = "updated"
        	simulcount = 0
        	mpp = no
        }
        # Loaded module rlm_unpack
        # Loading module "unpack" from file /usr/local/etc/raddb/mods-enabled/unpack
        # Loaded module rlm_utf8
        # Loading module "utf8" from file /usr/local/etc/raddb/mods-enabled/utf8
        # Loading module "motp" from file /usr/local/etc/raddb/mods-enabled/motp
        exec motp {
        	wait = yes
        	program = "/usr/local/bin/bash /usr/local/etc/raddb/scripts/otpverify.sh %{request:User-Name} %{request:User-Password} %{reply:MOTP-Init-Secret} %{reply:MOTP-PIN} %{reply:MOTP-Offset}"
        	shell_escape = yes
        }
        # Loading module "googleauth" from file /usr/local/etc/raddb/mods-enabled/googleauth
        exec googleauth {
        	wait = yes
        	program = "/usr/local/etc/raddb/scripts/googleauth.py %{request:User-Name} %{reply:MOTP-Init-Secret} %{reply:MOTP-PIN} %{request:User-Password}"
        	shell_escape = yes
        }
        # Loading module "datacounterdaily" from file /usr/local/etc/raddb/mods-enabled/datacounter_acct
        exec datacounterdaily {
        	wait = yes
        	program = "/bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}"
        	shell_escape = yes
        }
        # Loading module "datacounterweekly" from file /usr/local/etc/raddb/mods-enabled/datacounter_acct
        exec datacounterweekly {
        	wait = yes
        	program = "/bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}"
        	shell_escape = yes
        }
        # Loading module "datacountermonthly" from file /usr/local/etc/raddb/mods-enabled/datacounter_acct
        exec datacountermonthly {
        	wait = yes
        	program = "/bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}"
        	shell_escape = yes
        }
        # Loading module "datacounterforever" from file /usr/local/etc/raddb/mods-enabled/datacounter_acct
        exec datacounterforever {
        	wait = yes
        	program = "/bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}"
        	shell_escape = yes
        }
        instantiate {
        # Instantiating module "expiration" from file /usr/local/etc/raddb/mods-enabled/expiration
        # Instantiating module "logintime" from file /usr/local/etc/raddb/mods-enabled/logintime
        # Instantiating module "daily" from file /usr/local/etc/raddb/mods-enabled/counter
      rlm_counter: Current Time: 1542245846 [2018-11-14 19:37:26], Next reset 1542261600 [2018-11-15 00:00:00]
      rlm_counter: add_defaults: Start
      rlm_counter: DEFAULT1 set to 1542261600
      rlm_counter: DEFAULT2 set to 1542245846
      rlm_counter: add_defaults: End
        # Instantiating module "weekly" from file /usr/local/etc/raddb/mods-enabled/counter
      rlm_counter: Current Time: 1542245846 [2018-11-14 19:37:26], Next reset 1542520800 [2018-11-18 00:00:00]
      rlm_counter: add_defaults: Start
      rlm_counter: DEFAULT1 set to 1542520800
      rlm_counter: DEFAULT2 set to 1542245846
      rlm_counter: add_defaults: End
        # Instantiating module "monthly" from file /usr/local/etc/raddb/mods-enabled/counter
      rlm_counter: Current Time: 1542245846 [2018-11-14 19:37:26], Next reset 1543644000 [2018-12-01 00:00:00]
      rlm_counter: add_defaults: Start
      rlm_counter: DEFAULT1 set to 1543644000
      rlm_counter: DEFAULT2 set to 1542245846
      rlm_counter: add_defaults: End
        # Instantiating module "forever" from file /usr/local/etc/raddb/mods-enabled/counter
      rlm_counter: Current Time: 1542245846 [2018-11-14 19:37:26], Next reset 0 [2018-11-14 19:00:00]
      rlm_counter: add_defaults: Start
      rlm_counter: DEFAULT1 set to 0
      rlm_counter: DEFAULT2 set to 1542245846
      rlm_counter: add_defaults: End
        }
        # Instantiating module "attr_filter.post-proxy" from file /usr/local/etc/raddb/mods-enabled/attr_filter
      reading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/post-proxy
        # Instantiating module "attr_filter.pre-proxy" from file /usr/local/etc/raddb/mods-enabled/attr_filter
      reading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/pre-proxy
        # Instantiating module "attr_filter.access_reject" from file /usr/local/etc/raddb/mods-enabled/attr_filter
      reading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/access_reject
      [/usr/local/etc/raddb/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay" 	found in filter list for realm "DEFAULT".
