informationstechniker
Mar 22, 2008, updated at Mar 31, 2008 (UTC)
view8299
view7
0
Goto Top

Problem beim einrichten von Radius unter Debian

GermansolvedQuestionDebianLinux
Hi Leute,
ich suche jemanden der Radius schon mal unter Debian eingerichtet hat. Hab hier und da nen paar probleme.
Entweder hier Posten oder per email bei mir melden: meier_heinz<at>gmx-topmail.de
Gruß
comment-contentCommentShareShare
Share on Facebook Share on Twitter Share on Reddit Share on Linkedin

Content-Key: 83709

Url: https://administrator.de/contentid/83709

Printed on: April 26, 2024 at 07:04 o'clock

7 Comments
Latest comment
Goto Top
Member: aqui
aqui Mar 22, 2008 at 23:10:38 (UTC)
Goto Top
WAS fuer einen Radius Server denn ??? Vermutlich wohl den Freeradius ??? Und WO genau liegen die Probleme ??? Normalerweise hilft ein Debug mit dem Aufruf -X aber bei deinen mehr als duerftigen Angaben ist eine qualifizierte Hilfe nicht gerade sehr leicht wie du selber zugeben musst... face-sad
Member: informationstechniker
informationstechniker Mar 23, 2008 at 12:05:31 (UTC)
Goto Top
Hallo aqui,
also ich benutze freeradius.
debug hab ich schon gemacht. hatte mit aber nicht viel weiter geholfen. auch in der log datei stand nicht wirklich der fehler.
im moment hab ich den fehler das freeradius nicht mit sql spricht. steht zu mindest in der log datei. der radtest schlägt deswegen auch fehl. irgendwo hab ich da einen kleinen fehler.
hast du freeradius auf debian schon erfolgreich eingerichtet? ich hab auch schon jede menge anleitungen durch aber irgendwie läuft das nie.

Hier die aktuelle Fehlermeldung von der Log Datei:
/etc/freeradius/users[155]: Parse error (check) for entry DEFAULT: Unknown value sql for attribute Auth-Type

bin nach dieser Anleitung vor gegangen:
http://www.ban-solms.de/t/debian-radius.html
Member: aqui
aqui Mar 25, 2008 at 14:41:23 (UTC)
Goto Top
Das ist soweit auch alles richtig. Willst du denn einen SQL User so authentifizieren oder etwas anderes wie WLAN oder 802.1x von einem Netzdevice ??

Starte den Freeradius nicht wie es angegeben ist sondern mal mit

radiusd -xxyz oder einfach radiusd -X

Dann gibt der Radius Server dir ein sehr detailiertes Debugging wenn du zugreifst und einen User authentifizierst. Dort kannst du dann sofort sehen wo es kneift.

Den Server kannst du dann mit <ctrl c> beenden falls du ihn neu starten musst wenn du was an den Konfig Dateien verändert hast.
Member: informationstechniker
informationstechniker Mar 25, 2008 at 17:13:00 (UTC)
Goto Top
Hallo aqui,
also das problem hat sich heute erledigt!!! hab es durch viel viel viel suchen rausgefunden
und zwar hatte bei mir in der /usr/lib der rlm_sql_mysql.so gefehlt.
den musste ich nach installieren
Treiber liegt unter
/usr/src/freeradius1.1.7/src/modules/rlm_sql/drivers/rlm_sql_mysql

Dann
./configure
make
make install --> root rechte erforderlich!!!

