mpd5.3 freeradius проблема

[agnitumus]

Люди ужасная проблема помогите
FreeBSD aida-core 7.0-RELEASE FreeBSD 7.0-RELEASE #1: Wed Oct 15 01:26:52 UTC 2008
В этой связке у меня абон заходит и продерживаеться на связи пока не пройдёт "set radius timeout 5" таймаут

FreeRadius2 + Mpd5.2(5.3)
Конфиг mpd5

Код: Выделить всё

startup:
# configure mpd users
 set console self 127.0.0.1 5005
 set console open
 log +radius2
#configure the web server
 set web self 0.0.0.0 5006
 set web open
 #set iface enable netflow-in.
 #set iface enable netflow-out.
default:
 load def_conf
def_conf:
 create bundle template B
 set iface idle 0
 #set iface enable ipacct
 set ipcp ranges 10.0.0.9 10.0.0.0/22
 set ipcp dns 10.0.0.9
 set ipcp nbns 10.0.0.9
 create link template PPPoE pppoe
#set link enable multilink
 set link action bundle B
 load radius
 set link keep-alive 10 60
 set link disable chap pap eap
 set link no acfcomp protocomp.
 set link no pap chap.
 set link enable pap.
 set link enable report-mac
 set pppoe service "*"
 create link template sk0 PPPoE
 set pppoe iface sk0
 set link enable incoming
 set iface mtu 1500
 set link mtu 1500
 set link enable peer-as-calling.
radius:
    set radius server localhost myrad 1812 1813
    set radius me 127.0.0.1
    set radius retries 3
    set radius timeout 5

    set auth disable internal

    set auth enable radius-auth
    set auth enable radius-acct

    set auth acct-update 60
    set radius enable message-authentic

Авторизация по радиусу проходит ... А вот mpd я так понимаю не может договорится с Radius

логи :
Radius.log

Код: Выделить всё

Mon May 18 09:26:48 2009 : Auth: Login OK: [user] (from client localhost port 4 cli 00:21:91:2c:ae:8a / 00:21:91:2c:ae:8a / sk0)

Mpd.log (другого абона)

