trying to get an ACK for a computone intelliserver

classic Classic list List threaded Threaded
3 messages Options
| Threaded
Open this post in threaded view
|

trying to get an ACK for a computone intelliserver

Users mailing list
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: trying to get an ACK for a computone intelliserver

Jorge Pereira-2
Well, Looks that you're replying correctly to the Access-Accept,
therefore you should check if the NAS expects extra attributes like
vlan, frame-type or anything else.

> Tue Jun 23 12:13:41 2020 : Debug: (0) Sent Access-Accept Id 1 from 192.168.81.1:1645 to 192.168.81.4:1882 length 0
> Tue Jun 23 12:13:41 2020 : Debug: (0)   State := 0x4040256939aa0f5d64a1f2a8c133ae6b4a
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Reply-Message += ""
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Reply-Message += ""
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Reply-Message += ""
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Reply-Message += ""
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Reply-Message += ""
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Reply-Message += ""
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Reply-Message += ""
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Reply-Message += ""
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Reply-Message += ""
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Reply-Message += ""
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Reply-Message += ""
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Reply-Message += ""
> Tue Jun 23 12:13:41 2020 : Debug: (0)   Class = 0x61693a6362626231633362643664323037393565303433613739633961373265616561
> Tue Jun 23 12:13:41 2020 : Debug: (0) Finished request
> Tue Jun 23 12:13:41 2020 : Debug: Waking up in 4.9 seconds.
> Tue Jun 23 12:13:46 2020 : Debug: (0) Cleaning up request packet ID 1 with timestamp +61
> Tue Jun 23 12:13:46 2020 : Info: Ready to process requests
> ^Croot@doctor:~ # /exit
>
> exit
>
> Script done on Tue Jun 23 12:14:09 2020
>
> Even if the usrname/password is correct, the NAS is not getting
> clearance to continue.  What bridge needs to built?
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: trying to get an ACK for a computone intelliserver

Alan DeKok-2
In reply to this post by Users mailing list

Pn Jun 23, 2020, at 2:25 PM, The Doctor via Freeradius-Users <[hidden email]> wrote:
> Script started on Tue Jun 23 12:12:11 2020
> You have mail.
> root@doctor:~ # /usr/freerad3/sbin/radiusd -X -sx

  So... you're not following the documentation, despite REPEATED instructions to do so.

> Tue Jun 23 12:12:40 2020 : Debug:   update {
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Serial}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Expiration}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Subject}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Issuer}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Common-Name}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Subject-Alt-Name-Email}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Serial}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Expiration}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Subject}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Issuer}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Common-Name}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Subject-Alt-Name-Email}"
> Tue Jun 23 12:12:40 2020 : Debug:   }

  I have no idea why you uncommented that.  It doesn't do anything useful.

> Even if the usrname/password is correct, the NAS is not getting
> clearance to continue.  What bridge needs to built?

  You're making random changes to the config, and failing to follow the documentation.

  Can you explain why you think it's important for you to not follow the documentation?

  Can you explain why you ask for help, and then ignore our advice?

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html