Freeradius

[speedfire87 7]

Кто знает как его можно нормально установить, (Debian lanny 2.6.26-2-amd64 stg-2.406 FreeRADIUS Version 2.0.4) мануалы с веб интерфейсом особо не интересуют, покамест застрял на ошибке : /etc/freeradius/radiusd.conf[914]: Invalid version in module 'rlm_stg'

Errors initializing modules

[Neelix 33]

OS?

Версия радиуса? без старгейзера работает?

[speedfire87 7]

Debian lanny 2.6.26-2-amd64 stg-2.406 FreeRADIUS Version 2.0.4

[madf 279]

rlm_stg поставляемый со Stargazer'ом не совместим с FreeRADIUS ветки 2

[speedfire87 7]

какой версии должен быть радиус что бы rlm_stg заработал, либо какой выход из данной ситуации?

[madf 279]

какой версии должен быть радиус что бы rlm_stg заработал, либо какой выход из данной ситуации?

Любой меньше 2. Например 1.5.

[speedfire87 7]

В чем бок кто знает ?

radius v 1.1.8

radiusd.conf

prefix = /usr/local

exec_prefix = ${prefix}

sysconfdir = ${prefix}/etc

localstatedir = ${prefix}/var

sbindir = ${exec_prefix}/sbin

logdir = ${localstatedir}/log/radius

raddbdir = ${sysconfdir}/raddb

radacctdir = ${logdir}/radacct

confdir = ${raddbdir}

run_dir = ${localstatedir}/run/radiusd

log_file = ${logdir}/radius.log

libdir = ${exec_prefix}/lib

pidfile = ${run_dir}/radiusd.pid

#user = nobody

#group = nobody

max_request_time = 30

delete_blocked_requests = no

cleanup_delay = 5

max_requests = 1024

#bind_address = *

#port = 0

listen {

ipaddr = *

port = 0

type = auth

}

listen {

ipaddr = *

port = 0

type = acct

}

 

hostname_lookups = no

allow_core_dumps = no

regular_expressions = yes

extended_expressions = yes

log_stripped_names = no

log_auth = no

log_auth_badpass = no

log_auth_goodpass = no

usercollide = no

lower_user = no

lower_pass = no

nospace_user = no

nospace_pass = no

security {

max_attributes = 200

reject_delay = 1

status_server = no

}

 

client 127.0.0.1 {

secret = 123456

shortname = localhost

}

 

thread pool {

start_servers = 5

max_servers = 32

min_spare_servers = 3

max_spare_servers = 10

max_requests_per_server = 0

}

 

modules {

### STG

stg{

local_port = 6667

server = localhost

port = 6666

password = 123456

}

pap {

encryption_scheme = crypt

}

chap {

authtype = CHAP

}

mschap {

}

}

 

# Instantiation

instantiate {

stg

}

 

authorize {

stg

chap

mschap

}

 

# Authentication.

authenticate {

stg

Auth-Type PAP {

pap

}

Auth-Type CHAP {

chap

}

Auth-Type MS-CHAP {

mschap

}

}

 

accounting {

stg

}

 

session {

}

 

post-auth {

stg

}

#####################

stargazer.conf

# </Module>

 

 

<Module radius>

Password = 123456

ServerIP = 127.0.0.1

Port = 6666

AuthServices = Login-User

AcctServices = Framed-User

</Module>

#########################

lof /sbin/radiusd -X

 

 

Starting - reading configuration files ...

reread_config: reading radiusd.conf

main: prefix = "/"

main: localstatedir = "//var"

main: logdir = "//var/log/radius"

main: libdir = "//lib"

main: radacctdir = "//var/log/radius/radacct"

main: hostname_lookups = no

main: snmp = no

main: max_request_time = 30

main: cleanup_delay = 5

main: max_requests = 1024

main: delete_blocked_requests = 0

main: port = 1812

main: allow_core_dumps = no

main: log_stripped_names = no

main: log_file = "//var/log/radius/radius.log"

main: log_auth = no

main: log_auth_badpass = no

main: log_auth_goodpass = no

main: pidfile = "//var/run/radiusd/radiusd.pid"

main: user = "(null)"

main: group = "(null)"

main: usercollide = no

main: lower_user = "no"

main: lower_pass = "no"

main: nospace_user = "no"

main: nospace_pass = "no"

main: checkrad = "//sbin/checkrad"

main: proxy_requests = yes

security: max_attributes = 200

security: reject_delay = 1

security: status_server = no

main: debug_level = 0

read_config_files: reading dictionary

read_config_files: reading naslist

Using deprecated naslist file. Support for this will go away soon.