Код: Выделить всё

May 18 09:14:33 aida-core mpd: Incoming PPPoE connection request via sk0: for service "" from 00:1d:60:ec:e1:d1
May 18 09:14:33 aida-core mpd: [sk0-24] Accepting PPPoE connection
May 18 09:14:33 aida-core mpd: [sk0-24] Link: OPEN event
May 18 09:14:33 aida-core mpd: [sk0-24] LCP: Open event
May 18 09:14:33 aida-core mpd: [sk0-24] LCP: state change Initial --> Starting
May 18 09:14:33 aida-core mpd: [sk0-24] LCP: LayerStart
May 18 09:14:33 aida-core mpd: [sk0-24] PPPoE: connection successful
May 18 09:14:33 aida-core mpd: [sk0-24] Link: UP event
May 18 09:14:33 aida-core mpd: [sk0-24] LCP: Up event
May 18 09:14:33 aida-core mpd: [sk0-24] LCP: state change Starting --> Req-Sent
May 18 09:14:33 aida-core mpd: [sk0-24] LCP: SendConfigReq #1
May 18 09:14:33 aida-core mpd: [sk0-24]   PROTOCOMP
May 18 09:14:33 aida-core mpd: [sk0-24]   MRU 1492
May 18 09:14:33 aida-core mpd: [sk0-24]   MAGICNUM 0e47fcb0
May 18 09:14:33 aida-core mpd: [sk0-24]   AUTHPROTO PAP
May 18 09:14:33 aida-core mpd: [sk0-24] LCP: rec'd Configure Request #0 (Req-Sent)
May 18 09:14:33 aida-core mpd: [sk0-24]   MRU 1480
May 18 09:14:33 aida-core mpd: [sk0-24]   MAGICNUM 411c63c1
May 18 09:14:33 aida-core mpd: [sk0-24]   PROTOCOMP
May 18 09:14:33 aida-core mpd: [sk0-24]   ACFCOMP
May 18 09:14:33 aida-core mpd: [sk0-24]   CALLBACK 6
May 18 09:14:33 aida-core mpd: [sk0-24] LCP: SendConfigRej #0
May 18 09:14:33 aida-core mpd: [sk0-24]   ACFCOMP
May 18 09:14:33 aida-core mpd: [sk0-24]   CALLBACK 6
May 18 09:14:33 aida-core mpd: [sk0-24] LCP: rec'd Configure Request #1 (Req-Sent)
May 18 09:14:33 aida-core mpd: [sk0-24]   MRU 1480
May 18 09:14:33 aida-core mpd: [sk0-24]   MAGICNUM 411c63c1
May 18 09:14:33 aida-core mpd: [sk0-24]   PROTOCOMP
May 18 09:14:33 aida-core mpd: [sk0-24] LCP: SendConfigAck #1
May 18 09:14:33 aida-core mpd: [sk0-24]   MRU 1480
May 18 09:14:33 aida-core mpd: [sk0-24]   MAGICNUM 411c63c1
May 18 09:14:33 aida-core mpd: [sk0-24]   PROTOCOMP
May 18 09:14:33 aida-core mpd: [sk0-24] LCP: state change Req-Sent --> Ack-Sent
May 18 09:14:35 aida-core mpd: [sk0-24] LCP: SendConfigReq #2
May 18 09:14:35 aida-core mpd: [sk0-24]   PROTOCOMP
May 18 09:14:35 aida-core mpd: [sk0-24]   MRU 1492
May 18 09:14:35 aida-core mpd: [sk0-24]   MAGICNUM 0e47fcb0
May 18 09:14:35 aida-core mpd: [sk0-24]   AUTHPROTO PAP
May 18 09:14:35 aida-core mpd: [sk0-24] LCP: rec'd Configure Ack #2 (Ack-Sent)
May 18 09:14:35 aida-core mpd: [sk0-24]   PROTOCOMP
May 18 09:14:35 aida-core mpd: [sk0-24]   MRU 1492
May 18 09:14:35 aida-core mpd: [sk0-24]   MAGICNUM 0e47fcb0
May 18 09:14:35 aida-core mpd: [sk0-24]   AUTHPROTO PAP
May 18 09:14:35 aida-core mpd: [sk0-24] LCP: state change Ack-Sent --> Opened
May 18 09:14:35 aida-core mpd: [sk0-24] LCP: auth: peer wants nothing, I want PAP
May 18 09:14:35 aida-core mpd: [sk0-24] LCP: LayerUp
May 18 09:14:35 aida-core mpd: [sk0-24] LCP: rec'd Ident #2 (Opened)
May 18 09:14:35 aida-core mpd: [sk0-24]   MESG: MSRASV5.20
May 18 09:14:35 aida-core mpd: [sk0-24] LCP: rec'd Ident #3 (Opened)
May 18 09:14:35 aida-core mpd: [sk0-24]   MESG: MSRAS-0-AID-ADMIN
May 18 09:14:35 aida-core mpd: [sk0-24] LCP: rec'd Ident #4 (Opened)
May 18 09:14:35 aida-core mpd: [sk0-24]   MESG: ^]^TWЦеёєEM-^Tу^O^E^P??M-^F
May 18 09:14:35 aida-core mpd: [sk0-24] PAP: rec'd REQUEST #44 len: 32
May 18 09:14:35 aida-core mpd: [sk0-24] AUTH: Trying INTERNAL
May 18 09:14:35 aida-core mpd: [sk0-24] AUTH: INTERNAL returned: undefined
May 18 09:14:35 aida-core mpd: [sk0-24] PAP: Auth return status: undefined
May 18 09:14:35 aida-core mpd: [sk0-24] PAP: Response is valid
May 18 09:14:35 aida-core mpd: [sk0-24] PAP: Reply message: Welcome
May 18 09:14:35 aida-core mpd: [sk0-24] PAP: sending ACK #44 len: 12
May 18 09:14:35 aida-core mpd: [sk0-24] LCP: authorization successful