Also mein freeradius läuft jetzt auf debian. das einzigste was noch net klappt sich mit dem pc zu verbinden. ich seh bei debug zwar schön alles, auch das er mir eine ip zuweist bloß bekomm ich nix??
da werd ich noch einen kleinen fehler haben irgendwo.
vieleicht hast du oder jemand anders eine idee was das sein könnte.
achso meine user sind in einer mysql datenbank die ich per phpmyadmin verwalte.

falls intresse bestehen würde an eine komplette anleitung würde ich sie online stellen wenn ich sie fertig zusammen gefasst habe.
Member: aqui
aqui Mar 26, 2008 at 08:13:09 (UTC)
Goto Top
Alle externen Radius Clients vom Netz müssen in die clients.conf Datei eingetragen werden. Am besten nimmst du das gesamte Netz ala:

#
client 192.168.1.0/24 {
        secret           = Geheim
        shortname       = labornetzwerk
}

Damit sind dann alle Clients aus dem Netz 192.168.1.0 zugelassen. In deiner Datei (Beispiel) stand nur der localhost drin.
Wenns rennt ist ein Tutorial nicht schelcht...
Wenns das war bitte
How can I mark a post as solved?
nicht vergessen.
Member: informationstechniker
informationstechniker Mar 26, 2008 at 19:18:31 (UTC)
Goto Top
Ich will ja nicht alle Clients zulassen sondern nur bestimmte. Und voraussetzung ist das leichte administrieren dh am besten mysql daten bank mit phpmyqadmin.
das hab ich auch alles.
aber wenn ich mich mit einem winXP client anmelden will klappt das ganze nicht. der client bekommt keine ip und sagt er ist nicht verbunden. was könnte das sein. hab wusb54gc von linksys mit kompletter software installiert.

das ist der log aus dem debug von radiusd -xxyx -l stdout:

