API tools faq
paste
Guest User

Untitled

a guest
May 1st, 2018
61
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 18.56 KB | None | 0 0
raw download clone embed print report
  1. Module: Linked to sub-module rlm_eap_peap
  2. Module: Instantiating eap-peap
  3. peap {
  4. default_eap_type = "mschapv2"
  5. copy_request_to_tunnel = no
  6. use_tunneled_reply = no
  7. proxy_tunneled_request_as_eap = yes
  8. virtual_server = "inner-tunnel"
  9. soh = no
  10. }
  11. Module: Linked to sub-module rlm_eap_mschapv2
  12. Module: Instantiating eap-mschapv2
  13. mschapv2 {
  14. with_ntdomain_hack = no
  15. send_error = no
  16. }
  17. Module: Checking authorize {...} for more modules to load
  18. Module: Linked to module rlm_preprocess
  19. Module: Instantiating module "preprocess" from file /usr/local/etc/raddb/modules/preprocess
  20. preprocess {
  21. huntgroups = "/usr/local/etc/raddb/huntgroups"
  22. hints = "/usr/local/etc/raddb/hints"
  23. with_ascend_hack = no
  24. ascend_channels_per_line = 23
  25. with_ntdomain_hack = no
  26. with_specialix_jetstream_hack = no
  27. with_cisco_vsa_hack = no
  28. with_alvarion_vsa_hack = no
  29. }
  30. Module: Linked to module rlm_realm
  31. Module: Instantiating module "suffix" from file /usr/local/etc/raddb/modules/realm
  32. realm suffix {
  33. format = "suffix"
  34. delimiter = "@"
  35. ignore_default = no
  36. ignore_null = no
  37. }
  38. Module: Linked to module rlm_sql
  39. Module: Instantiating module "sql" from file /usr/local/etc/raddb/sql.conf
  40. sql {
  41. driver = "rlm_sql_mysql"
  42. server = "localhost"
  43. port = "3306"
  44. login = "radius"
  45. password = "radpass"
  46. radius_db = "radius"
  47. read_groups = yes
  48. sqltrace = no
  49. sqltracefile = "/usr/local/var/log/radius/sqltrace.sql"
  50. readclients = no
  51. deletestalesessions = yes
  52. num_sql_socks = 5
  53. lifetime = 0
  54. max_queries = 0
  55. sql_user_name = "%{User-Name}"
  56. default_user_profile = ""
  57. nas_query = "SELECT id, nasname, shortname, type, secret, server FROM nas"
  58. authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id"
  59. authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id"
  60. authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id"
  61. authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id"
  62. accounting_onoff_query = " UPDATE radacct SET acctstoptime = '%S', acctsessiontime = unix_timestamp('%S') - unix_timestamp(acctstarttime), acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = %{%{Acct-Delay-Time}:-0} WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= '%S'"
  63. accounting_update_query = " UPDATE radacct SET framedipaddress = '%{Framed-IP-Address}', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'"
  64. accounting_update_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctsessiontime, acctauthentic, connectinfo_start, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, servicetype, framedprotocol, framedipaddress, acctstartdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Time}:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{X-Ascend-Session-Svr-Key}')"
  65. accounting_start_query = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{%{Acct-Delay-Time}:-0}', '0', '%{X-Ascend-Session-Svr-Key}')"
  66. accounting_start_query_alt = " UPDATE radacct SET acctstarttime = '%S', acctstartdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_start = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'"
  67. accounting_stop_query = " UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'"
  68. accounting_stop_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Time}:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{%{Acct-Delay-Time}:-0}')"
  69. group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority"
  70. connect_failure_retry_delay = 60
  71. simul_count_query = "SELECT COUNT(*) #FROM radacct #WHERE username = '%{SQL-User-Name}' #AND acctstoptime IS NULL"
  72. simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
  73. postauth_query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')"
  74. safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"
  75. }
  76. rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
  77. rlm_sql (sql): Attempting to connect to radius@localhost:3306/radius
  78. rlm_sql (sql): starting 0
  79. rlm_sql (sql): Attempting to connect rlm_sql_mysql #0
  80. rlm_sql_mysql: Starting connect to MySQL server for #0
  81. rlm_sql (sql): Connected new DB handle, #0
  82. rlm_sql (sql): starting 1
