Опишу свою ситуацию по-шагово
1) Сделал патч на ядро mppe и патч для подсчета на 4 зоны траффика
2) Сделал патч на PPPD ipv4zones.patch
3) Установил FreeRadius и сделал настройки
4) Установил Abills
При тесте через radtest такой ответ:
Код: Выделить всё
root@stats:/usr/local/radiusd/bin# ./radtest lesha lesha 127.0.0.1:1812 0 radsecret 0 10.10.10.10
Sending Access-Request of id 130 to 127.0.0.1 port 1812
User-Name = "lesha"
User-Password = "lesha"
NAS-IP-Address = 10.10.10.10
NAS-Port = 0
Framed-Protocol = PPP
rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=130, length=20
2006-11-10 18:02:21 LOG_INFO: AUTH [lesha] NAS: 1 (10.10.10.10) GT: 0.05135
Теперь подключаюсь по ВПН с виндоус клиента:
Соединение не проходит (
Мои настройки:
pppd.options
Код: Выделить всё
ipparam PoPToP
lock
name pptpd
mtu 1490
mru 1490
ms-dns 10.10.11.11
proxyarp
auth
-pap
+chap
+mschap-v2
+mschap
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 30
lcp-echo-interval 5
deflate 0
mppe stateless
plugin radius.so
plugin radattr.so
Код: Выделить всё
auth_order radius
login_tries 4
login_timeout 60
nologin /etc/nologin
issue /etc/radiusclient/issue
authserver 127.0.0.1
acctserver 127.0.0.1
servers /etc/radiusclient/servers
dictionary /etc/radiusclient/dictionary
login_radius /usr/sbin/login.radius
seqfile /var/run/radius.seq
mapfile /etc/radiusclient/port-id-map
default_realm
radius_timeout 10
radius_retries 3
login_local /bin/login
Вот такие логи выдает система:
messages
Код: Выделить всё
Nov 10 17:43:46 stats pptpd[7220]: CTRL: Client 10.10.10.198 control connection started
Nov 10 17:43:46 stats pptpd[7220]: CTRL: Starting call (launching pppd, opening GRE)
Nov 10 17:43:46 stats pppd[7221]: Plugin radius.so loaded.
Nov 10 17:43:46 stats pppd[7221]: RADIUS plugin initialized.
Nov 10 17:43:46 stats pppd[7221]: Plugin radattr.so loaded.
Nov 10 17:43:46 stats pppd[7221]: RADATTR plugin initialized.
Nov 10 17:43:46 stats pppd[7221]: pppd 2.4.3 started by root, uid 0
Nov 10 17:43:46 stats pppd[7221]: Using interface ppp0
Nov 10 17:43:46 stats pppd[7221]: Connect: ppp0 <--> /dev/pts/3
Nov 10 17:43:49 stats pppd[7221]: Connection terminated.
Nov 10 17:43:49 stats pppd[7221]: Exit.
Nov 10 17:43:49 stats pptpd[7220]: CTRL: Client 10.10.10.198 control connection finished
Код: Выделить всё
Nov 10 17:43:41 stats pptpd[7218]: MGR: Max connections reached, extra IP addresses ignored
Nov 10 17:43:46 stats pptpd[7220]: GRE: Bad checksum from pppd.
Nov 10 17:43:49 stats pptpd[7220]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Nov 10 17:43:49 stats pppd[7221]: rc_avpair_new: unknown attribute 11
Nov 10 17:43:49 stats pppd[7221]: rc_avpair_new: unknown attribute 25
Nov 10 17:43:49 stats pppd[7221]: rc_check_reply: received invalid reply digest from RADIUS server
Nov 10 17:43:49 stats pppd[7221]: Peer klok failed CHAP authentication
Nov 10 17:43:49 stats pptpd[7220]: GRE: read(fd=6,buffer=804e680,len=8196) from PTY failed: status = -1 error = Input/output error, usually c
aused by unexpected termination of pppd, check option syntax and pppd logs
Nov 10 17:43:49 stats pptpd[7220]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
Код: Выделить всё
rad_recv: Access-Request packet from host 127.0.0.1:32768, id=130, length=62
User-Name = "lesha"
User-Password = "lesha"
NAS-IP-Address = 10.10.10.10
NAS-Port = 0
Framed-Protocol = PPP
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 10
modcall[authorize]: module "preprocess" returns ok for request 10
rlm_realm: No '@' in User-Name = "lesha", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 10
users: Matched entry DEFAULT at line 216
modcall[authorize]: module "files" returns ok for request 10
modcall: leaving group authorize (returns ok) for request 10
rad_check_password: Found Auth-Type Accept
rad_check_password: Auth-Type = Accept, accepting the user
radius_xlat: '/usr/abills/libexec/rauth.pl'
Exec-Program: /usr/abills/libexec/rauth.pl
Exec-Program output: Session-Timeout = 1749459, Octets-Direction = 0, Framed-IP-Address = 10.10.11.22, Session-Octets-Limit = 104857600, Fram
ed-IP-Netmask = 255.255.255.255,
Exec-Program-Wait: plaintext: Session-Timeout = 1749459, Octets-Direction = 0, Framed-IP-Address = 10.10.11.22, Session-Octets-Limit = 104857
600, Framed-IP-Netmask = 255.255.255.255,
Exec-Program: returned: 0
Sending Access-Accept of id 130 to 127.0.0.1 port 32768
Finished request 10
Going to the next request
--- Walking the entire request list ---
Waking up in 4 seconds...
Подскажите )