rad_recv: Access-Request packet from host 192.168.49.120:3072, id=0, length=121
Wed Mar 26 20:06:02 2008 : Debug: --- Walking the entire request list ---
Wed Mar 26 20:06:02 2008 : Debug: Waking up in 31 seconds...
Wed Mar 26 20:06:02 2008 : Debug: Thread 2 got semaphore
Wed Mar 26 20:06:02 2008 : Debug: Thread 2 handling request 36, (8 handled so far)
User-Name = "alex"
NAS-IP-Address = 192.168.49.120
Called-Station-Id = "001d7e08d132"
Calling-Station-Id = "00197e0012ba"
NAS-Identifier = "001d7e08d132"
NAS-Port = 40
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
EAP-Message = 0x0200000901616c6578
Message-Authenticator = 0xbb18d771d38c2e7c4bcfe8bf8566c629
Wed Mar 26 20:06:02 2008 : Debug: Processing the authorize section of radiusd.conf
Wed Mar 26 20:06:02 2008 : Debug: modcall: entering group authorize for request 36
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 36
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 36
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "preprocess" returns ok for request 36
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 36
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 36
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "chap" returns noop for request 36
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 36
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 36
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "mschap" returns noop for request 36
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 36
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap: EAP packet type response id 0 length 9
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 36
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "eap" returns updated for request 36
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling files (rlm_files) for request 36
Wed Mar 26 20:06:02 2008 : Debug: users: Matched entry DEFAULT at line 153
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 36
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "files" returns ok for request 36
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling sql (rlm_sql) for request 36
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'alex'
Wed Mar 26 20:06:02 2008 : Debug: rlm_sql (sql): sql_set_user escaped user --> 'alex'
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'alex' ORDER BY id'
Wed Mar 26 20:06:02 2008 : Debug: rlm_sql (sql): Reserving sql socket id: 2
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'alex' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'alex' ORDER BY id'
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'alex' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
Wed Mar 26 20:06:02 2008 : Debug: rlm_sql (sql): Released sql socket id: 2
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from sql (rlm_sql) for request 36
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "sql" returns ok for request 36
Wed Mar 26 20:06:02 2008 : Debug: modcall: leaving group authorize (returns updated) for request 36
Wed Mar 26 20:06:02 2008 : Debug: rad_check_password: Found Auth-Type EAP
Wed Mar 26 20:06:02 2008 : Debug: auth: type "EAP"
Wed Mar 26 20:06:02 2008 : Debug: Processing the authenticate section of radiusd.conf
Wed Mar 26 20:06:02 2008 : Debug: modcall: entering group authenticate for request 36
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 36
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap: EAP Identity
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap: processing type tls
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap_tls: Initiate
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap_tls: Start returned 1
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authenticate]: returned from eap (rlm_eap) for request 36
Wed Mar 26 20:06:02 2008 : Debug: modcall[authenticate]: module "eap" returns handled for request 36
Wed Mar 26 20:06:02 2008 : Debug: modcall: leaving group authenticate (returns handled) for request 36
Sending Access-Challenge of id 0 to 192.168.49.120 port 3072
Framed-IP-Address := 192.168.49.135
Framed-Compression := Van-Jacobson-TCP-IP
Framed-Protocol := PPP
Service-Type := Framed-User
EAP-Message = 0x010100061920
Message-Authenticator = 0x00000000000000000000000000000000
State = 0xf29a84e34f18446789ba4ffbf8c6827a
Wed Mar 26 20:06:02 2008 : Debug: Finished request 36
Wed Mar 26 20:06:02 2008 : Debug: Going to the next request
Wed Mar 26 20:06:02 2008 : Debug: Thread 2 waiting to be assigned a request
rad_recv: Access-Request packet from host 192.168.49.120:3072, id=0, length=245
Wed Mar 26 20:06:02 2008 : Debug: rl_next: returning NULL
Wed Mar 26 20:06:02 2008 : Debug: Waking up in 31 seconds...
Wed Mar 26 20:06:02 2008 : Debug: Thread 3 got semaphore
Wed Mar 26 20:06:02 2008 : Debug: Thread 3 handling request 37, (8 handled so far)
User-Name = "alex"
NAS-IP-Address = 192.168.49.120
Called-Station-Id = "001d7e08d132"
Calling-Station-Id = "00197e0012ba"
NAS-Identifier = "001d7e08d132"
NAS-Port = 40
Framed-MTU = 1400
State = 0xf29a84e34f18446789ba4ffbf8c6827a
NAS-Port-Type = Wireless-802.11
EAP-Message = 0x02010073198000000069160301006401000060030147ea9eadd4ae183bfeba3b574c6cacd0670dff82e6d6b388b422e8a45a797a51000018002f00350005000ac009c00ac013c01400320038001300040100001f000000090007000004616c6578000a00080006001700180019000b00020100
Message-Authenticator = 0x26b656ab4eaaf92ae1ce886f915bf45b
Wed Mar 26 20:06:02 2008 : Debug: Processing the authorize section of radiusd.conf
Wed Mar 26 20:06:02 2008 : Debug: modcall: entering group authorize for request 37
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 37
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 37
