Трафик с 192.168.*.* и 10.23.6*.*

[DJ Jack 0]

То есть

root пароль?

[madf 279]

Нет, secret прописанный в конфиге радиуса

[DJ Jack 0]

ну я пробовал root - oh2iFa нет доступа

127.0.0.1 - oh2iFa нет доступа

w001 - oh2iFa нет доступа

Plugin radius.so loaded.

RADIUS plugin initialized.

using channel 181

Using interface ppp2

Connect: ppp2 <--> /dev/pts/8

sent [LCP ConfReq id=0x1 <mru 1472> <auth eap> <magic 0x46e027e4>]

rcvd [LCP ConfNak id=0x1 <auth chap MS-v2>]

sent [LCP ConfReq id=0x2 <mru 1472> <auth chap MS-v2> <magic 0x46e027e4>]

rcvd [LCP ConfAck id=0x2 <mru 1472> <auth chap MS-v2> <magic 0x46e027e4>]

rcvd [LCP ConfReq id=0x1 <mru 1492> <magic 0x3f506a23> <callback CBCP> <mrru 1614> <endpoint [local:3d.12.d1.dc.bd.fa.4e.51.be.e4.e7.b1.a4.bb.ce.53.00.00.00.00]>]

sent [LCP ConfRej id=0x1 <callback CBCP> <mrru 1614> <endpoint [local:3d.12.d1.dc.bd.fa.4e.51.be.e4.e7.b1.a4.bb.ce.53.00.00.00.00]>]

rcvd [LCP ConfReq id=0x2 <mru 1492> <magic 0x3f506a23>]

sent [LCP ConfAck id=0x2 <mru 1492> <magic 0x3f506a23>]

sent [LCP EchoReq id=0x0 magic=0x46e027e4]

sent [CHAP Challenge id=0x58 <7661d58d941947f9d5d98ab27759fd5c>, name = "w001.portal-saratov.ru"]

rcvd [LCP Ident id=0x3 magic=0x3f506a23 "MSRASV5.10"]

rcvd [LCP Ident id=0x4 magic=0x3f506a23 "MSRAS-0-PHILKA"]

rcvd [LCP EchoRep id=0x0 magic=0x3f506a23]

rcvd [CHAP Response id=0x58 <046e2ac68d92c8a4e759cf1f2608501f0000000000000000b94d2ef3477b94ca8d38ad9cb5861

8653738abdb325c9e6e00>, name = "w001"]

/etc/radiusclient/radiusclient.conf: line 1: bogus format: auth_order radius,local

RADIUS: Can't read config file /etc/radiusclient/radiusclient.conf

Peer w001 failed CHAP authentication

sent [CHAP Failure id=0x58 ""]

sent [LCP TermReq id=0x3 "Authentication failed"]

rcvd [LCP TermAck id=0x3 "Authentication failed"]

Connection terminated.

Waiting for 1 child processes...

pppoe: read (asyncReadFromPPP): Session 53: Input/output error

script /usr/sbin/pppoe -n -I eth0 -e 53:00:1f:d0:67:d2:c2 -S '', pid 1270

Terminating on signal 15

sending SIGTERM to process 1270

[madf 279]

RADIUS: Can't read config file /etc/radiusclient/radiusclient.conf

 

Тебе там нужно прописать: адрес или hostname RADIUS-сервера и его secret.

secret должен совпадать с тем, который прописан в секции клиента (у меня - /etc/raddb/client.conf)

[DJ Jack 0]

Да понял что нужно делать

/etc/raddb/clients.conf

secret = testing123

 

#

# The short name is used as an alias for the fully qualified

# domain name, or the IP address.

#

shortname = localhost

 

значит пишем в /etc/radiusclient/servers

localhost testing123

 

НО,доступ запрещен.

Хоть стреляй,хоть падай,а насчет

RADIUS: Can't read config file /etc/radiusclient/radiusclient.conf

Это фигня какаета,но он его читает

[madf 279]

А ты его, часом, не из-под виндов редактируеш?

Она расставляет в конце строки символы \r

[DJ Jack 0]

Через виндовс , samda у меня стоит на сервере.

Ну и через \\айпи я и попадаю на сервер и там через блокнот.

[madf 279]

Тогда, скорее всего, ему не нравятся символы \r в конце строк. Плохая это идея - в винде файлы редактировать.

[DJ Jack 0]

ну я 2 года редактировал.. правда раньше там стоял гном,а щас kde и некоторые файлы ему не нравится.

[madf 279]

И радиус редактировал? Это ж от программы зависит

[DJ Jack 0]

радиус я щас вообще не трогал.

Я его поставил с делфа и все

[madf 279]

Ну вот ему может и не нравится завершающий \r

[DJ Jack 0]

Решил проблему,передставил с делфа радисус клиент

теперь когда запускаю

вот логи pppoe

Plugin radius.so loaded.