      [/usr/local/etc/raddb/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay-USec" 	found in filter list for realm "DEFAULT".
        # Instantiating module "attr_filter.access_challenge" from file /usr/local/etc/raddb/mods-enabled/attr_filter
      reading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/access_challenge
        # Instantiating module "attr_filter.accounting_response" from file /usr/local/etc/raddb/mods-enabled/attr_filter
      reading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/accounting_response
        # Instantiating module "cache_eap" from file /usr/local/etc/raddb/mods-enabled/cache_eap
      rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked
        # Instantiating module "detail" from file /usr/local/etc/raddb/mods-enabled/detail
        # Instantiating module "auth_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
      rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output
        # Instantiating module "reply_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
        # Instantiating module "pre_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
        # Instantiating module "post_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
        # Instantiating module "eap" from file /usr/local/etc/raddb/mods-enabled/eap
         # Linked to sub-module rlm_eap_md5
         # Linked to sub-module rlm_eap_leap
         # Linked to sub-module rlm_eap_gtc
         gtc {
         	challenge = "Password: "
         	auth_type = "PAP"
         }
         # Linked to sub-module rlm_eap_tls
         tls {
         	tls = "tls-common"
         }
         tls-config tls-common {
         	verify_depth = 0
         	ca_path = "/usr/local/etc/raddb/certs"
         	pem_file_type = yes
         	private_key_file = "/usr/local/etc/raddb/certs/server_key.pem"
         	certificate_file = "/usr/local/etc/raddb/certs/server_cert.pem"
         	ca_file = "/usr/local/etc/raddb/certs/ca_cert.pem"
         	dh_file = "/usr/local/etc/raddb/certs/dh"
         	random_file = "/dev/urandom"
         	fragment_size = 1024
         	include_length = yes
         	auto_chain = yes
         	check_crl = no
         	check_all_crl = no
         	cipher_list = "DEFAULT"
         	cipher_server_preference = no
         	ecdh_curve = "prime256v1"
         	tls_max_version = ""
         	tls_min_version = "1.0"
          cache {
          	enable = no
          	lifetime = 24
          	max_entries = 255
          }
          verify {
          	skip_if_ocsp_ok = no
          }
          ocsp {
          	enable = no
          	override_cert_url = no
          	url = "http://127.0.0.1/ocsp/"
          	use_nonce = yes
          	timeout = 0
          	softfail = no
          }
         }
         # Linked to sub-module rlm_eap_ttls
         ttls {
         	tls = "tls-common"
         	default_eap_type = "md5"
         	copy_request_to_tunnel = no
         	use_tunneled_reply = no
         	virtual_server = "inner-tunnel-ttls"
         	include_length = yes
         	require_client_cert = no
         }
      tls: Using cached TLS configuration from previous invocation
         # Linked to sub-module rlm_eap_peap
         peap {
         	tls = "tls-common"
         	default_eap_type = "mschapv2"
         	copy_request_to_tunnel = no
         	use_tunneled_reply = no
         	proxy_tunneled_request_as_eap = yes
         	virtual_server = "inner-tunnel-peap"
         	soh = no
         	require_client_cert = no
         }
      tls: Using cached TLS configuration from previous invocation
         # Linked to sub-module rlm_eap_mschapv2
         mschapv2 {
         	with_ntdomain_hack = no
         	send_error = no
         }
        # Instantiating module "files" from file /usr/local/etc/raddb/mods-enabled/files
      reading pairlist file /usr/local/etc/raddb/mods-config/files/authorize
      reading pairlist file /usr/local/etc/raddb/mods-config/files/accounting
      reading pairlist file /usr/local/etc/raddb/mods-config/files/pre-proxy
        # Instantiating module "linelog" from file /usr/local/etc/raddb/mods-enabled/linelog