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "preprocess" returns ok for request 37
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 37
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 37
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "chap" returns noop for request 37
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 37
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 37
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "mschap" returns noop for request 37
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 37
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap: EAP packet type response id 1 length 115
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 37
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "eap" returns updated for request 37
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling files (rlm_files) for request 37
Wed Mar 26 20:06:02 2008 : Debug: users: Matched entry DEFAULT at line 153
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 37
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "files" returns ok for request 37
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling sql (rlm_sql) for request 37
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'alex'
Wed Mar 26 20:06:02 2008 : Debug: rlm_sql (sql): sql_set_user escaped user --> 'alex'
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'alex' ORDER BY id'
Wed Mar 26 20:06:02 2008 : Debug: rlm_sql (sql): Reserving sql socket id: 1
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'alex' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'alex' ORDER BY id'
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'alex' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
Wed Mar 26 20:06:02 2008 : Debug: rlm_sql (sql): Released sql socket id: 1
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from sql (rlm_sql) for request 37
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "sql" returns ok for request 37
Wed Mar 26 20:06:02 2008 : Debug: modcall: leaving group authorize (returns updated) for request 37
Wed Mar 26 20:06:02 2008 : Debug: rad_check_password: Found Auth-Type EAP
Wed Mar 26 20:06:02 2008 : Debug: auth: type "EAP"
Wed Mar 26 20:06:02 2008 : Debug: Processing the authenticate section of radiusd.conf
Wed Mar 26 20:06:02 2008 : Debug: modcall: entering group authenticate for request 37
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 37
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap: Request found, released from the list
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap: EAP/peap
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap: processing type peap
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap_peap: Authenticate
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap_tls: processing TLS
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap_tls: Length Included
Wed Mar 26 20:06:02 2008 : Debug: eaptls_verify returned 11
Wed Mar 26 20:06:02 2008 : Debug: (other): before/accept initialization
Wed Mar 26 20:06:02 2008 : Debug: TLS_accept: before/accept initialization
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap_tls: <<< TLS 1.0 Handshake [length 0064], ClientHello
Wed Mar 26 20:06:02 2008 : Debug: TLS_accept: SSLv3 read client hello A
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello
Wed Mar 26 20:06:02 2008 : Debug: TLS_accept: SSLv3 write server hello A
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap_tls: >>> TLS 1.0 Handshake [length 055b], Certificate
Wed Mar 26 20:06:02 2008 : Debug: TLS_accept: SSLv3 write certificate A
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone
Wed Mar 26 20:06:02 2008 : Debug: TLS_accept: SSLv3 write server done A
Wed Mar 26 20:06:02 2008 : Debug: TLS_accept: SSLv3 flush data
Wed Mar 26 20:06:02 2008 : Debug: TLS_accept: Need to read more data: SSLv3 read client certificate A
Wed Mar 26 20:06:02 2008 : Debug: In SSL Handshake Phase
Wed Mar 26 20:06:02 2008 : Debug: In SSL Accept mode
Wed Mar 26 20:06:02 2008 : Debug: eaptls_process returned 13
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap_peap: EAPTLS_HANDLED
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authenticate]: returned from eap (rlm_eap) for request 37
Wed Mar 26 20:06:02 2008 : Debug: modcall[authenticate]: module "eap" returns handled for request 37
Wed Mar 26 20:06:02 2008 : Debug: modcall: leaving group authenticate (returns handled) for request 37
Sending Access-Challenge of id 0 to 192.168.49.120 port 3072
Framed-IP-Address := 192.168.49.135
Framed-Compression := Van-Jacobson-TCP-IP
Framed-Protocol := PPP
Service-Type := Framed-User
EAP-Message = 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
EAP-Message = 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
EAP-Message = 0x08fdd42b13fc64215e519ae30eea2c234108ebe0f74800750203010001a317301530130603551d25040c300a06082b06010505070301300d06092a864886f70d0101050500038181004788eebfe2e26322c1ee1d9cabcbb51f24f5ce4f0aa388aa00ea4557d7678c5b3b79c20cdb6c8fd5b8f83def37ee88df21d409fe7390b7caa08c7f2db9811aab7e0707c5aef0d9c65b337a5c0f886f7298f7253a51c5b7881c1769f55eb5589b7cbf02f66fb4c7331a50d2bb963aa26be8c107fe63349ea11e43992e1d44d63d0002f3308202ef30820258a0030201020209009353c388a6dca57a300d06092a864886f70d01010505003059310b300906035504
EAP-Message = 0x0613024445311830160603550408130f526865696e6c616e642d5066616c7a311330110603550407130a467265696e736865696d311b3019060355040a131249542d53657276696365204c65686e657273301e170d3038303332343139323430315a170d3039303332343139323430315a3059310b3009060355040613024445311830160603550408130f526865696e6c616e642d5066616c7a311330110603550407130a467265696e736865696d311b3019060355040a131249542d53657276696365204c65686e65727330819f300d06092a864886f70d010101050003818d0030818902818100a6ec85899113caa710af465763fed26d9e3b701e
