FreeRadius+Cisco

Технические вопросы по UTM 5.0
Закрыто
tonix
Сообщения: 21
Зарегистрирован: Чт май 10, 2007 16:11

FreeRadius+Cisco

Сообщение tonix »

все так же пытаюсь настроить получение вызывающего IP при нас циско. Поставил фрирадиус, вот конфиги:

radiusd.conf

prefix = /usr/local
exec_prefix = ${prefix}
sysconfdir = ${prefix}/etc
localstatedir = ${prefix}/etc/raddb/log
sbindir = ${exec_prefix}/sbin
logdir = ${localstatedir}
raddbdir = ${sysconfdir}/raddb
radacctdir = ${logdir}/radacct
confdir = ${raddbdir}
run_dir = ${localstatedir}
log_file = ${logdir}/radius.log
libdir = ${exec_prefix}/lib
pidfile = ${run_dir}/radiusd.pid
user = root
group = wheel

max_request_time = 30
delete_blocked_requests = no
cleanup_delay = 5
max_requests = 1024
bind_address = 8
port = 0
hostname_lookups = no
allow_core_dumps = no
regular_expressions = no
extended_expressions = no
log_stripped_names = no
log_auth = yes
log_auth_badpass = yes
log_auth_goodpass = no
usercollide = no
lower_user = no
lower_pass = no
nospace_user = no
nospace_pass = no
#checkrad = ${sbindir}/checkrad

security {
max_attributes = 200
reject_delay = 1
status_server = no
}

$INCLUDE ${confdir}/clients.conf

thread pool {
start_servers = 5
max_servers = 32
min_spare_servers = 3
max_spare_servers = 10
max_requests_per_server = 0
}

modules {
pap {
}

chap {
authtype = CHAP
}

mschap {
#use_mppe = no
#require_encryption = yes
#require_strong = yes
#with_ntdomain_hack = no
}

$INCLUDE ${confdir}/sql.conf

always fail {
rcode = fail
}
always reject {
rcode = reject
}
always ok {
rcode = ok
simulcount = 0
mpp = no
}

}

authorize {
chap
mschap
sql
}

authenticate {
Auth-Type PAP {
pap
}

Auth-Type CHAP {
chap
}

Auth-Type MS-CHAP {
mschap
}
}

accounting {
sql
}


sql.conf :

sql {
driver = "rlm_sql_mysql"

server = "localhost"
login = "raduser"
password = "radpass"

radius_db = "UTM5"

authorize_check_query="SELECT ip_groups.ip_group_id, ip_groups.uname, 'Password>

authorize_reply_query = "SELECT id,uname,'Framed-IP-Address',INET_NTOA((ip+0x10>

accounting_stop_query="INSERT INTO dhs_sessions_log (account_id, recv_date, las>
}

Кароч, все стандартно, и вроде как рабочие конфиги брал, но в логе радиуса пишется:

Mon Sep 24 18:36:49 2007 : Info: Using deprecated naslist file. Support for this will go away soon.
Mon Sep 24 18:36:49 2007 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none?
Mon Sep 24 18:36:49 2007 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
Mon Sep 24 18:36:49 2007 : Info: rlm_sql (sql): Attempting to connect to raduser@localhost:/UTM5
Mon Sep 24 18:36:49 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0
Mon Sep 24 18:36:49 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1
Mon Sep 24 18:36:49 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2
Mon Sep 24 18:36:49 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3
Mon Sep 24 18:36:49 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4
Mon Sep 24 18:36:49 2007 : Info: Ready to process requests.

Закрыто