May 18 09:14:35 aida-core mpd: [sk0-24] Link: Matched action 'bundle "B" ""'
May 18 09:14:35 aida-core mpd: [sk0-24] Creating new bundle using template "B".
May 18 09:14:35 aida-core mpd: [B-23] Bundle: Interface ng22 created
May 18 09:14:35 aida-core mpd: [sk0-24] Link: Join bundle "B-23"
May 18 09:14:35 aida-core mpd: [B-23] Bundle: Status update: up 1 link, total bandwidth 64000 bps
May 18 09:14:35 aida-core mpd: [B-23] IPCP: Open event
May 18 09:14:35 aida-core mpd: [B-23] IPCP: state change Initial --> Starting
May 18 09:14:35 aida-core mpd: [B-23] IPCP: LayerStart
May 18 09:14:35 aida-core mpd: [B-23] IPCP: Up event
May 18 09:14:35 aida-core mpd: [B-23] IPCP: state change Starting --> Req-Sent
May 18 09:14:35 aida-core mpd: [B-23] IPCP: SendConfigReq #1
May 18 09:14:35 aida-core mpd: [B-23]   IPADDR 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
May 18 09:14:35 aida-core mpd: [sk0-24] rec'd unexpected protocol IPV6CP, rejecting
May 18 09:14:35 aida-core mpd: [B-23] IPCP: rec'd Configure Request #6 (Req-Sent)
May 18 09:14:35 aida-core mpd: [B-23]   IPADDR 0.0.0.0
May 18 09:14:35 aida-core mpd: [B-23]     NAKing with 10.0.3.8
May 18 09:14:35 aida-core mpd: [B-23]   PRIDNS 0.0.0.0
May 18 09:14:35 aida-core mpd: [B-23]     NAKing with 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23]   PRINBNS 0.0.0.0
May 18 09:14:35 aida-core mpd: [B-23]     NAKing with 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23]   SECDNS 0.0.0.0
May 18 09:14:35 aida-core mpd: [B-23]   SECNBNS 0.0.0.0
May 18 09:14:35 aida-core mpd: [B-23] IPCP: SendConfigRej #6
May 18 09:14:35 aida-core mpd: [B-23]   SECDNS 0.0.0.0
May 18 09:14:35 aida-core mpd: [B-23]   SECNBNS 0.0.0.0
May 18 09:14:35 aida-core mpd: [B-23] IPCP: rec'd Configure Reject #1 (Req-Sent)
May 18 09:14:35 aida-core mpd: [B-23]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
May 18 09:14:35 aida-core mpd: [B-23] IPCP: SendConfigReq #2
May 18 09:14:35 aida-core mpd: [B-23]   IPADDR 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23] IPCP: rec'd Configure Request #7 (Req-Sent)
May 18 09:14:35 aida-core mpd: [B-23]   IPADDR 0.0.0.0
May 18 09:14:35 aida-core mpd: [B-23]     NAKing with 10.0.3.8
May 18 09:14:35 aida-core mpd: [B-23]   PRIDNS 0.0.0.0
May 18 09:14:35 aida-core mpd: [B-23]     NAKing with 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23]   PRINBNS 0.0.0.0
May 18 09:14:35 aida-core mpd: [B-23]     NAKing with 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23] IPCP: SendConfigNak #7
May 18 09:14:35 aida-core mpd: [B-23]   IPADDR 10.0.3.8
May 18 09:14:35 aida-core mpd: [B-23]   PRIDNS 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23]   PRINBNS 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23] IPCP: rec'd Configure Ack #2 (Req-Sent)
May 18 09:14:35 aida-core mpd: [B-23]   IPADDR 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23] IPCP: state change Req-Sent --> Ack-Rcvd
May 18 09:14:35 aida-core mpd: [B-23] IPCP: rec'd Configure Request #8 (Ack-Rcvd)
May 18 09:14:35 aida-core mpd: [B-23]   IPADDR 10.0.3.8
May 18 09:14:35 aida-core mpd: [B-23]     10.0.3.8 is OK
May 18 09:14:35 aida-core mpd: [B-23]   PRIDNS 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23]   PRINBNS 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23] IPCP: SendConfigAck #8
May 18 09:14:35 aida-core mpd: [B-23]   IPADDR 10.0.3.8
May 18 09:14:35 aida-core mpd: [B-23]   PRIDNS 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23]   PRINBNS 10.0.0.9
May 18 09:14:35 aida-core mpd: [B-23] IPCP: state change Ack-Rcvd --> Opened
May 18 09:14:35 aida-core mpd: [B-23] IPCP: LayerUp
May 18 09:14:35 aida-core mpd: [B-23]   10.0.0.9 -> 10.0.3.8
May 18 09:14:35 aida-core mpd: [B-23] IFACE: Up event