EAP-Message = 0xf9f4f43fdb42c5e353be1468ecb7eef64eae39a5f310
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x874dfe03c4ee33b83575f036d85f6457
Wed Mar 26 20:06:02 2008 : Debug: Finished request 37
Wed Mar 26 20:06:02 2008 : Debug: Going to the next request
Wed Mar 26 20:06:02 2008 : Debug: Thread 3 waiting to be assigned a request
rad_recv: Access-Request packet from host 192.168.49.120:3072, id=0, length=136
Wed Mar 26 20:06:02 2008 : Debug: rl_next: returning NULL
Wed Mar 26 20:06:02 2008 : Debug: Waking up in 31 seconds...
Wed Mar 26 20:06:02 2008 : Debug: Thread 4 got semaphore
Wed Mar 26 20:06:02 2008 : Debug: Thread 4 handling request 38, (8 handled so far)
User-Name = "alex"
NAS-IP-Address = 192.168.49.120
Called-Station-Id = "001d7e08d132"
Calling-Station-Id = "00197e0012ba"
NAS-Identifier = "001d7e08d132"
NAS-Port = 40
Framed-MTU = 1400
State = 0x874dfe03c4ee33b83575f036d85f6457
NAS-Port-Type = Wireless-802.11
EAP-Message = 0x020200061900
Message-Authenticator = 0x1da5a0f435e953efd45c6a5ccae1ffb5
Wed Mar 26 20:06:02 2008 : Debug: Processing the authorize section of radiusd.conf
Wed Mar 26 20:06:02 2008 : Debug: modcall: entering group authorize for request 38
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 38
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 38
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "preprocess" returns ok for request 38
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 38
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 38
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "chap" returns noop for request 38
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 38
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 38
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "mschap" returns noop for request 38
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 38
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap: EAP packet type response id 2 length 6
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 38
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "eap" returns updated for request 38
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling files (rlm_files) for request 38
Wed Mar 26 20:06:02 2008 : Debug: users: Matched entry DEFAULT at line 153
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 38
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "files" returns ok for request 38
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: calling sql (rlm_sql) for request 38
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'alex'
Wed Mar 26 20:06:02 2008 : Debug: rlm_sql (sql): sql_set_user escaped user --> 'alex'
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'alex' ORDER BY id'
Wed Mar 26 20:06:02 2008 : Debug: rlm_sql (sql): Reserving sql socket id: 0
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'alex' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'alex' ORDER BY id'
Wed Mar 26 20:06:02 2008 : Debug: radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'alex' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
Wed Mar 26 20:06:02 2008 : Debug: rlm_sql (sql): Released sql socket id: 0
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authorize]: returned from sql (rlm_sql) for request 38
Wed Mar 26 20:06:02 2008 : Debug: modcall[authorize]: module "sql" returns ok for request 38
Wed Mar 26 20:06:02 2008 : Debug: modcall: leaving group authorize (returns updated) for request 38
Wed Mar 26 20:06:02 2008 : Debug: rad_check_password: Found Auth-Type EAP
Wed Mar 26 20:06:02 2008 : Debug: auth: type "EAP"
Wed Mar 26 20:06:02 2008 : Debug: Processing the authenticate section of radiusd.conf
Wed Mar 26 20:06:02 2008 : Debug: modcall: entering group authenticate for request 38
Wed Mar 26 20:06:02 2008 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 38
Wed Mar 26 20:06:02 2008 : Debug: rlm_eap: Request found, released from the list
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap: EAP/peap
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap: processing type peap
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap_peap: Authenticate
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap_tls: processing TLS
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap_tls: Received EAP-TLS ACK message
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap_tls: ack handshake fragment handler
Wed Mar 26 20:06:03 2008 : Debug: eaptls_verify returned 1
Wed Mar 26 20:06:03 2008 : Debug: eaptls_process returned 13
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap_peap: EAPTLS_HANDLED
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authenticate]: returned from eap (rlm_eap) for request 38
Wed Mar 26 20:06:03 2008 : Debug: modcall[authenticate]: module "eap" returns handled for request 38
Wed Mar 26 20:06:03 2008 : Debug: modcall: leaving group authenticate (returns handled) for request 38
Sending Access-Challenge of id 0 to 192.168.49.120 port 3072
Framed-IP-Address := 192.168.49.135
Framed-Compression := Van-Jacobson-TCP-IP
Framed-Protocol := PPP
Service-Type := Framed-User
EAP-Message = 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
EAP-Message = 0x76696365204c65686e6572738209009353c388a6dca57a300c0603551d13040530030101ff300d06092a864886f70d0101050500038181009b46ca32d2aabb05d9c326966fd85b9b8bc5f519e2f5ae802585785b67e5fda814c42e06d266cea4be7b19d4d8e1316fcf2a0898cc4e454c5260c1f6ec73d65ea8d56feb6898a4a7445c4c96172603f4bba1b5c537830156bab3a898e0cee09bc569560e3858408ff43d938c82a503f5eebfce866d8548104172ba00737587f916030100040e000000
Message-Authenticator = 0x00000000000000000000000000000000
State = 0xd4020eaa12a20e4d154ed8e6c10a228f