        # Instantiating module "log_accounting" from file /usr/local/etc/raddb/mods-enabled/linelog
        # Instantiating module "mschap" from file /usr/local/etc/raddb/mods-enabled/mschap
      rlm_mschap (mschap): using internal authentication
        # Instantiating module "IPASS" from file /usr/local/etc/raddb/mods-enabled/realm
        # Instantiating module "suffix" from file /usr/local/etc/raddb/mods-enabled/realm
        # Instantiating module "realmpercent" from file /usr/local/etc/raddb/mods-enabled/realm
        # Instantiating module "ntdomain" from file /usr/local/etc/raddb/mods-enabled/realm
        # Instantiating module "pap" from file /usr/local/etc/raddb/mods-enabled/pap
        # Instantiating module "etc_passwd" from file /usr/local/etc/raddb/mods-enabled/passwd
      rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no
        # Instantiating module "preprocess" from file /usr/local/etc/raddb/mods-enabled/preprocess
      reading pairlist file /usr/local/etc/raddb/mods-config/preprocess/huntgroups
      reading pairlist file /usr/local/etc/raddb/mods-config/preprocess/hints
        # Instantiating module "reject" from file /usr/local/etc/raddb/mods-enabled/always
        # Instantiating module "fail" from file /usr/local/etc/raddb/mods-enabled/always
        # Instantiating module "ok" from file /usr/local/etc/raddb/mods-enabled/always
        # Instantiating module "handled" from file /usr/local/etc/raddb/mods-enabled/always
        # Instantiating module "invalid" from file /usr/local/etc/raddb/mods-enabled/always
        # Instantiating module "userlock" from file /usr/local/etc/raddb/mods-enabled/always
        # Instantiating module "notfound" from file /usr/local/etc/raddb/mods-enabled/always
        # Instantiating module "noop" from file /usr/local/etc/raddb/mods-enabled/always
        # Instantiating module "updated" from file /usr/local/etc/raddb/mods-enabled/always
       } # modules
      radiusd: #### Loading Virtual Servers ####
      server { # from file /usr/local/etc/raddb/radiusd.conf
      } # server
      server default { # from file /usr/local/etc/raddb/sites-enabled/default
       # Loading authenticate {...}
       # Loading authorize {...}
       # Loading preacct {...}
       # Loading accounting {...}
       # Loading session {...}
       # Loading pre-proxy {...}
       # Loading post-proxy {...}
       # Loading post-auth {...}
      } # server default
      server inner-tunnel-ttls { # from file /usr/local/etc/raddb/sites-enabled/inner-tunnel-ttls
       # Loading authenticate {...}
       # Loading authorize {...}
      Ignoring "sql" (see raddb/mods-available/README.rst)
      Ignoring "ldap" (see raddb/mods-available/README.rst)
       # Loading session {...}
       # Loading post-proxy {...}
       # Loading post-auth {...}
       # Skipping contents of 'if' as it is always 'false' -- /usr/local/etc/raddb/sites-enabled/inner-tunnel-ttls:63
      } # server inner-tunnel-ttls
      server inner-tunnel-peap { # from file /usr/local/etc/raddb/sites-enabled/inner-tunnel-peap
       # Loading authenticate {...}
       # Loading authorize {...}
       # Loading session {...}
       # Loading post-proxy {...}
       # Loading post-auth {...}
       # Skipping contents of 'if' as it is always 'false' -- /usr/local/etc/raddb/sites-enabled/inner-tunnel-peap:63
      } # server inner-tunnel-peap
      radiusd: #### Opening IP addresses and Ports ####
      listen {
        	type = "auth"
        	ipaddr = *
        	port = 1812
      Failed binding to auth address * port 1812 bound to server default: Address already in use
      /usr/local/etc/raddb/sites-enabled/default[2]: Error binding to port for 0.0.0.0 port 1812
      

      This 2.4.4 server should be a backup for some contingency and we should be able to make the change between one and the other so that the backup works, or we would have to make an adjustment in the clients? We hope you can help us

      Thank you

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.