Nie jesteś zalogowany.
Jeśli nie posiadasz konta, zarejestruj je już teraz! Pozwoli Ci ono w pełni korzystać z naszego serwisu. Spamerom dziękujemy!
Prosimy o pomoc dla małej Julki — przekaż 1% podatku na Fundacji Dzieciom zdazyć z Pomocą.
Więcej informacji na dug.net.pl/pomagamy/.
witam
od dluzszego czasu freeradius chodzil mi bez problemu.
freradiusa mam podlaczonego do bazy mysql ktora jest na osobnym hoscie.
dzisiaj zauwazylem ze nie dziala limit polaczen, moge nawiazac wiecej niz 1sesje pppoe dla jednego konta.
freeradius -X
pokazuje, ze nie jest wysylany do klienta portlimit.
moze cos z loga:
podczas startu ...
... authorize_group_check_query = "SELECT '1' as id,'users' as GroupName,'Simultaneous-Use' as Attribute,'1' as Value,':=' as op" ...
no i podczas polaczenia klienta:
Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 36334, id=167, length=112 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "blachjerzy" CHAP-Challenge = 0xbf0150606cbc0984eae0cbb367ed9d02 CHAP-Password = 0x97eff0899bd8ab482427f89d5450644cfd Calling-Station-Id = "00:24:1D:16:6A:43" NAS-IP-Address = 192.168.36.6 NAS-Port = 255 +- entering group authorize ++[preprocess] returns ok rlm_chap: Setting 'Auth-Type := CHAP' ++[chap] returns ok ++[mschap] returns noop rlm_eap: No EAP-Message, not doing EAP ++[eap] returns noop expand: %{User-Name} -> blachjerzy rlm_sql (sql): sql_set_user escaped user --> 'blachjerzy' rlm_sql (sql): Reserving sql socket id: 3 expand: SELECT id,name as username,'User-Password' as attribute,passwd as value,':=' as op FROM nodes WHERE name = '%{SQL-User-Name}' ORDER BY id -> SELECT id,name as username,'User-Password' as attribute,passwd as value,':=' as op FROM nodes WHERE name = 'blachjerzy' ORDER BY id rlm_sql (sql): User found in radcheck table expand: SELECT id,name as UserName,'Framed-IP-Address' as Attribute,inet_ntoa(ipaddr) as Value,'=' as op FROM nodes WHERE name = '%{SQL-User-Name}' ORDER BY id -> SELECT id,name as UserName,'Framed-IP-Address' as Attribute,inet_ntoa(ipaddr) as Value,'=' as op FROM nodes WHERE name = 'blachjerzy' ORDER BY id expand: SELECT groupname FROM usergroup WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT groupname FROM usergroup WHERE username = 'blachjerzy' ORDER BY id rlm_sql (sql): Released sql socket id: 3 ++[sql] returns ok rad_check_password: Found Auth-Type CHAP !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! Replacing User-Password in config items with Cleartext-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! Please update your configuration so that the "known good" !!! !!! clear text password is in Cleartext-Password, and not in User-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! auth: type "CHAP" +- entering group CHAP rlm_chap: login attempt by "blachjerzy" with CHAP password rlm_chap: Using clear text password "yKLy7OjSXghz52rc" for user blachjerzy authentication. rlm_chap: chap user blachjerzy authenticated succesfully ++[chap] returns ok Login OK: [blachjerzy/<CHAP-Password>] (from client localhost port 255 cli 00:24:1D:16:6A:43) +- entering group post-auth rlm_sql (sql): Processing sql_postauth expand: %{User-Name} -> blachjerzy rlm_sql (sql): sql_set_user escaped user --> 'blachjerzy' expand: %{User-Password} -> expand: %{Chap-Password} -> 0x97eff0899bd8ab482427f89d5450644cfd expand: INSERT INTO radpostauth (user, pass, reply, date) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') -> INSERT INTO radpostauth (user, pass, reply, date) VALUES ( 'blachjerzy', '0x97eff0899bd8ab482427f89d5450644cfd', 'Access-Accept', '2010-05-06 17:44:34') rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (user, pass, reply, date) VALUES ( 'blachjerzy', '0x97eff0899bd8ab482427f89d5450644cfd', 'Access-Accept', '2010-05-06 17:44:34') rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): Released sql socket id: 2 ++[sql] returns ok Sending Access-Accept