Wed Mar 26 20:06:03 2008 : Debug: Finished request 38
Wed Mar 26 20:06:03 2008 : Debug: Going to the next request
Wed Mar 26 20:06:03 2008 : Debug: Thread 4 waiting to be assigned a request
rad_recv: Access-Request packet from host 192.168.49.120:3072, id=0, length=136
Wed Mar 26 20:06:03 2008 : Debug: --- Walking the entire request list ---
Wed Mar 26 20:06:03 2008 : Debug: Waking up in 31 seconds...
Wed Mar 26 20:06:03 2008 : Debug: Thread 5 got semaphore
Wed Mar 26 20:06:03 2008 : Debug: Thread 5 handling request 39, (8 handled so far)
User-Name = "alex"
NAS-IP-Address = 192.168.49.120
Called-Station-Id = "001d7e08d132"
Calling-Station-Id = "00197e0012ba"
NAS-Identifier = "001d7e08d132"
NAS-Port = 40
Framed-MTU = 1400
State = 0xd4020eaa12a20e4d154ed8e6c10a228f
NAS-Port-Type = Wireless-802.11
EAP-Message = 0x020300061900
Message-Authenticator = 0x2256ea79b49d3579d60013c5acc300d2
Wed Mar 26 20:06:03 2008 : Debug: Processing the authorize section of radiusd.conf
Wed Mar 26 20:06:03 2008 : Debug: modcall: entering group authorize for request 39
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 39
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 39
Wed Mar 26 20:06:03 2008 : Debug: modcall[authorize]: module "preprocess" returns ok for request 39
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 39
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 39
Wed Mar 26 20:06:03 2008 : Debug: modcall[authorize]: module "chap" returns noop for request 39
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 39
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 39
Wed Mar 26 20:06:03 2008 : Debug: modcall[authorize]: module "mschap" returns noop for request 39
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 39
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap: EAP packet type response id 3 length 6
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 39
Wed Mar 26 20:06:03 2008 : Debug: modcall[authorize]: module "eap" returns updated for request 39
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authorize]: calling files (rlm_files) for request 39
Wed Mar 26 20:06:03 2008 : Debug: users: Matched entry DEFAULT at line 153
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 39
Wed Mar 26 20:06:03 2008 : Debug: modcall[authorize]: module "files" returns ok for request 39
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authorize]: calling sql (rlm_sql) for request 39
Wed Mar 26 20:06:03 2008 : Debug: radius_xlat: 'alex'
Wed Mar 26 20:06:03 2008 : Debug: rlm_sql (sql): sql_set_user escaped user --> 'alex'
Wed Mar 26 20:06:03 2008 : Debug: radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'alex' ORDER BY id'
Wed Mar 26 20:06:03 2008 : Debug: rlm_sql (sql): Reserving sql socket id: 4
Wed Mar 26 20:06:03 2008 : Debug: radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'alex' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
Wed Mar 26 20:06:03 2008 : Debug: radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'alex' ORDER BY id'
Wed Mar 26 20:06:03 2008 : Debug: radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'alex' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
Wed Mar 26 20:06:03 2008 : Debug: rlm_sql (sql): Released sql socket id: 4
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authorize]: returned from sql (rlm_sql) for request 39
Wed Mar 26 20:06:03 2008 : Debug: modcall[authorize]: module "sql" returns ok for request 39
Wed Mar 26 20:06:03 2008 : Debug: modcall: leaving group authorize (returns updated) for request 39
Wed Mar 26 20:06:03 2008 : Debug: rad_check_password: Found Auth-Type EAP
Wed Mar 26 20:06:03 2008 : Debug: auth: type "EAP"
Wed Mar 26 20:06:03 2008 : Debug: Processing the authenticate section of radiusd.conf
Wed Mar 26 20:06:03 2008 : Debug: modcall: entering group authenticate for request 39
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 39
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap: Request found, released from the list
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap: EAP/peap
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap: processing type peap
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap_peap: Authenticate
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap_tls: processing TLS
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap_tls: Received EAP-TLS ACK message
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap_tls: ack handshake fragment handler
Wed Mar 26 20:06:03 2008 : Debug: eaptls_verify returned 1
Wed Mar 26 20:06:03 2008 : Debug: eaptls_process returned 13
Wed Mar 26 20:06:03 2008 : Debug: rlm_eap_peap: EAPTLS_HANDLED
Wed Mar 26 20:06:03 2008 : Debug: modsingle[authenticate]: returned from eap (rlm_eap) for request 39
Wed Mar 26 20:06:03 2008 : Debug: modcall[authenticate]: module "eap" returns handled for request 39
Wed Mar 26 20:06:03 2008 : Debug: modcall: leaving group authenticate (returns handled) for request 39
Sending Access-Challenge of id 0 to 192.168.49.120 port 3072
Framed-IP-Address := 192.168.49.135
Framed-Compression := Van-Jacobson-TCP-IP
Framed-Protocol := PPP
Service-Type := Framed-User
EAP-Message = 0x010400061900
Message-Authenticator = 0x00000000000000000000000000000000
State = 0xb615e0e61433a9841994239bfcfc7864
Wed Mar 26 20:06:03 2008 : Debug: Finished request 39
Wed Mar 26 20:06:03 2008 : Debug: Going to the next request
Wed Mar 26 20:06:03 2008 : Debug: Thread 5 waiting to be assigned a request
Wed Mar 26 20:06:34 2008 : Debug: --- Walking the entire request list ---
Wed Mar 26 20:06:34 2008 : Debug: Cleaning up request 39 ID 0 with timestamp 47ea9e9b
Wed Mar 26 20:06:34 2008 : Debug: Nothing to do. Sleeping until we see a request.