  83. rlm_sql (sql): Attempting to connect rlm_sql_mysql #1
  84. rlm_sql_mysql: Starting connect to MySQL server for #1
  85. rlm_sql (sql): Connected new DB handle, #1
  86. rlm_sql (sql): starting 2
  87. rlm_sql (sql): Attempting to connect rlm_sql_mysql #2
  88. rlm_sql_mysql: Starting connect to MySQL server for #2
  89. rlm_sql (sql): Connected new DB handle, #2
  90. rlm_sql (sql): starting 3
  91. rlm_sql (sql): Attempting to connect rlm_sql_mysql #3
  92. rlm_sql_mysql: Starting connect to MySQL server for #3
  93. rlm_sql (sql): Connected new DB handle, #3
  94. rlm_sql (sql): starting 4
  95. rlm_sql (sql): Attempting to connect rlm_sql_mysql #4
  96. rlm_sql_mysql: Starting connect to MySQL server for #4
  97. rlm_sql (sql): Connected new DB handle, #4
  98. Module: Linked to module rlm_sqlcounter
  99. Module: Instantiating module "volumelimitcounter" from file /usr/local/etc/raddb/sqlcounter.conf
  100. sqlcounter volumelimitcounter {
  101. counter-name = "Total-Max-Octets"
  102. check-name = "Max-Octets"
  103. reply-name = "ChilliSpot-Max-Total-Octets"
  104. key = "User-Name"
  105. sqlmod-inst = "sql"
  106. query = "SELECT SUM(AcctOutputOctets+AcctInputOctets) FROM radacct where UserName='%{User-Name}'"
  107. reset = "never"
  108. safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"
  109. }
  110. rlm_sqlcounter: Reply attribute ChilliSpot-Max-Total-Octets is number 954138627
  111. rlm_sqlcounter: Counter attribute Total-Max-Octets is number 11273
  112. rlm_sqlcounter: Check attribute Max-Octets is number 11274
  113. rlm_sqlcounter: Current Time: 1323806811 [2011-12-13 21:06:51], Next reset 0 [2011-12-13 21:00:00]
  114. rlm_sqlcounter: Current Time: 1323806811 [2011-12-13 21:06:51], Prev reset 0 [2011-12-13 21:00:00]
  115. Module: Checking preacct {...} for more modules to load
  116. Module: Linked to module rlm_acct_unique
  117. Module: Instantiating module "acct_unique" from file /usr/local/etc/raddb/modules/acct_unique
  118. acct_unique {
  119. key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"
  120. }
  121. Module: Linked to module rlm_files
  122. Module: Instantiating module "files" from file /usr/local/etc/raddb/modules/files
  123. files {
  124. usersfile = "/usr/local/etc/raddb/users"
  125. acctusersfile = "/usr/local/etc/raddb/acct_users"
  126. preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users"
  127. compat = "no"
  128. }
  129. Module: Checking accounting {...} for more modules to load
  130. Module: Linked to module rlm_attr_filter
  131. Module: Instantiating module "attr_filter.accounting_response" from file /usr/local/etc/raddb/modules/attr_filter
  132. attr_filter attr_filter.accounting_response {
  133. attrsfile = "/usr/local/etc/raddb/attrs.accounting_response"
  134. key = "%{User-Name}"
  135. relaxed = no
  136. }
  137. Module: Checking session {...} for more modules to load
  138. Module: Checking post-proxy {...} for more modules to load
  139. Module: Checking post-auth {...} for more modules to load
  140. Module: Instantiating module "attr_filter.access_reject" from file /usr/local/etc/raddb/modules/attr_filter
  141. attr_filter attr_filter.access_reject {
  142. attrsfile = "/usr/local/etc/raddb/attrs.access_reject"
  143. key = "%{User-Name}"
  144. relaxed = no
  145. }
  146. } # modules
  147. } # server
  148. server inner-tunnel { # from file /usr/local/etc/raddb/sites-enabled/inner-tunnel
  149. modules {
  150. Module: Checking authenticate {...} for more modules to load
  151. Module: Checking authorize {...} for more modules to load
  152. Module: Checking session {...} for more modules to load
  153. Module: Linked to module rlm_radutmp
  154. Module: Instantiating module "radutmp" from file /usr/local/etc/raddb/modules/radutmp
  155. radutmp {
  156. filename = "/usr/local/var/log/radius/radutmp"
  157. username = "%{User-Name}"
  158. case_sensitive = yes
  159. check_with_nas = yes
  160. perm = 384
  161. callerid = yes
  162. }
  163. Module: Checking post-proxy {...} for more modules to load
  164. Module: Checking post-auth {...} for more modules to load
  165. } # modules
  166. } # server
  167. radiusd: #### Opening IP addresses and Ports ####
  168. listen {
  169. type = "auth"
  170. ipaddr = *
  171. port = 0
  172. }
  173. listen {
  174. type = "acct"
  175. ipaddr = *
  176. port = 0
  177. }
  178. listen {
  179. type = "control"
  180. listen {
  181. socket = "/usr/local/var/run/radiusd/radiusd.sock"
  182. }
  183. }
  184. listen {
  185. type = "auth"