read_config_files: reading clients

read_config_files: reading realms

listen: port = 0

listen: type = "auth"

listen: port = 0

listen: type = "acct"

radiusd: entering modules setup

Module: Library search path is /lib

rlm_stg: stg_init()

Module: Loaded stg

rlm_stg: stg_instantiate()

stg: password = "123456"

stg: server = "localhost"

stg: port = 6666

stg: local_port = 6667

Module: Instantiated stg (stg)

Module: Loaded PAP

pap: encryption_scheme = "crypt"

pap: auto_header = no

Module: Instantiated pap (pap)

Module: Instantiated pap (pap)

Module: Loaded CHAP

Module: Instantiated chap (chap)

Module: Loaded MS-CHAP

mschap: use_mppe = yes

mschap: require_encryption = no

mschap: require_strong = no

mschap: with_ntdomain_hack = no

mschap: passwd = "(null)"

mschap: ntlm_auth = "(null)"

Module: Instantiated mschap (mschap)

Listening on authentication *:1812

Listening on accounting *:1813

Ready to process requests.

rad_recv: Access-Request packet from host 127.0.0.1:35431, id=237, length=147

Service-Type = Framed-User

Framed-Protocol = PPP

User-Name = "alexxx"

MS-CHAP-Challenge = 0x183ab315c77755674c072b553c601860

MS-CHAP2-Response = 0x9800eb2a20e021655df03b98cc820241ee4b0000000000000000c8de19c3483732489a3b2e89084c30574a7df24226d4c9f1

Calling-Station-Id = "10.10.11.18"

NAS-IP-Address = 93.127.22.235

NAS-Port = 1

Processing the authorize section of radiusd.conf

modcall: entering group authorize for request 0

rlm_stg: stg_authorize()

rlm_stg: stg_authorize() user name defined as 'alexxx'

rlm_stg: stg_authorize() request username field: 'alexxx'

rlm_stg: stg_authorize() Service-Type defined as 'Framed-User'

modcall[authorize]: module "stg" returns updated for request 0

modcall[authorize]: module "chap" returns noop for request 0

rlm_mschap: Found MS-CHAP attributes. Setting 'Auth-Type = mschap'

modcall[authorize]: module "mschap" returns ok for request 0

modcall: leaving group authorize (returns updated) for request 0

rad_check_password: Found Auth-Type MS-CHAP

auth: type "MS-CHAP"

Processing the authenticate section of radiusd.conf

modcall: entering group MS-CHAP for request 0

rlm_mschap: Told to do MS-CHAPv2 for alexxx with NT-Password

rlm_mschap: adding MS-CHAPv2 MPPE keys

modcall[authenticate]: module "mschap" returns ok for request 0

modcall: leaving group MS-CHAP (returns ok) for request 0

Processing the post-auth section of radiusd.conf

modcall: entering group post-auth for request 0

rlm_stg: stg_postauth()

rlm_stg: stg_postauth() Service-Type defined as 'Framed-User'

rlm_stg: stg_postauth() ip = '10.10.11.18'

modcall[post-auth]: module "stg" returns updated for request 0

modcall: leaving group post-auth (returns updated) for request 0

Sending Access-Accept of id 237 to 127.0.0.1 port 35431

MS-CHAP2-Success = 0x98533d37334430303132443036413246464242463241423339453943464537373937463931433531384331

MS-MPPE-Recv-Key = 0xca8286f05ec65e3f341c99f58febe69b

MS-MPPE-Send-Key = 0x711067b33f540ea44e341aa93e38c13f

MS-MPPE-Encryption-Policy = 0x00000001

MS-MPPE-Encryption-Types = 0x00000006

Framed-IP-Address := 10.10.11.18

Finished request 0

Going to the next request

--- Walking the entire request list ---

Waking up in 6 seconds...

 

 

 

 

Вывод ошибка 691 Доступ запрещен поскольку такое имя не допустимо в этом домене.