Benutzer ist alex. dem hab ich ein Password gegeben und feste ip 192.168.49.135

und mein problem nr 2.
ich bekomm den wusb54gc auf dem debian client nicht zum laufen. der blinkt noch nicht mal wenn ich ihn in den usb stecke???? komische sache. der usb port geht aber. habs mit einem normalen stick probiert.
Member: aqui
aqui Mar 31, 2008 at 09:12:03 (UTC)
Goto Top
Nach den Log Meldungen sieht es ja so aus als ob Radius seitig alles sauber klappt. Der radius Server vermeldet keine Fehler und am Schluss gibt er ja auch raus das die entsprechende IP vergeben ist.
Vermutlich hast du also ein Client Problem !!??


Was dein Problem Nummer 2 anbetrifft musst du natürlich den passenden Treiber für den Stick installieren !!!
Einfach einstecken klappt so bei Linux (und auch Windows) natürlich nicht.
Der Linksys Stick hat einen Ralink Chip drin, der aber unter Linux spportet ist. Sieher hier:

http://linux-wless.passys.nl/query_part.php?brandname=Linksys

Unter der unten angegebenen Ralink URL findest du den treiber und auch eine Doku wie er einfach unter Linux einzubinden ist !
Ansonsten hat Dr. Google zig Links wenn du "wusb54gc + linux" als Suchkriterium angibst !
GermansolvedQuestionDebianLinux