  186. ipaddr = 127.0.0.1
  187. port = 18120
  188. }
  189. ... adding new socket proxy address * port 42170
  190. Listening on authentication address * port 1812
  191. Listening on accounting address * port 1813
  192. Listening on command file /usr/local/var/run/radiusd/radiusd.sock
  193. Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel
  194. Listening on proxy address * port 1814
  195. Ready to process requests.
  196. rad_recv: Access-Request packet from host 192.168.77.1 port 64714, id=43, length=129
  197. NAS-IP-Address = 192.168.10.48
  198. NAS-Identifier = "m0n0wall.local"
  199. User-Name = "test1"
  200. User-Password = "test"
  201. Service-Type = Login-User
  202. NAS-Port-Type = Ethernet
  203. NAS-Port = 0
  204. Framed-IP-Address = 192.168.77.2
  205. Called-Station-Id = "00:0c:29:5c:6c:6d"
  206. Calling-Station-Id = "18:03:73:ba:95:a4"
  207. # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/defaultBACKUP0812
  208. +- entering group authorize {...}
  209. ++[preprocess] returns ok
  210. ++[chap] returns noop
  211. ++[mschap] returns noop
  212. ++[digest] returns noop
  213. [suffix] No '@' in User-Name = "test1", looking up realm NULL
  214. [suffix] No such realm "NULL"
  215. ++[suffix] returns noop
  216. [eap] No EAP-Message, not doing EAP
  217. ++[eap] returns noop
  218. [sql] expand: %{User-Name} -> test1
  219. [sql] sql_set_user escaped user --> 'test1'
  220. rlm_sql (sql): Reserving sql socket id: 4
  221. [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test1' ORDER BY id
  222. [sql] User found in radcheck table
  223. [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test1' ORDER BY id
  224. [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'test1' ORDER BY priority
  225. rlm_sql (sql): Released sql socket id: 4
  226. ++[sql] returns ok
  227. rlm_sqlcounter: Entering module authorize code
  228. sqlcounter_expand: 'SELECT SUM(AcctOutputOctets+AcctInputOctets) FROM radacct where UserName='%{User-Name}''
  229. [volumelimitcounter] expand: SELECT SUM(AcctOutputOctets+AcctInputOctets) FROM radacct where UserName='%{User-Name}' -> SELECT SUM(AcctOutputOctets+AcctInputOctets) FROM radacct where UserName='test1'
  230. WARNING: Please replace '%S' with '${sqlmod-inst}'
  231. sqlcounter_expand: '%{sql:SELECT SUM(AcctOutputOctets+AcctInputOctets) FROM radacct where UserName='test1'}'
  232. [volumelimitcounter] sql_xlat
  233. [volumelimitcounter] expand: %{User-Name} -> test1
  234. [volumelimitcounter] sql_set_user escaped user --> 'test1'
  235. [volumelimitcounter] expand: SELECT SUM(AcctOutputOctets+AcctInputOctets) FROM radacct where UserName='test1' -> SELECT SUM(AcctOutputOctets+AcctInputOctets) FROM radacct where UserName='test1'
  236. rlm_sql (sql): Reserving sql socket id: 3
  237. [volumelimitcounter] sql_xlat finished
  238. rlm_sql (sql): Released sql socket id: 3
  239. [volumelimitcounter] expand: %{sql:SELECT SUM(AcctOutputOctets+AcctInputOctets) FROM radacct where UserName='test1'} -> 25687864955
  240. rlm_sqlcounter: (Check item - counter) is less than zero
  241. rlm_sqlcounter: Rejected user test1, check_item=4294967295, counter=4294967295
  242. ++[volumelimitcounter] returns reject
  243. Using Post-Auth-Type Reject
  244. # Executing group from file /usr/local/etc/raddb/sites-enabled/defaultBACKUP0812
  245. +- entering group REJECT {...}
  246. [attr_filter.access_reject] expand: %{User-Name} -> test1
  247. attr_filter: Matched entry DEFAULT at line 11
  248. ++[attr_filter.access_reject] returns updated
  249. Delaying reject of request 0 for 1 seconds
  250. Going to the next request
  251. Waking up in 0.9 seconds.
  252. Sending delayed reject for request 0
  253. Sending Access-Reject of id 43 to 192.168.77.1 port 64714
  254. Reply-Message = "Your maximum never usage time has been reached"
  255. Waking up in 4.9 seconds.
  256. Cleaning up request 0 ID 43 with timestamp +38
  257. Ready to process requests.
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!