RADIUS plugin initialized.

using channel 227

Using interface ppp2

Connect: ppp2 <--> /dev/pts/3

sent [LCP ConfReq id=0x1 <mru 1472> <auth eap> <magic 0xebdd667a>]

rcvd [LCP ConfNak id=0x1 <auth chap MS-v2>]

sent [LCP ConfReq id=0x2 <mru 1472> <auth chap MS-v2> <magic 0xebdd667a>]

rcvd [LCP ConfAck id=0x2 <mru 1472> <auth chap MS-v2> <magic 0xebdd667a>]

rcvd [LCP ConfReq id=0x1 <mru 1492> <magic 0x2f0b32a5> <callback CBCP> <mrru 1614> <endpoint [local:3d.12.d1.dc.bd.fa.4e.51.be.e4.e7.b1.a4.bb.ce.53.00.00.00.00]>]

sent [LCP ConfRej id=0x1 <callback CBCP> <mrru 1614> <endpoint [local:3d.12.d1.dc.bd.fa.4e.51.be.e4.e7.b1.a4.bb.ce.53.00.00.00.00]>]

rcvd [LCP ConfReq id=0x2 <mru 1492> <magic 0x2f0b32a5>]

sent [LCP ConfAck id=0x2 <mru 1492> <magic 0x2f0b32a5>]

sent [LCP EchoReq id=0x0 magic=0xebdd667a]

sent [CHAP Challenge id=0xe4 <f61c405455db0cebfcd5637d76c278e3>, name = "w001.portal-saratov.ru"]

rcvd [LCP Ident id=0x3 magic=0x2f0b32a5 "MSRASV5.10"]

rcvd [LCP Ident id=0x4 magic=0x2f0b32a5 "MSRAS-0-PHILKA"]

rcvd [LCP EchoRep id=0x0 magic=0x2f0b32a5]

rcvd [CHAP Response id=0xe4 <96ad2c21f81addb41cd30ea7fa0bb9b20000000000000000cfe1926015e26840c1fd2577652f8

22841d04a76e9d16a9700>, name = "localhost"]

rc_avpair_new: unknown attribute 11

rc_avpair_new: unknown attribute 25

rc_send_server: no reply from RADIUS server localhost:1812

Peer localhost failed CHAP authentication

sent [CHAP Failure id=0xe4 ""]

sent [LCP TermReq id=0x3 "Authentication failed"]

rcvd [CHAP Response id=0xe4 <96ad2c21f81addb41cd30ea7fa0bb9b20000000000000000cfe1926015e26840c1fd2577652f8

22841d04a76e9d16a9700>, name = "localhost"]

Discarded non-LCP packet when LCP not open

rcvd [CHAP Response id=0xe4 <96ad2c21f81addb41cd30ea7fa0bb9b20000000000000000cfe1926015e26840c1fd2577652f8

22841d04a76e9d16a9700>, name = "localhost"]

Discarded non-LCP packet when LCP not open

rcvd [CHAP Response id=0xe4 <96ad2c21f81addb41cd30ea7fa0bb9b20000000000000000cfe1926015e26840c1fd2577652f8

22841d04a76e9d16a9700>, name = "localhost"]

Discarded non-LCP packet when LCP not open

rcvd [CHAP Response id=0xe4 <96ad2c21f81addb41cd30ea7fa0bb9b20000000000000000cfe1926015e26840c1fd2577652f8

22841d04a76e9d16a9700>, name = "localhost"]

Discarded non-LCP packet when LCP not open

rcvd [CHAP Response id=0xe4 <96ad2c21f81addb41cd30ea7fa0bb9b20000000000000000cfe1926015e26840c1fd2577652f8

22841d04a76e9d16a9700>, name = "localhost"]

Discarded non-LCP packet when LCP not open

rcvd [CHAP Response id=0xe4 <96ad2c21f81addb41cd30ea7fa0bb9b20000000000000000cfe1926015e26840c1fd2577652f8

22841d04a76e9d16a9700>, name = "localhost"]

Discarded non-LCP packet when LCP not open

rcvd [LCP EchoReq id=0x6 magic=0x2f0b32a5 52 53 50 45]

rcvd [CHAP Response id=0xe4 <96ad2c21f81addb41cd30ea7fa0bb9b20000000000000000cfe1926015e26840c1fd2577652f8

22841d04a76e9d16a9700>, name = "localhost"]

Discarded non-LCP packet when LCP not open

rcvd [CHAP Response id=0xe4 <96ad2c21f81addb41cd30ea7fa0bb9b20000000000000000cfe1926015e26840c1fd2577652f8

22841d04a76e9d16a9700>, name = "localhost"]

Discarded non-LCP packet when LCP not open

rcvd [CHAP Response id=0xe4 <96ad2c21f81addb41cd30ea7fa0bb9b20000000000000000cfe1926015e26840c1fd2577652f8

22841d04a76e9d16a9700>, name = "localhost"]

Discarded non-LCP packet when LCP not open

rcvd [LCP EchoReq id=0x6 magic=0x2f0b32a5 52 53 50 45]

rcvd [LCP TermAck id=0x3 "Authentication failed"]

Connection terminated.

pppoe: read (asyncReadFromPPP): Session 38: Input/output error

Waiting for 1 child processes...

script /usr/sbin/pppoe -n -I eth0 -e 38:00:1f:d0:67:d2:c2 -S '', pid 2456

Terminating on signal 15

sending SIGTERM to process 2456

а вот что с терминала

Listening on authentication address * port 1812

Listening on accounting address * port 1813

Listening on proxy address * port 1814

Ready to process requests.