of id 167 to 127.0.0.1 port 36334 Framed-IP-Address = 192.168.32.250 Finished request 1. Going to the next request Waking up in 4.9 seconds. rad_recv: Accounting-Request packet from host 127.0.0.1 port 55315, id=168, length=121 Acct-Session-Id = "4BE2E3E2546E00" User-Name = "blachjerzy" Acct-Status-Type = Start Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "00:24:1D:16:6A:43" Acct-Authentic = RADIUS NAS-Port-Type = Async Framed-IP-Address = 192.168.32.250 NAS-IP-Address = 192.168.36.6 NAS-Port = 255 Acct-Delay-Time = 0 +- entering group preacct ++[preprocess] returns ok rlm_acct_unique: Hashing 'NAS-Port = 255,Client-IP-Address = 127.0.0.1,NAS-IP-Address = 192.168.36.6,Acct-Session-Id = "4BE2E3E2546E00",User-Name = "blachjerzy"' rlm_acct_unique: Acct-Unique-Session-ID = "a645d60890796569". ++[acct_unique] returns ok rlm_realm: No '@' in User-Name = "blachjerzy", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop ++[files] returns noop +- entering group accounting expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/127.0.0.1/detail-20100506 rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/detail-20100506 expand: %t -> Thu May 6 17:44:34 2010 ++[detail] returns ok expand: %{User-Name} -> blachjerzy rlm_sql (sql): sql_set_user escaped user --> 'blachjerzy' expand: %{Acct-Delay-Time} -> 0 expand: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{%{Acct-Delay-Time}:-0}', '0') -> INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay) VALUES ('4BE2E3E2546E00', 'a645d60890796569', 'blachjerzy', '', '192.168.36.6', '255', 'Async', '2010-05-06 17:44:34', '', '0', 'RADIUS', '', '', '0', '0', '', '00:24:1D:16:6A:43', '', 'Framed-User', 'PPP', '192.168.32.250', '0', '0') rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 ++[sql] returns ok Sending Accounting-Response of id 168 to 127.0.0.1 port 55315 Finished request 2. Cleaning up request 2 ID 168 with timestamp +49 Going to the next request Waking up in 4.8 seconds. Cleaning up request 1 ID 167 with timestamp +49 Ready to process requests.
dlaczego nagle freeradius przestal odpowiadac klientowi z portlimit?
bardzo prosze o podpowiedzi. z gory dzieki.
jak juz wspomnialem baza sql stoi na osobnym hoscie. ostatnio kombinowalem z hostname /etc/hosts. czy zmiany w tych nazwach mogly by sie przyczynic do tego problemu?
Ostatnio edytowany przez Nicram (2010-05-06 18:15:21)
Offline
port limita ustaw tak
Port-Limit == 1
Z logów wynika że komunikacja z bazą jest wiec modyfikacje o których pisałeś nie mają wpływu (przeniesienie na innego hosta)
przjzyj tabele radacct jak wyglada sprawa sesji klijenta
i logi klienta z /var/log/freeradius/radacct/127.0.0.1/
Offline
moze nie bede kombinowal narazie zmieniac. dzialalo to dlugo i chcialbym znalezc przyczyne.
mam dwa "blizniacze" serwery z koncentratorami pppoe, na obu stoi ten sam freeradius i dostep maja do tej samej bazy.
wlasnie na tym drugin nic nie kombinowalem.
w logu /var/log/freeradius/radacct/127.0.0.1/detail... w zadnych z odpowiedzi do klienta nie widze Port-Limit=1, ale
odpalam freeradius -X
i do niektorych klietow jest to wysylane:
rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): Released sql socket id: 2 ++[sql] returns ok Sending Access-Accept of id 228 to 127.0.0.1 port 37546 Framed-IP-Address = 192.168.36.221 Framed-Protocol = PPP Framed-IP-Netmask = 255.255.255.255 Framed-MTU = 1492 Port-Limit = 1
a do innych nie. tak jak w wyzszym logu, nie do wszystkich sprawdza grupe.
Offline
nie widac w logu zeby pytal sie o grupe.
moze nie masz jej przypisanej ?
ja zawsze odlapam sobie sqltrace. wtedy widac eleganco czego sie pyta dokladnie radius bazy.
uzywam najnowszej z squeeze.
Offline
A nie chodzi przypadkiem o taki problem:
http://zibik.jogger.pl/2008/03/12/one-session-per-h … pod-linuksem/
lub sytuację, gdy po zerwaniu sesji ppp, odnowienie otwiera nową, a stara sobie wisi jakiś czas?
Offline