и после таймаута:

Код: Выделить всё

May 18 09:26:16 aida-core mpd: [sk0-11] RADIUS: Sending request for user 'user'
May 18 09:26:16 aida-core mpd: [sk0-11] RADIUS: rad_send_request for user 'user' failed: No valid RADIUS responses received
May 18 09:26:16 aida-core mpd: [sk0-11] ACCT: Close link due to accounting start error
May 18 09:26:16 aida-core mpd: [sk0-11] ACCT: Link close requested by the accounting
May 18 09:26:16 aida-core mpd: [sk0-11] Link: CLOSE event
May 18 09:26:16 aida-core mpd: [sk0-11] LCP: Close event
May 18 09:26:16 aida-core mpd: [sk0-11] LCP: state change Opened --> Closing
May 18 09:26:16 aida-core mpd: [sk0-11] Link: Leave bundle "B-3"
May 18 09:26:16 aida-core mpd: [sk0-11] RADIUS: Accounting user 'user' (Type: 2)

Куда копать помогите!!!

[Хостинг HostFood.ru]

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

[paradox]

мда уж
реально какая то каша у вас там твориться

[agnitumus]

Проблема пропадает если
закоментить

Код: Выделить всё

set auth enable radius-acct

НО по прежнему не заноситься ничего в radacct

HELP

[Abigor]

что говорит команда?

Код: Выделить всё

radtest user_vpn pass_vpn 127.0.0.1 0 radius_pass

[agnitumus]

Код: Выделить всё

Sending Access-Request of id 184 to 127.0.0.1 port 1812
        User-Name = "roma"
        User-Password = "2002"
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 0
rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=184, length=263
        Framed-IP-Address = 10.0.3.35
        mpd-limit = "in#1=all shape 512000 pass"
        mpd-limit = "out#1=all shape 512000 pass"
        mpd-filter = "3#1=match dst net 10.0.0.0/22"
        Framed-Protocol = PPP
        Framed-IP-Netmask = 255.255.255.255

Я так понимаю проблема на уровне mpd freebsd7

[paradox]

а теперь аккаунт реквес сделай
что радиус вернет

акссес работает это и по mpd видно

[agnitumus]

а теперь аккаунт реквес сделай
что радиус вернет

акссес работает это и по mpd видно

Обьясни не понял, то за acount request

[paradox]

ой ну это долго обьяснять
почитай форум+литературу

вообще тебя радиус отбивает по аккаунт реквесту
поэтому mpd и отрубаеться

где то в радиусе кривизна

[agnitumus]

Дело в том, что теже самые конфиги на другом серваке, но с freebsd 6.2 всё пашет!!! ))

[paradox]

ищи как лог включаеться на радиусе и mpd
и смотри вниматиельнее момент аккаунтинга
кто там кому чего не может рассказать

[agnitumus]

Нашёл вот это
+- entering group preacct {...}
++[preprocess] returns ok
[acct_unique] Hashing 'NAS-Port = 28,Client-IP-Address = 127.0.0.1,NAS-IP-Address = 127.0.0.1,Acct-Session-Id = "2751527-PPPoE-28",User-Name = "administrator
[acct_unique] Acct-Unique-Session-ID = "a4e4635c6bd31687".
++[acct_unique] returns ok
[suffix] No '@' in User-Name = "administrator", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
+- entering group accounting {...}
[detail] expand: /var/log/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/radacct/127.0.0.1/detail-20090519
[detail] /var/log/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radacct/127.0.0.1/detail-20090519
[detail] expand: %t -> Tue May 19 19:45:57 2009
++[detail] returns ok
++[unix] returns fail
Finished request 183.

И ещё
[sql_log] Processing sql_log_postauth
[sql_log] <---->expand: %{User-Name} -> ksander
[sql_log] <---->expand: %{%{User-Name}:-DEFAULT} -> ksander
[sql_log] sql_set_user escaped user --> 'ksander'
[sql_log] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details
[sql_log] <---->expand: INSERT INTO radpostauth <----> (username, pass, reply, authdate) VALUES <-> ('%{User-Name}', '%{
[sql_log] <---->expand: /var/log/radacct/sql-relay -> /var/log/radacct/sql-relay
++[sql_log] returns ok
++[exec] returns noop


ПОМОГИТЕ

[agnitumus]

Всем кто помагал респект проблема тупая как ужас ...
не было файло radutmp и radwtmp создал и вуаля ...
ТЕМА ЗАКРЫТА...

[paradox]

яж говорю любая проблема от нежелания в ней разбираться))
если бы логи с самого начала смотрел
быстрее бы нашел

[scharfikus]

Всем кто помагал респект проблема тупая как ужас ...
не было файло radutmp и radwtmp создал и вуаля ...
ТЕМА ЗАКРЫТА...

можно по подробнее про решение этой проблемы... уперся в такое же.

[agnitumus]

берёшь создаешь файлы эти в директории с логами системными
владельцем файлов делаешь radiusd:radiusd
можешь постучаться 209*958*930 помогу

[zasranec]

Спасибо большое. Пол дня промучился. Теперь все работает