Ignoring request to authentication address * port 1812 from unknown client 192.168.1.4 port 32849

Ready to process requests.

Ignoring request to authentication address * port 1812 from unknown client 192.168.1.4 port 32849

Ready to process requests.

Ignoring request to authentication address * port 1812 from unknown client 192.168.1.4 port 32849

Ready to process requests.

Проблема с Discarded non-LCP packet when LCP not open,я как-то сталкивался давно,не помню как решал. Ты не помнишь?

[madf 279]

Ignoring request to authentication address * port 1812 from unknown client 192.168.1.4 port 32849

 

Ты в секции клиентов не разрешил запросы с этого клиента

[DJ Jack 0]

Глупый вопрос конечно,но в каком файле добавить?

[madf 279]

clients.conf

[DJ Jack 0]

Нефига.

client 192.168.1.4 {

#

# The shared secret use to "encrypt" and "sign" packets between

# the NAS and FreeRADIUS. You MUST change this secret from the

# default, otherwise it's not a secret any more!

#

# The secret can be any string, up to 31 characters in length.

#

secret = testing123

 

#

# The short name is used as an alias for the fully qualified

# domain name, or the IP address.

#

shortname = localhost

 

#

# the following three fields are optional, but may be used by

# checkrad.pl for simultaneous use checks

#

 

#

# The nastype tells 'checkrad.pl' which NAS-specific method to

# use to query the NAS for simultaneous use.

#

# Permitted NAS types are:

#

# cisco

# computone

# livingston

# max40xx

# multitech

# netserver

# pathras

# patton

# portslave

# tc

# usrhiper

# other # for all other types

 

#

nastype = other # localhost isn't usually a NAS...

 

#

# The following two configurations are for future use.

# The 'naspasswd' file is currently used to store the NAS

# login name and password, which is used by checkrad.pl

# when querying the NAS for simultaneous use.

#

# login = !root

# password = someadminpas

}

-------------

client 192.168.1.4 { - стоит,сервер перезапустил,все равно игнорит.

[egor2fsys 5]

Кстати, по логу старта радиуса не видно загрузки модуля rlm_stg. Где он ? Он должен быть включен в конфиге радиуса с соотв. опциями для подгрузки при старте.

[DJ Jack 0]

Мы сейчас без старгазера пробуем настроить pppoe и радиус.

[madf 279]

shortname = localhost - думаю, проблема в этом. Впиши адрес сюда.

[DJ Jack 0]

Я вчера уже пробовал.. не фига...

[madf 279]

SELinux не включен, случайно?

[DJ Jack 0]

Я его всегда отключаю когда систему настраиваю.

[madf 279]

Ну тогда не знаю. У меня таких проблем никогда небыло. Это, собсно, вопрос настройки FreeRADIUS. Попробуй поспрашивать на специализированных форумах.

[DJ Jack 0]

Ну эту проблему я решил сам,уже давно,просто времени не было написать сюда новую проблему)

 

 

Listening on authentication address * port 1812

Listening on accounting address * port 1813

Listening on proxy address * port 1814

Ready to process requests.

"testing123"localhostrad_recv: Access-Request packet from host 192.168.1.4 port 33064, id=175, length=73

Service-Type = Framed-User

Framed-Protocol = PPP

User-Name = "localhost"

User-Password = "~.\220\2424\227$p\016\0312\217((\267+"

NAS-IP-Address = 127.0.0.1

NAS-Port = 1

+- entering group authorize {...}

++[preprocess] returns ok

++[chap] returns noop

++[mschap] returns noop

[suffix] No '@' in User-Name = "localhost", looking up realm NULL

[suffix] No such realm "NULL"

++[suffix] returns noop

[eap] No EAP-Message, not doing EAP

++[eap] returns noop

++[unix] returns notfound

[files] users: Matched entry DEFAULT at line 172

++[files] returns ok

++[expiration] returns noop

++[logintime] returns noop

[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.

++[pap] returns noop

No authenticate method (Auth-Type) configuration found for the request: Rejecting the user

Failed to authenticate the user.

WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS!

Using Post-Auth-Type Reject

+- entering group REJECT {...}

[attr_filter.access_reject] expand: %{User-Name} -> localhost

attr_filter: Matched entry DEFAULT at line 11

++[attr_filter.access_reject] returns updated

Delaying reject of request 0 for 1 seconds

Going to the next request

Waking up in 0.9 seconds.

Sending delayed reject for request 0

Sending Access-Reject of id 175 to 192.168.1.4 port 33064

Waking up in 4.9 seconds.

Cleaning up request 0 ID 175 with timestamp +53

Ready to process requests.

 

Это как объясните?

Доступ запрещен...